Project , examining proprietary wireless protocols from Apple, at the USENIX 2019 conference with an analysis of vulnerabilities in Apple's wireless protocols (potential for MITM attacks to modify files transmitted between devices, DoS attacks to block device interactions and cause device crashes, as well as the use of AirDrop for identifying and tracking users). During the research, open implementations of the AWDL (Apple Wireless Direct Link) protocol and technology were prepared, , details of which were obtained through reverse engineering.
The AWDL implementation is written in C and published as a Linux application (Open Wireless Link), using the Netlink API to perform Wi-Fi specific operations, such as channel switching. Integration with the network stack is done through a virtual network interface, allowing applications supporting IPv6 to use the AWDL protocol without changes to the code. This works on network cards with support for active monitoring mode, which allows frame injection (for example, supported in Atheros AR9280).
The AWDL protocol is the foundation of Apple's wireless technologies used for direct device-to-device interactions without prior configuration and pairing. AirDrop, which allows file sharing over Wi-Fi and Bluetooth, also operates based on AWDL. The components of AirDrop prepared by the researchers are written in Python and available within the project. The code for owl and OpenDrop is released under the GPLv3 license.
OpenDrop provides a command-line interface for file sharing between devices over Wi-Fi. At the protocol level, the implementation is fully compatible with Apple devices, allowing interactions between Linux-based systems and devices running iOS and macOS. Sending files is only allowed to Apple devices that are in unrestricted discovery mode, as selective discovery and sending via the address book require Apple's digital signature verification.
Source: opennet.ru
