Cameras, CACs & Clocks: A Story of Millions of Interrogated and...
summary
Claims that XIoT numbers top 60–70 billion devices and are growing ~18–20% yearly, with specific scans finding ~5 million cameras and 3.5M Hikvision devices visible globally (≈500k in the US). Demonstrates Kali + an ExploitDB Hikvision script to get a root shell obtained, uploads a payload via TFTP, makes it executable, and SCP‑exfiltrates server cert/private key PEMs, proving full control and easy x‑filtration.
AI-written summary · about
chapters (9)
- 0:00Introduction and speaker welcome
- 1:29What is XIoT and its pillars
- 4:15State of XIoT security today
- 7:25Why XIoT devices are targeted
- 9:36Common attacks on XIoT devices
- 11:46Cameras as the biggest offenders
- 12:28Live camera hack demonstration
- 21:15Fixing XIoT security gaps
- 22:19Q&A and closing remarks
related talks
40mSecurity/Privacy in the IoT generation
49mxIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors
40mInto the Mind of an IoT Hacker | How to Protect IoT Networks & Devices
32mThe Evil of Spy Camera
13mThe dark side of IoT
38mHacking Demos, Dirty Secrets, Dangerous Lies, Asset Intelligence
30mThe Hunt for Major League IoT-ICS Threats: A Deep Dive into IoT Threat Terrain
54mWhere did you find that?