CreepyDOL WiFi surveillance project debuts at Blackhat/DEFCON

CreepyDOL, the Creepy Digital Object Locator, is a distributed tracking system that uses low-cost hardware sensors, a robust communications system, and simple observation to give near-real-time identification of humans and tracking capabilities to anyone. It’s goal is to develop hardware and software for passive surveillance of WiFi data and draw inferences regarding human behavior therefrom. The project was the subject of presentations at the recently concluded Blackhat and DEFCON conferences in Las Vegas.

The hardware, estimated to cost approximately $57, “consists of a Raspberry-Pi, two USB WiFi chips (Ralink RT5370, which is supports monitor mode, Master (AP) mode, and injection while being physically small; if space was not an issue, the TP-Link WN series of USB WiFi adapters, using the Atheros chipset, would also be a good alternative for slightly more money), a USB hub which also provides power to the Raspberry Pi, an SD card to serve as non-volatile storage, a USB power adapter, and a case.”

The white paper from the Blackhat presentation is available as a 7-page PDF, and the presentation slides are also available as a 26-page PDF.

Brendan promises to “release the source code, some binaries, disk images, VMs, parts lists, sketches—all at once, as soon as I can; I’m aiming for the end of August, but that date may slip.” We eagerly await…

Details on the project’s background, as well as slides (no audio) from the conference presentation can be found on Brendan O’Connor’s blog.

Join the Conversation


  1. From slides: “when not connected to a
    wireless network, WiFi devices send out lists of their known networks, asking if anyone can
    help them.”

    LOLWOT? What is the name of this bullshitty technology? Is that Apple’s invention? Law student’s slides are very low on references and factual technical material.

Leave a comment

Your email address will not be published. Required fields are marked *

Notify me of followup comments via e-mail. You can also subscribe without commenting.