Quote (killg0re @ Jun 14 2014 06:42am)

The most you could probably do is intercept the wireless packets, actually reverse engineering would be too difficult and beyond your skill-set.

I have a Logitech G930 and it uses a 5.8GHz connection and probably lacks basic security but any unprotected wireless traffic is fair game. Luckily for you you the Turtle Beach X42's do use Wi-Fi at 2.4/5 GHz (2.404-2.476 GHz / 5.160-5.340 GHz) which gives you a better chance at understanding it, you still need to find out more information about what the connection uses. What channel(s) it operates on, the authentication and encryption methods are used, and even the bits that make it proprietary. Maybe look for a manual on it: http://support.turtlebeach.com/entry/830516913/?View=entry&EntryID=830516913&Msg= or user guide: http://cdn-assets.turtlebeach.com/products/59/x42_user_guide_091813.pdf

The manual seems to suggest some type of pairing is used, this could be similar to WPS. Actually breaking the device down and figuring out how it works is not easy and may be required to figure this out. I cannot find anything specifically on these but if garage doors, Bluetooth, and other forms of wireless can be broken and intercepted then it doesn't exclude Turtle beach X42s either.

Quote (AbDuCt @ Jun 15 2014 01:59am)

I could likely do this if given a set of headsets that use this technology. I would personally take them apart and look for some sort of I/O such as jtag or serial. If you can get access to that reversing the software would be a bit easier, if not you would likely have to dump the micro controller and reverse the assembler which may or may not be possible depending on their steps to prevent this (oh the joys of epoxy over all the pins). Also depending on the wireless encryption setup it may be possible to MITM the device or obtain packet dumps which could be decrypted if you managed to find the pass phrase to the headset. I used a similar method to MITM wireless IP cameras to create a script to control the PTZ and obtain audio and video from the camera.

But at last I have never heard of a headset that does this seeing how it is far easier and a bit more secured to use a paired transceiver set such as the nrf24l01 or similar which can be locked to one device by using a unique master slave address.This would most likely be easier to program for as well seeing how you wouldn't need to add the overhead of an actual 802.11 protocol... but heh its turtle beach... I wouldn't put their wireless knowledge past the quality of their products.