All Your LAN are Belong to Us. Managing the Real Threats to Remote Workers.
summary
Research shows home routers run DNSmasq and contain unpatched flaws and botnet infections including Mariah with peaks of ~500,000 compromised devices, enabling practical attacks: using DHCP PXE boot to netboot a malicious OS and get disk access, hijacking DNS to capture credentials with Seth and responder, and social‑engineering via a captive portal mini browser. Testing finds many VPNs and Zscaler fail unless configured for forced tunnel with exceptions, DNS flushing, packet filtering or shipping managed access points or mobile data and adopting a Zero Trust mindset.
AI-written summary · about
chapters (12)
- 0:00Start
- 7:36Why DHCP and Captive Portals Exist • Dynamic Host Configuration Protocol
- 10:31RDP person-in-the-middle
- 13:19Attack Scenario 2 - PXE DHCP
- 15:05CPMB and Social Engineering
- 19:44Test approach
- 21:03VPN over Wi-Fi - Specific threat scenarios
- 25:19Zscaler Internet Access Summarized
- 27:09Zscaler Private Access Summarized
- 28:48Zscaler Client Connector & Captive Portals
- 32:08Overview of findings
- 32:53Apply What You Have Learned Today
related talks
45mAirBnBeware: Short Term Rentals Long Term Pwnage
13mThe dark side of IoT
40mPractice Safe Networking
27mAbuse of CPE Devices and Recommended Fixes
48mAssume Compromise: Think Like a Hacker to Build Resilience
45mOpening Remarks, Rumblings, Ruminations, and Rants
23mThe Rise of the Eternal Botnet
46mThe 5 Most Dangerous New Attack Techniques and How to Counter Them