We (Could Have) Cracked Open the Network for Under $100
summary
Researchers buy used enterprise routers for under $100 each and find configurations that reveal full network topology, app versions and credentials without any chip-off or live-network tricks. Results: 56% of devices contain corporate data, 22% include customer records, 44% store certificates or crypto tokens and 89% expose machine-to-machine auth. Secondary-market access sells for about $2,800 per credential set. Recommended fixes: follow NIST 800-88r1 sanitization and, if stuck, notify CISA.
AI-written summary · about
chapters (25)
- 0:00Intro
- 4:53What happened next was unexpected
- 6:28Why router data is important
- 7:40We started with a 'simple' methodology
- 8:22Device status on delivery
- 9:19Administrative access & methodology
- 11:21Consequences of a customer data breach
- 13:06Third-party connections
- 15:59Consequences of an app list
- 18:17Cyberattack potential
- 19:57The original owners
- 20:47Coordinated disclosure?
- 21:52ESET Research coordinated disclosure
- 23:21Difficulties contacting the companies
- 27:01Bug Bounty Payments
- 28:41The value of network access
- 32:02Identifying where the data is
- 32:29Our recommendation for decommissioning
- 33:29NIST 800.88r1
- 37:15Data destruction/sanitization market
- 37:43Electronics recycling organizations
- 38:21What to do if you discover data
- 40:36Engage with the security community
- 41:15The takeaway from our research
- 42:37RSAConference 2023
related talks
50mThe Price is WRONG - An Analysis of Security Complexity
40mIs Your Organization’s Confidential Data Really Confidential?
31mConquer the Enterprise from Inside
29mFrom pocket to Pwn: How we hacked a multinational Corp for $200 with... (Tim Shipp)
13mThe dark side of IoT
30mCommSec D1 - How to Find and Exploit Bugs in IoT Devices
58mWhy Control System Cyber-Security Sucks…
42mCloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions