When the Lights Go Out: Hacking Cisco EnergyWise
summary
Claims a reversible, practical attack on Cisco EnergyWise: researchers reverse-engineer the proprietary protocol, extract its HM (SHA1-based) scheme, and brute-force domain shared secret from sniffed packets to impersonate neighbors and send forged commands. Tools include a Python cracker (hashcat module planned), a fuzzing script that crashes switches, and a toolkit that successfully toggles an LED light demo using port 43440; Internet scans find 1.7M hosts with that port open and four Cisco devices identified.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:48Agenda
- 2:53Energy Management
- 4:25Energy Management protocols
- 5:40Cisco EnergyWise
- 7:36Architecture
- 13:50Demo
- 20:10EnergyWise Attributes
- 21:45Is EnergyWise Relevant
- 27:38Reverse Engineering
- 34:26Protocol Details
- 37:03Results
- 40:59Sniffing
- 43:18Cracking the secret
- 52:47Segmentation
- 54:32Blocking EnergyWise
- 55:19Future Work
- 56:04Conclusion
related talks
30mInside the Mind of a Hacker: How a Light Bulb Almost Stopped Christmas
30mCommSec D1 - How to Find and Exploit Bugs in IoT Devices
56mLights Off! The Darkness of the Smart Meters
29mFrom Zero to Success
37mCDPwn: Taking Over Millions of Enterprise-Things with Layer 2 Zero-Days
26mA Lightbulb Worm?
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
40mSmart IoT: IoT Botnet Attacks on Power Grids Exploiting Their Weak Points