Inspecting IPTV for fun and no profit
summary
ISP set-top box boots and requests an unencrypted HTTP JSON list of channels and subscriptions, so a cheap Raspberry Pi as network tap captures traffic, shows UDP video streams and an HTTP boot call with the full channel list, and allows on-the-fly edits. Using an iptables forward -> netfilter queue and tools like nfq_set / netfilter_queue (or custom Scapy code) the attacker replaces strings (e.g. add HBO) and it works live because payloads are plain HTTP and checksums are recalculated.
AI-written summary · about
chapters (6)
- 0:00Introduction and setup
- 5:46Troubleshooting the IPTV issue
- 11:15Capturing IPTV traffic
- 15:56Modifying packets with netfilter
- 21:01Advanced packet manipulation
- 25:18Q&A and security implications
related talks
44mInspecting IPTV for Fun and No Profit- 44mInspecting IPTV for Fun and No Profit
08mThe do's and don'ts about Streaming security...
41mDon’t Trash It, Hack It: Reverse Engineering Secrets & Re-purposing ISP Routers
28mDVB-T Hacking
30mNetwork Technocracy: A Tale of Monitoring, Spoofing, Intercepting and Social Engineering
37mSecurityPI: IronClad your Raspberry PI
36mHTTPS Is Not Enough