Make your childhood dream come true, remote control the IoT train from any device! You need the following to complete the Matter IoTrain “track”:

1. Factory reset “the train” + put into commission mode.
2. Find the secret onboarding information.

Please do not touch the train, the tracks, or the microcontroller. They are literally held together by duct tape.

How do I factory reset the device + put it into commission mode?

This page will list questions—see below. Write down the answers, concatenating the first letters of the answers. Make it lowercase. Use it like https://hackmatter4.fun/posts/ ab12cd23ef to view the solution page.

What is Thread and why are we discussing it?

Thread is an IPv6-based, low-power, mesh network protocol. It is similar to Zigbee but more modern. Devices operated from batteries benefit from the Thread protocol due to the low power consumption compared to Wi-Fi. Similar to Zigbee, you need a gateway — a so-called Thread Border Gateway — at home so your home network can speak to the Thread devices. Matter and Thread work well together.

So, this is nice and dandy. I can control an LED, as can any user. But how can I hack Matter devices?

Well, I don’t know. But! It is open-source. Feel free to check out the project and build IoT devices at home.

GitHub

And feel free to find security vulnerabilities in the code. Visit the following URL for more details. CSA - report vulnerability

To get started with hacking, you should understand how Matter works. The following are some useful commands/tools to help you get started.

Explanation

So you came here from the Google (or advanced Apple) setup guide and wonder why in the hell you should share your e-mail address with me. And that is a fair question. But actually, you don’t have to. If you choose the Home Assistant, Ubuntu, macOS, or basic Apple option (no control over the Internet), you don’t have to share anything about yourself with me.

But if you want to use the Google ecosystem, here is the explanation: Most ecosystems need a special device, usually called a “hub,” to support Matter. In the Google ecosystem, a Google Nest Hub (2nd gen), Google Nest Hub Max, or Google WiFi Pro is needed, as of today. In the case of Home Assistant, the “hub” is the Home Assistant server. In the Apple ecosystem, if you want to remotely control your devices, you need an Apple TV 4K (latest generation) (with Ethernet and Thread support) or an Apple HomePod (latest generation).

🕵️ CTF Challenge: Operation SILVERTHREAD

Category: IoT / Wireless Protocol Analysis Difficulty: ⚡⚡⚡ Intermediate

Briefing

Rain hammers the neon-slicked streets of New Meridian. Somewhere in this city, a rogue mesh network hums beneath the noise — whispering secrets in encrypted packets no one was supposed to hear.

You’re a freelance packet jockey working a contract for VEIL Corp, a shadow-market intelligence outfit operating out of a server room above a noodle bar on 7th and Cross.