DarkMesh
Pentesting Meshtastic
Important
This project is intended for educational purposes only. Use it exclusively in controlled environments and only with explicit permission from all parties involved.
Meshtastic is an excellent open-source project. Please respect its community and users—do not use this tool to cause harm or disrupt any Meshtastic networks.
HW
It works with Heltec WSL V3 by default. You can modify it to run on other platforms too.
Contribution
Feel free to contribute, PRs are welcomed. If you add some features in your fork, please share it with us too.
Compilation
Clone the project, open it with your ide, and start to compile. Tested with ESP-IDF 5.5.1 in VS Code.
This project depends on the https://github.com/htotoo/EspMeshCompact you can contribute to that too!
Using
Connect to Wifi: DarkMesh pass: 1234Dark Open http://192.168.4.1/
If you configured your Wifi STA, then you can connect to it in your network with http://darkmesh.local/ url.
Attacks
- Flood with Nodes: Floods the network with fake nodes, with fake coordinate.
- Namechange: Can rename a node or an already seen node in others list. Not permanent.
- Position poision: Fakes the coordinates of a node or an already seen node in others list. Not permanent.
- PKI poision: Advertises the node (selected or random) PKI with a replaced one. Making others see the node in red.
- PKI doubler: Advertises the node (selected or random) PKI as a new node. Making the owner get alerts about exposed key.
- DDOS: takes down the mesh network making it unusable. Recovers after stopped the attack. (as a side effect new nodes will appear)
- Waypoint flood: posts random waypoints to the mesh. It can crash clients when they open the map. This is optional. Works with 2.7.5 clients.