Inspecting IPTV for Fun and No Profit
summary
A home-built network tap using a Raspberry Pi + USB Ethernet bridge inspects traffic between router and STB, captures plain HTTP JSON metadata, and modifies it via nfq_set + NetfilterQueue + scapy to spoof package names; replacing a package string unlocks HBO and, with a Python assembler that reorders compressed JSON across packets, enables watching all channels on tested ISPs. Boot-time negotiation carries the permissions (so the tap can be removed after boot) and DHCP option 60 lets a device join the ISP VLAN; encrypted or compressed streams and MTU limits block some attacks.
AI-written summary · about
chapters (21)
- 0:00IPTV inspection intro
- 1:04Understanding IPTV setup boxes
- 5:37TV subscription issue
- 8:07Network tap with Pi
- 10:39UDP traffic analysis
- 11:21HTTP metadata for channels
- 13:11Modify network traffic
- 15:35nfqset packet manipulation
- 17:27Channel substitution with nfqset
- 20:40Unauthorized channels success
- 21:01Cheaper Pi alternatives
- 23:10nfqset limits and encryption
- 24:14Python traffic modifier
- 26:43Automate channel substitution
- 27:50Test across ISPs
- 30:20Bypass with DHCP option 60
- 32:27Why vulnerability persists
- 33:33Motivation behind revealing this flaw
- 33:54Audience questions
- 38:52Q&A on security
- 42:05Final thoughts
related talks
44mInspecting IPTV for Fun and No Profit
28mInspecting IPTV for fun and no profit
30mNetwork Technocracy: A Tale of Monitoring, Spoofing, Intercepting and Social Engineering
08mThe do's and don'ts about Streaming security...
28mDVB-T Hacking
41mDon’t Trash It, Hack It: Reverse Engineering Secrets & Re-purposing ISP Routers
41mModding Security & Privacy
37mSecurityPI: IronClad your Raspberry PI