2025-08-10 15:55 UTC
Which brings me to part two, MeshMarauder.
An open source tool demonstrating proof-of-concept exploits against the DEFCON 33 Meshtastic firmware.
MeshMarauder will demostrate:
- Tracking user activity on any mesh regardless of encryption usage
- Hijack all meshtastic user profile metadata
- Change any users public key
- Send messages as any user in channel chats that appear authentic
- MITM direct messages
https://meshmarauder.net
#defcon #meshtastic #meshmarauder #cybersecurity
Replies (1)
-
@nullagent@partyon.xyz 2025-08-10 16:10
One of the exploits demonstrated is PKI poisoning, this is where we listen for a complete user profile and only change the public key to one we control. In the case of mesh marauder we also add a little 🥷to the user name so people can see something is wrong. If they never have seen this user before they will appear as a green contact. If this is a contact they already knew the meshtastic app provides a warning but appears to replace the original key without user input.