I Own Your Building (Management System)
summary
Research identifies internet‑exposed building management and access control products with firmware and web interfaces that permit chained attacks from trivial info leaks to full takeover. Analysis retrieves firmware from vendor videos and exposed FTP servers then uses static/dynamic reverse engineering, protocol fuzzing and authored Metasploit and Python exploits to achieve unauthenticated remote root code execution. Findings include >100 zero‑days with 30k doors opened in 20s across ~2,500 exposed systems impacting an estimated 10 million people.
AI-written summary · about
chapters (9)
- 0:00Introduction to talk
- 1:46What is a BMS
- 8:11Web interface exposure
- 13:54Firmware analysis process
- 23:23Live demo and exploitation
- 26:15Impact of vulnerabilities
- 29:46Recommendations and fixes
- 31:13Interactive demo setup
- 34:03Q&A session
related talks
26mHacking buildings: Security flaws in embedded building control systems
45mOutside the box: pwning IoT devices through their applications
59mIf You Can't Open It, You Don't Own It
38mHacking Demos, Dirty Secrets, Dangerous Lies, Asset Intelligence
39mHow to think like a hacker
49mxIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors
42mCloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
31mHacking Everything – The Dark Side of the Internet of Things