~/talk

Into the Core: In-Depth Exploration of Windows 10 IoT Core

Talkat Black Hat USA 2016 · 2016-08-03..08-04· [security, embedded-and-hardware]
links:none on file
slides:none on file

Windows 10 IoT Core images use FFU (convertible with ImageMount), ship for four suggested boards (Raspberry Pi 2/3, MinnowBoard, DragonBoard), and expose four partitions (EFI, crash, OS on C:, data on U:). Devices run SSH and SMB and a web management API; a scan shows ports 22 135 445 8080. The management UI is Windows Device Portal on TCP/8080 with a default admin password p@ssW0rd; remote UI server listens on 8000 with no auth. Kernel debug via serial, user debug via WinDbg, mimic and REST-based fuzzing are used; change defaults, segment networks, enable TPM/secure boot/BitLocker.

AI-written summary · about

  1. 0:00Introduction
  2. 1:24Agenda
  3. 2:22Editions
  4. 4:17Supported Devices
  5. 5:43Internal Workings
  6. 6:05Images
  7. 8:00Partitions
  8. 9:13Boot Process
  9. 10:15Apps
  10. 12:23Security
  11. 14:28Trusted Platform Module
  12. 16:40Device Firmware Updates
  13. 18:56Attack Surface
  14. 19:48Network Services
  15. 21:00Windows Device Portal
  16. 22:49REST API
  17. 23:49Home Tab
  18. 24:28Process Tab
  19. 25:05TPMS Tab
  20. 25:44File Sharing
  21. 27:29You Mode Display
  22. 28:02Device Driver Vulnerability
  23. 29:01Malware
  24. 33:30Devices on the Network
  25. 33:46Datagram
  26. 34:44PowerShell
  27. 36:07Windows Apps
  28. 37:58DLL
  29. 41:56Serial Debugging
  30. 43:05User Mode Debugging
  31. 44:40Crash Debugging
  32. 45:01Fuzzing
  33. 47:14Summary
  34. 48:17Wrapup
  35. 49:42Questions
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.