https://github.com/zxsecurity/nmeadesync

A tool which allows an attacker to change the time on a GPS-enabled NTP server by using spoofed NEMA sentences
https://github.com/zxsecurity/nmeadesync

Last synced: 23 days ago
JSON representation

A tool which allows an attacker to change the time on a GPS-enabled NTP server by using spoofed NEMA sentences

• Host: GitHub
• URL: https://github.com/zxsecurity/nmeadesync
• Owner: zxsecurity
• Created: 2017-03-07T03:19:09.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2017-06-24T03:17:50.000Z (over 7 years ago)
• Last Synced: 2024-08-04T09:06:03.242Z (4 months ago)
• Language: Python
• Homepage:
• Size: 4.88 KB
• Stars: 24
• Watchers: 4
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-network-stuff - **18**星 - enabled NTP server by using spoofed NEMA sentences (<a id="295e14c39bf33cd5136be8ced9383746"></a>工具 / <a id="f855508acfc870b1f0d90ff316f1dd75"></a>伪造&&Spoof)

README

        
# NMEAdesync

NMEAdesync is a tool which will output NMEA sentences to stdout. Using [socat](http://www.dest-unreach.org/socat/) you can redirect this output to NTPd and move time. NMEAdesync will be first prensented during a conference talk at [BSidesCBR 2017](http://www.bsidesau.com.au/speakers.html#david).

NMEAdesync will send NMEA senetences with a spoof time to NTPd and also a spoofed PPS 

## Requirements

NTPd using NMEA data over serial as the time, with PPS for accuarete timing. I set up a Pi using this [guide](https://frillip.com/raspberry-pi-stratum-1-ntp-server/).

## Running

1. Configure the options in NMEAdesync.cfg

1. Connect to the PPS wire to GPIO pint 25

1. sudo rm /dev/gps0 

1. socat -d -d pty,raw,echo=0 "exec:/home/pi/NMEAdesync.py,pty,raw,echo=0"

1. Note the pts number as will need to use it in the next step

1. sudo ln -s /dev/pts/1 /dev/gps0

1. Notice the time has changed

1. Check pps sudo ppstest /dev/pps0