1. Understanding Minino

Minino Overview

Minino uses a user interface combining the OLED screen and the navigation buttons to use the menus in Minino. The menus are listed vertically, and the horizontal buttons are used to SELECT (⇾) or go BACK (⇽).

Turning ON Minino

Turning Minino ON is quite simple, just use 3xAAA batteries or plug the USB cable and shift the switch to ON.

Note

If Minino does not turn ON press the RST button.

Important

Minino does not have a battery charger, so it is not capable of charging the batteries from the holder.

Minino and its different modules

Minino features different modules that can take advantage of them to perform security analysis and audit workflows. Below, you can find the different technologies Minino can work with!

ESP32-C6

The ESP32-c6 module, known for its robust performance and versatile connectivity options, enables Minino to effectively work with the technologies supported by the module, such as Wi-Fi 6, BLE, Zigbee , and Thread .

Minino's features utilize the ESP32's capabilities for network security testing to identify and address vulnerabilities, especially on Wi-Fi networks. It is important to note that Minino operates exclusively on 2.4GHz Wi-Fi networks, ensuring compatibility and optimal performance within this frequency band.

Wi-Fi

Integrated 2.4 GHz Wi-Fi 6 (802.11ax) radio, supports the 802.11b/g/n standard for backward compatibility. ESP32-C6 supports the OFDMA mechanism for both uplink and downlink communications, while also supporting MU-MIMO for downlink traffic. Both of these techniques allow working with high efficiency and low latency, even in congested wireless environments. Additionally, the Target Wake Time (TWT) feature of the 802.11ax standard enables ESP32-C6 customers to build battery-operated connected devices that can last for years, while staying connected throughout.

BLE (Bluetooth Low Energy)

A short-range wireless technology designed to consume very little power. Ideal for small devices such as sensors, trackers, and wearables. BLE allows communication between devices, such as smartphones and activity bands, to send and receive data efficiently.

BLE is used for:

• Localization: Allows locating objects or people through a mobile app connected to the tracker.
• Monitoring: Sends real-time data about the status of the tracked object, such as temperature, humidity, or movement.
• Notifications: Alerts the user when the device moves out of a predefined range.

Minino incorporates BLE technology, this means that Minino can function as a tracker.

Apple AirTags

AirTags are small, Bluetooth-enabled tracking devices designed by Apple to help users locate and keep track of their belongings. Minino, equipped with specialized scanning capabilities, can detect these AirTags and trigger them to emit a sound, aiding in the quick and easy retrieval of lost items.

Thread

Low-power mesh network specifically designed for smart homes. Imagine a network of devices that communicate efficiently and securely with each other, creating a mesh where each device can act as a repeater, thus extending the network's reach.

Minino can send messages to all devices on the network simultaneously, which is ideal for applications such as broadcasting alerts or synchronizing devices.

In Minino, Zigbee is utilized for sniffing and spoofing, enabling the device to intercept and manipulate Zigbee network traffic. This capability allows for network analysis and security testing, which are essential for identifying vulnerabilities and ensuring the integrity of Zigbee-enabled systems. With Zigbee, Minino can effectively monitor and emulate Zigbee communications, making it a versatile tool for IoT device testing and research.

GPS

The ATGM336H-6N-74 GPS module provides precise location-tracking capabilities. The module is renowned for its high sensitivity, low power consumption, and rapid positioning.

Wardriving

Minino's built-in GPS module enables wardriving, the act of mapping networks while on the move. This helps discover nearby networks, identify coverage gaps, and even detect unsecure networks. Minino's portability and open-source software make it a great tool for exploration and analysis.

In addition to Wi-Fi, Minino also supports Zigbee and Thread, expanding its capabilities to map and analyze low-power mesh networks commonly used in IoT applications. This allows for the identification of device clusters, network topology analysis, and the detection of improperly secured nodes in smart home and industrial environments.

Wardriving's main purpose is finding Wi-Fi, Zigbee or Thread signals in a particular area and saving them with their GPS location data. The objective is to identify vulnerable networks that can be exploited. From moving vehicles (the ‘driving’ part of wardriving), users attempt to locate vulnerable networks for later potential use in attacks (the ‘war’ part of wardriving). Once found, the information can be submitted to third-party websites and apps to create digital maps.

Depending on the mode of transportation, variations of wardriving include warbiking, warcycling, warwalking, warjogging, warrailing, wartraining, and warkitting. Wardriving is sometimes also known as wireless network mapping or access point mapping.

Learn more about Wardriving here.

Minino Console

When Minino is powered on, the USB-Serial communication will start automatically. This allows you to send and receive data. Through the console, you can manage Wi-Fi settings, including: saving, joining, deleting, and connecting to networks, as well as viewing Wi-Fi credentials. You can access the console through a serial monitor of your preference, but for fully compatibility with the features we recommend PuTTY for Windows and Minicom for Linux and macOS.

Help menu

To see the available commands, you need to type the help command in the serial monitor and click enter. It will be displayed the available options and en explanation of what which command does.

Wi-Fi

The following commands are available for managing Wi-Fi Access Point (AP):

Command	How it works	Command syntax
join	Join Wi-Fi AP as a station, credentials are not saved	join --timeout=<t> <ssid> <password>
save	Save Wi-Fi AP credentials and join	save --timeout=<t> <ssid> <password>
list	Show saved Wi-Fi AP credentials	list
delete	Delete saved Wi-Fi AP credentials	delete <index>
connect	Connect to a saved Wi-Fi AP	connect <index>

Where:

• <t>: connections timeout in ms
• <ssid>: most common know as name of the AP (WiFi network).
• <password>: AP (WiFi network) password to connect.
• <index>: position of an element in a list.

Example: Save Wi-Fi credentials by using the save command followed by the SSID, and the password of the access point, all separated by spaces as shown below.

Spam

Manage your SSID spam list. Available commands:

Command	How it works	Command syntax
spam_delete	Delete a SSID SPAM list before saved	spam_delete <index>
spam_save	Save a new SSID SPAM list	spam_save --name=<n> <value>
spam_show	Show saved SSID SPAM lists	spam_show

Where:

• <index>: position of an element in a list.
• <n>: name given to the list.
• <value>: names of the SSID in a list.

Important

Use commas (,) to separate the SSID names in a list.

Example: Save a SSID SPAM list by using the spam_save command followed by the name of the list and the name of the SSID to SPAM.

Minino

Control and get more information about Minino.

Command	How it works	Command syntax
launch	Launch an app	launch <app>
reset	Restart the device	reset
get_free_heap	Get the free heap size	get_free_heap
get_min_free_heap	Get the minimum free heap size	get_min_free_heap
get_chip_info	Get the chip info	get_chip_info
get_reset_reason	Get the last reset reason	get_reset_reason

Where:

• <app>: name of the app to launch, available apps:
  • analyzer
  • deauth
  • deauth_scan
  • dos
  • ssid_spam
  • trackers_scan
  • spam
  • hid
  • adv
  • switch
  • light
  • zigbee_sniffer
  • broadcast
  • thread_sniffer
  • thread_sniffer_run
  • i2c_scanner
  • uart_bridge
  • file_manager
  • ota
  • display_config_module_begin
  • logs_output
  • wifi_settings_begin
  • update_sd_card_info
  • stealth_mode_open_menu
  • sleep_mode_settings

Important

To launch an app through the console, ensure that no other app is currently running.

Learn more about the applications here.

GPIO

Use the exposed UART pins of Minino to communicate with other devices.

Command	How it works	Command syntax
print	Send a message over the TXD pin	print <message>
uart_bridge	Get messages from external devices over the RXD pin	uart_bridge
uart_bridge_get_config	Print the UART configuration	uart_bridge_get_config
uart_bridge_set_config	Set the UART bridge configuration	uart_bridge_set_config <buffersize> <baudrate> <databits> <parity> <stopbits> <flowctrl>
uart_bridge_set_buffer_size	Set the buffer size of the UART	uart_bridge_set_buffer_size <buffersize>
uart_bridge_set_baud_rate	Set the baud rate at which the communication is being carried	uart_bridge_set_baud_rate <baudrate>
uart_bridge_set_data_bits	Set the data bits of UART	uart_bridge_set_data_bits <databits>
uart_bridge_set_parity	Set the parity of the UART bridge	uart_bridge_set_parity <parity>
uart_bridge_set_stop_bits	Set the stop bits of the UART bridge	uart_bridge_set_stop_bits <stopbits>
uart_bridge_set_flow_ctrl	Set the flow control of the UART bridge	uart_bridge_set_flow_ctrl <flowctrl>

Where:

• <message>: text to be sent over the TXD pin. Use "" for sentences.
• <buffersize>: Size in bytes of the buffer to read data into.
• <baudrate>: Baud rate at which the communication is being carried.
• <databits>: Size in bytes of the buffer to read data into.Options:
  • 0: 5 bits
  • 1: 6 bits
  • 2: 7 bits
  • 3: 8 bits
• <parity>: Options:
  • 0: disable
  • 2: odd
  • 3: even
• <stopbits>: Options:
  • 1: 1 bit
  • 2: 1.5 bits
  • 3: 2 bits
• <flowctrl>: Options:
  • 0: disable
  • 1: enable RX hardware flow control (rts)
  • 2: enable TX hardware flow control (cts)
  • 3: enable hardware flow control

Example: Send a message to another device by using the command print next to the text to be sent.

Drone ID

Important

THIS FEATURE WILL BE AVAILABLE IN MARCH'S FEATURES DROP

Manually set the Drone location

Command	How it works	Command syntax
drone_set_location	Set the spoofed drone location	drone_set_location -- <latitude> -<longitude>

Important

Use -- to avoid parsing errors

Where:

• <latitude>: latitude coordinate
• <longitude>: longitude coordinate