DEF CON 32 - Anyone can hack IoT- Beginner’s Guide to Hacking Your First IoT Device - Andrew Bellini

Поделиться
HTML-код
  • Опубликовано: 2 дек 2024

Комментарии • 47

  • @Twoshoes22Jason
    @Twoshoes22Jason Месяц назад +89

    Probably one of the clearest and most concise talks this year from what I've seen so far

  • @the_sandman00
    @the_sandman00 Месяц назад +27

    Found 5 vulnerabilities on the first day. 1 critical, 1 high. Thanks man. This sparked a curiosity

    • @weihe1220
      @weihe1220 19 дней назад +1

      Hi bro, how did you do it? Can you share some relevant basic information?

    • @the_sandman00
      @the_sandman00 19 дней назад

      @ portscan-> found ftp -> did enumeration-> found default cred login -> in ftp rootfs access is granted -> dumped entire filesystem-> can modify entire fs, etc

    • @SmallTimeTrees
      @SmallTimeTrees 13 дней назад +2

      @@weihe1220did you watch the video?

  • @coffeehousephilosopher7936
    @coffeehousephilosopher7936 Месяц назад +25

    This is why I love this channel, any talk I might have had to miss or force to choose over the other is right on this channel... Thanks DEFCONconferences

  • @74Gee
    @74Gee Месяц назад +19

    Without a doubt this is the best IoT hacking speed run out there.

  • @chsovi7164
    @chsovi7164 Месяц назад +23

    "we're expecting there to be a big surge of IoT devices because of AI" is just about the scariest news someone could drop

  • @heatherryan9820
    @heatherryan9820 9 дней назад

    Just learned a lot, thanks. I love watching these DEFCON talks, because I’m never able to go, so it’s nice that we can still get acres to the talks because every year I seem to learn so much from these.

  • @Entropy67
    @Entropy67 Месяц назад +28

    Wow super useful talk, thanks! I've been interested in IoT hacking but too busy to look into it, I just happen to have almost all the tools and a cheap router... And some free time...

  • @daviddunkelheit9952
    @daviddunkelheit9952 Месяц назад +5

    Power capacitors that are discharged can develop ‘phantom charge’ as the dielectric was in a contrary position physically for longer duration. Ambient charge is enough to cause the capacitor’s to return to previous charged state.

    • @theodorekorehonen
      @theodorekorehonen 24 дня назад

      A lot of devices nowadays have parasitic resistors to make them safe(r) but I still always short the big filter caps just to make sure. And I do indeed get some sparks sometimes

  • @frankwuolukka2087
    @frankwuolukka2087 Месяц назад +1

    Great presentation, thank you for the clear and concise talk. I believe you said that folks there could get a copy of your slides but would you mind making them available to the rest of us?

  • @dannyarmata8878
    @dannyarmata8878 2 дня назад

    Thanks for this I really appreciated the information, finally understand what I was doing when I soldered all those wires to my Xbox 360 board I never knew why it was called JTAG but now I do

  • @BsktImp
    @BsktImp Месяц назад +9

    07:58 Capacitors at even 5V or 12V: "hold my beer."

  • @stevet7522
    @stevet7522 Месяц назад +9

    These talks just reinforce the reason i dont have IoT, smart devices, or really much of anything in my house. The fact that i have wifi makes me paranoid enough.

    • @Frappe3621
      @Frappe3621 Месяц назад +3

      My iot lights use WiFi to make themselves into motion sensors!
      They send it between themselves and see where they are interrupted!
      Any WiFi enabled device could potentially do this,
      your WiFi can tell where you are in your house

    • @jean-naymar602
      @jean-naymar602 Месяц назад

      @@Frappe3621 New fear unlocked.

    • @cracc_baby
      @cracc_baby 21 день назад

      bruh im kinda scared rn.. my cats new litterbox needed to connect to wifi (allegedly for firmware updates) same with the vaccum! both made in china btw :(

  • @AndreeaCe
    @AndreeaCe Месяц назад +5

    1: pick the target, usually the target is the device not the person. Usually...

  • @joew1865
    @joew1865 Месяц назад +5

    What was the software being used in the Reverse Engineering binaries & libs section?

    • @joew1865
      @joew1865 Месяц назад +8

      Nevermind... it's called Ghidra

    • @daviddunkelheit9952
      @daviddunkelheit9952 24 дня назад

      @@joew1865 yes and it is suggested to use with Amazon Coretto rather than regular Java

  • @exohive5608
    @exohive5608 8 дней назад

    Damn I needed this; thank you for this! Been looking for something like this.

  • @eyezikandexploits
    @eyezikandexploits Месяц назад +2

    Been making my own showdan type project locally scanning for IoT and rigged a grep script for it

  • @Pinkman875
    @Pinkman875 Месяц назад +1

    somebody knows any resource to keep digging in the iot / hardware hacking?

  • @claasschlueter
    @claasschlueter 27 дней назад

    Really enjoyed it! Thanks

  • @GameX236
    @GameX236 14 дней назад +1

    Sounds fun!

  • @daviddunkelheit9952
    @daviddunkelheit9952 Месяц назад +3

    I followed this beginner guide and I just couldn’t hack it.

  • @mk71b
    @mk71b Месяц назад +1

    8:55 He should have said "unplug the power cord."

  • @ZambeziSentinel
    @ZambeziSentinel Месяц назад +3

    I took screenshots of all the slides and fed to my AI to summarise. Did a good job 😊

    • @ShermaMahdi
      @ShermaMahdi Месяц назад +2

      Amazing idea💥 Did de same thanks

    • @3rdeyesociety
      @3rdeyesociety 23 дня назад +1

      why wouldnt you just copy paste the transcript...

    • @ZambeziSentinel
      @ZambeziSentinel 22 дня назад

      @3rdeyesociety on phone and can't copy. Tried that first

    • @ZambeziSentinel
      @ZambeziSentinel 22 дня назад +2

      @@3rdeyesociety I tried but phone would not let me. Took a while to get every slide lol

  • @AnonymousVv3
    @AnonymousVv3 20 дней назад

    Like Harvard or EC-COUNCIL University or etc for cyber degrees

  • @XRatedPoetry
    @XRatedPoetry Месяц назад +1

    We need 6 more likes on this video! No more, no less!

  • @criticalgrower
    @criticalgrower Месяц назад +2

    When i see someone Who really knows what he s talking about ❤ how much i love that stuff unfortunately i m not lucky and good enough to make a living with it Bless Bellini ciao

  • @AmandaCook-rc8ce
    @AmandaCook-rc8ce Месяц назад +2

    Hack or be hacked. It's like being blind and while they all can see.

  • @radwizard
    @radwizard Месяц назад

    Remember those books from the 90s and early 2000s that claimed this…. But when you read them, they are the basics to using a console or lessons on OSI and TCP/IP? 😂❤

  • @andrewc.2952
    @andrewc.2952 Месяц назад

    Is it sad that my immediate definition for an LoT device is that it means "Left on table". 😂 Like when people leave their devices unattended. Don't mind me, kinda new here. Lol

  • @iluvyunie
    @iluvyunie Месяц назад +2

    this is why I never use my phone or pc to control any of these things

  • @AnonymousVv3
    @AnonymousVv3 20 дней назад

    Botnet: Online DDOS or DOS attack.

  • @Nicholas-f5
    @Nicholas-f5 Месяц назад

    Anyone hardware hacking in Austin, feel free to PM