seemoo-lab/openhaystack
Openhaystack
OpenHaystack is a software framework for creating and tracking custom Bluetooth beacons using the Apple Find My crowdsourced location network. It provides a system for generating encrypted cryptographic keys and flashing firmware onto embedded hardware to broadcast trackable Bluetooth signals.
The project enables the retrieval and decryption of geographic coordinates for remote hardware using private keys to recover device movement history. It also includes a location proxy that fetches network reports from the Apple ecosystem and serves that data to remote applications.
The toolset covers cryptographic identity management, firmware deployment via USB, and the visualization of device locations on a map. It further provides capabilities for extracting private advertisement keys to decrypt associated location data.
Features
- Apple Find My Network Integration - Creates custom Bluetooth beacons that leverage the Apple Find My network for global device tracking.
- Beacon Generators - Enables the creation of encrypted key pairs and firmware to transform devices into trackable beacons.
- Beacon Firmware - Flashes custom firmware onto Bluetooth devices to broadcast tracking signals.
- Bluetooth Low Energy Tools - Provides a system for generating cryptographic keys and flashing firmware for BLE beacons.
- Bluetooth Tracking Systems - Decrypts location history and maps geographic coordinates of registered Bluetooth accessories.
- Crowdsourced Device Tracking - Retrieves and decrypts geographic coordinates for remote hardware using a distributed network of receivers.
- Find My Network Frameworks - Provides a software suite for creating and tracking custom Bluetooth beacons via the Apple Find My network.
- Bluetooth Connectivity - Enables hardware to broadcast Bluetooth signals for discovery by a global crowdsourced network.
- BLE Advertisements - Implements low-level Bluetooth Low Energy advertisements to make hardware visible to the tracking network.
- Key Generation Tools - Includes utilities for creating the secure public and private key pairs needed for location encryption.
- Identity & Key Management - Provides tools to generate unique cryptographic keys and identities for network discovery.
- Location Data Decryption - Uses private keys to transform encrypted network reports into readable geographic coordinates.
- Location Report Decryptions - Provides tools to decrypt encrypted location reports using private keys to recover device movement history.
- Location Tracking - Retrieves and displays the most recent geographic coordinates of registered Bluetooth accessories on a map.
- Beacon Discovery and Management - Flashing encrypted firmware and public keys onto embedded hardware for wireless location broadcasting.
- Location Report Proxies - Uses a bridge device to request and retrieve encrypted network reports from remote cloud infrastructure.
- Firmware Deployment Tools - Supports flashing beaconing software and public keys onto embedded hardware via USB or scripts.
- Location Data Proxies - Acts as a bridge that fetches network reports from the Apple ecosystem for remote applications.
- Location Proxy Servers - Provides a bridge server to fetch network reports and serve them to remote mobile applications.
- Network Report Bridges - Acts as a middleware server translating raw network reports for mobile client applications.
- Network Bridging Proxies - Runs a bridge on local hardware to fetch network reports and serve them to remote apps.
- Private Key Extractions - Implements capabilities to read private advertisement keys from a device to enable the decryption of location data.
