Hacking Demos, Dirty Secrets, Dangerous Lies, Asset Intelligence
summary
Asset inventory gaps let attackers move from a compromised laptop into hundreds of unmanaged devices; the presenter demonstrates grabbing an exploit from exploit‑db to chain into a camera, exfiltrate certs via SCP, and run arbitrary binaries, and shows FTP anonymous access to a Fanuc robot, modifying a can‑tap program to canCrush that persists as the default program. Research cites about 3.5 million cameras exposed and frequent APC/APC default UPS credentials; an asset‑intelligence platform with API integrations is offered as remediation.
AI-written summary · about
chapters (19)
- 0:00intro
- 1:43preamble
- 1:58asset intelligence
- 4:12dirty secrets: xiot
- 6:08internet-accessible xiot
- 8:13research stats
- 10:46dangerous lies - common xiot attack types
- 11:18rsocks
- 12:55physical
- 13:15fronton
- 14:09oem attacks
- 14:19illegal xiot devices
- 16:08pivot attacks
- 16:19quietexit
- 20:27demo 1 - industrial camera
- 25:34demo 2 - hacking industrial robots
- 34:38remediation, visibility with an asset intelligence platform
- 36:45try it. a free poc only takes 60 minutes
- 37:18thanks
related talks
46mThe Art of Cyber Espionage: Unleashing the Power of SCADA and ICS Hacking
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
49mxIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors
01h 01mHow hacking works - Web edition
39mHow to think like a hacker
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
59mMaking Hacking Childs Play