Network Exploitation of IoT Ecosystems

Explore network exploitation techniques in IoT ecosystems through this GrrCON 2019 conference talk by Fotios "ithilgore" Chantzis. Delve into the vulnerabilities of various network protocols, including Multicast DNS, IPP, and RTSP. Learn about fundamental flaws in IoT device communication, MDNS poisoning, neighbor cache posing, and common vulnerabilities in IP cameras and medical devices. Gain insights into embedded malware and discover valuable resources for further research on IoT security.

Intro
Agenda
Why research network protocols
Multicast DNS
Probe DNS
Announcement DNS
Scenario
Fundamental flaw
MDN poisoning
N DNS query
Printer response
MDNS poison
IPP poison
Laura
Neighbor cache posing
IP cameras
WS Discovery
RTSP
What is RTSP
Demonstration
Medical devices
Common vulnerabilities
AD brute force
Embedded malware
Resources