4G GPS Tracker Reverse Engineering - Cell Modem Interactions

29,547
0
Published 2024-06-18
In this video, we take a look at the cell modem of a Chinese 4G GPS tracker.

IoT Hackers Hangout Community Discord Invite:
discord.com/invite/vgAcxYdJ7A

🛠️ Stuff I Use 🛠️

🪛 Tools:
XGecu Universal Programmer: amzn.to/4dIhNWy
Multimeter: amzn.to/4b9cUUG
Power Supply: amzn.to/3QBNSpb
Oscilloscope: amzn.to/3UzoAZM
Logic Analyzer: amzn.to/4a9IfFu
USB UART Adapter: amzn.to/4dSbmjB
iFixit Toolkit: amzn.to/44tTjMB

🫠 Soldering & Hot Air Rework Tools:
Soldering Station: amzn.to/4dygJEv
Microsoldering Pencil: amzn.to/4dxPHwY
Microsoldering Tips: amzn.to/3QyKhrT
Rework Station: amzn.to/3JOPV5x
Air Extraction: amzn.to/3QB28yx

🔬 Microscope Setup:
Microscope: amzn.to/4abMMao
Microscope 0.7X Lens: amzn.to/3wrV1S8
Microscope LED Ring Light: amzn.to/4btqiTm
Microscope Camera: amzn.to/3QXSXsb

About Me:
My name is Matt Brown and I'm an Hardware Security Researcher and Bug Bounty Hunter. This channel is a place where I share my knowledge and experience finding vulnerabilities in IoT systems.

- Soli Deo Gloria

💻 Social:
twitter: twitter.com/nmatt0
linkedin: www.linkedin.com/in/mattbrwn/
github: github.com/nmatt0/

#hacking #iot #cybersecurity

All Comments (21)
  • @TheSlimHim
    Found your channel recently. I don't know much about hardware hacking but love what I've seen so far! Very informative and entertaining.
  • @frankrizzo890
    AT commands were invented by Hayes in the 80's. They became the industry standard for sending commands to modems.
  • @Ingineerix
    Many of these cell modems have an "application processor" where you can run simple applications without the need for an external microcontroller. I doubt they would populate the GPS that's not connected to anything. It probably feeds the NMEA into a UART on the modem and they have installed a simple application to handle it.
  • Absolutely love the content. Commenting and upvoting for the algorithm
  • @KyleWood1985
    You have a gift for IOT content! Always entertaining!
  • Some of Simcom modems have the ability to be programmed. This module can be one of them that you can write your own code on it. Because the board has gps antenna and gps module which is too much extra cust for manufacturer, I believe it is programmed to get GPS data from L76 gps module and send it over network to tracking Server. You can test it using different SIM CARD
  • @josh9761
    introduce me to so many new topics with each video really love the content
  • @kmpnelson
    Absolutely appreciate the consistent content!
  • Very good job on figuring out how it works, interesting that there are simcard providers with these plans. For very very low latency IotT projects it's great.
  • @pete3897
    AT commands (called AYE TEE commands, not "at" commands) are a historical legacy from the Hayes modem days and have spread to all manner of modem and even non-modem devices over the years
  • @AlexKiraly
    We don't deserve you, keep up the good work! Awesome content
  • absolutely love the content, the only criticism is possibly writing a script. regardless, great job
  • @Roborob12345
    Super interesting video! Thanks for explaining it in such a practical manner
  • @walkman1269
    Oh look I see you in West Tennessee. Love your content.
  • @xrafter
    Matt have shown in 1st and 2nd video his abilities to not just understand the hardware but also the software intop of it, and also some OSINT skill. Totally a hacker
  • @d3stinYwOw
    Thing is - you can use GPS external device with such modem, since some of them allow pluggin-in additional 'apps', including interfacing external modules
  • @zaprodk
    It's absolutely wild that they would build a GPS tracker and even fit the antenna and receiver when there is no way for it to use it!
  • @3bdo3id
    love the content thanks from Egypt
  • @paullee107
    Been loving the videos. Always throw out the newbie #s pls. Say the default baud rate we should try. :) Also, AT commands is pronounced A-T, not at.