Hey guys, welcome to the HACTI Existence demo of the D-Stike D-Author wrist band. So just up front, I am not associated with D-Stike. I don't get kickbacks or anything like that. It's just a cool project that I saw on the internet. I picked one up, I liked it, so I thought I'd do a demo on it. You can pick one up at dstike.com. They're about 35 bucks. But before we get into the technicals, let's see this thing in action. So if I go to scan and I do scan APN station, and just a quick note, this LED is stuck on green because I tried to disable it through the web interface. But apparently all I did was disable updates to it, so now it's stuck on green. But normally that neopixel LED would be changing color to tell you status of what's going on on the watch. So now that the scan is done, we will go back. We'll go down here to select. We will select a station, and I'm going to pick this Apple station here. We'll go back, back, go to attack, and I'll do a deoth. You can see there's one target that's been selected. Is that Apple station? So we'll click start, and what you'll see is this Wi-Fi will get deothed, reconnect, and deoth. You'll see it happen three times there quickly, and then it just stops trying to reconnect. Just reverse back to LTE. That's an iPhone thing. An Android phone would continually keep trying to reconnect and not give up. So now we can stop this deoth attack. Now that we've kicked that phone off the network, we can launch a beacon attack. We could say there's eight SSIDs pre-programmed into it, and we could see them all fill in there. So that Rikrull comes pre-programmed. You can modify all these SSIDs over the serial connection or through the web interface. But this is how it comes out of the box. Let's go ahead and stop that beacon attack. Another nice feature is that it comes with a packet monitor. So you can change the channel by using these up and down arrows here. So you can see on channel 12, there's nothing going on. 11 seems to have some traffic on it. It'll tell you how many packets per second, along with a nice little graph of them. There's also a clock here. So something to note is that if you take this apart and look inside, the battery power is actually a small tiny little lipo battery, similar to what you put in a very small quad copter. And there's a power switch here. Every time you turn this watch off and back on, the time resets because there's no persistence of power. So you have to set the clock every time you turn the watch on, which is totally worth it for a watch that can deoth things. The last feature is an LED. So it's got a little flashlight built in there. Which is pretty cool. There's also an antenna port here. It came with two little external antennas. So you can plug in some external antennas if you want some more range. It's got a reset button here that restarts. Typical Arduino fashion. The power switch and up, down and push button. And then two little push buttons over here. It charges through a standard Android plug and you can use the Arduino serial monitor to interface with it over serial via the USB. It also has a buzzer here, but I haven't figured out how to get that thing working yet. All right. So one of the things I want to quickly address is the limitations of the ESP 8266 chipset. So basically this is a system on chip with a Wi-Fi radio. It's the predecessor to the more popular ESP32. And basically the limitation here is that the 8266 can only support 2.4 gigahertz, which means you're not going to be able to deoth any five gigahertz clients. You're not even going to be able to see them. But for something like a cell phone that has a dual band wireless card, even if that's connected to a five gigahertz network that you're not able to deoth, you're still going to be vulnerable to beacon attacks because it's still going to receive beacons on 2.4 gigahertz. So please keep in mind this will only work with 2.4 gigahertz. The only mitigation that I've seen to the deoth attack is the 80211W protocol, which gives you protected management frames. Basically all that does is authenticate management frames like deauthentication frames between a client and the access point after trust relationship has been established. But in reality it's very rare to see 80211W actually implemented. So for the most part this thing is going to work and do exactly what it claims to do against any client on 2.4 gigahertz. All right. In addition to being able to interact with the watch through the hardware on the watch itself, the watch also throws up an access point called poned with a default password of deauthor. You can change all that in the settings. But once you've connected to that access point, you can navigate to 1.2.168.41. And we'll click through the captive portal here. And now we can see the scan interface where we will see the results of the scans that are going on. You can go to SSIDs and configure your SSIDs for the beacon attack. On the attacks page we can actually launch all the different attacks and read an explanation of what the attacks do. So this is super useful. If you're trying to be incognito, you can leave the watch stuck on the clock and launch the attacks on the watch from your phone, which is pretty neat. The settings page has quite an extensive list of settings you can modify. So good stuff there. The info page has a bunch of info about the developers and the GitHub. So the last thing I'll mention is in addition to the hardware interface and the web interface. You can also plug this into a computer and pull up the Arduino serial monitor to get a CLI interface onto the watch as it's up and running. In the next video, we will download the source code from GitHub and get an Arduino project running to flash the firmware from source code onto the watch. So stay tuned and thanks for watching.