Hacking a "Smart" Sniper Rifle

Okay so, loading the bullets in a

Tracking Point TP 750 rifle.

[Narrator] The TP 750 is a computer assisted,

self aiming, long range, sniper rifle.

It's targeting system guarantees almost full proof accuracy.

By firing not when the shooter first pulls the trigger,

but instead, only after the barrel

is perfectly lined up with the target.

So when I push the red button

that's right above the trigger,

the cross hairs turn blue.

So that I can line up exactly where I want to hit.

When I let the red button go,

the blue cross hairs will turn red.

When I then pull the trigger the cross hairs

turn red and the scope will fire

when I manage to line up the shot.

[Narrator] The 13 thousand dollar rifle,

promises accuracy to even the most novice shooters.

But security researchers Runa Sandvik,

and her husband Michael Auger,

have found ways to hack the gun via its WiFi connection.

We found that we could make the shooter miss the shot,

either by just a tiny bit,

or completely off.

Even to the point of hitting the target

that's next to the one the shooter is aiming for.

[Narrator] Tracking Point rifles offer a WiFi connection,

that allows a nearby computer

to stream the video from the scope,

or even change settings like wind,

temperature, and ammunition weight.

We found a way to connect directly

to the computer that's inside of it,

and change the same values,

but in such a way that it doesn't show up in the screen.

What we're doing now is we are connected to the back end,

and we are changing the weight of the bullet,

so that when the scope does the calculations

to figure out when it needs to fire,

and what the other settings need to be for

it to hit the tag, then it's gonna miss.

So it's gonna hit the one on the left instead.

Now lining up to take the shot,

and there we go.

Hit the target on the left.

[Michael] Dead center.

[Runa] Almost dead center.