SlideShare a Scribd company logo

IoT Penetration Talk

•
•
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.

Redhung@若渴2019.08.15 IoT Penetration Talk

Software
1 of 16
Download to read offline
IOT PENETRATION TALK REDHUNG @ 若渴 2019.08.15
WARNING ! 以下分享都是夢到的 簡報釋出有被和諧
INTRODUCTION 前⾔ ▸ 今天要分享的是⼤大家常看到的這種IoT設備
SCENARIO SIMULATION
SCENARIO SIMULATION 情境模擬 ▸ 今天在冰箱裡⾯面找食物找到⼀一台⾞車車⽤用觸控平板？ ▸ 今天走在路路上踢到了了⼀一台⾞車車⽤用觸控平板？ ▸ ⾞車車⽤用觸控平板完全沒有瀏覽器介⾯面？ ▸ ⾞車車⽤用觸控平板的Debugger不可⽤用？ ▸ ⼿手邊如果沒有⼯工具不能物理理突破？ ▸ 該從哪邊下⼿手Q_Q？
HOW TO PENETRATE ?
LET’S BEGIN WITH OWASP TOP 10
BREAKTHROUGH POINTS MORE ? —— 突破點&想法 ▸ ⾞車車⽤用觸控平板若若是需要廠商升級維護，廠商會將你的愛⾞車車⼤大 搞破壞拆拆撿撿更更新完再裝回去嗎？ ▸ 廠商該如何做到當場不拆卸⼜又維護得宜？ ▸ 這台機器上運⾏行行了了哪些你看不到的服務？ ▸ 現有系統版本的CVE與PoC？
BREAKTHROUGH POINTS MORE ? —— 突破點&想法 ▸ 不需要物理理突破⼜又能夠維護得宜： ▸ 產品是否有遠端維護服務？運⾏行行在哪個Port？ ▸ 產品是否有特地為⼯工程師開發留留下的後⾨門？ ▸ 不然放棄好了了
WEIRD SERVICE
BREAKTHROUGH POINTS MORE ? —— 突破點&想法 ▸ 關於後⾨門： ▸ IoT設備時常需要進⾏行行維護，⼯工程師會安置⾃自⼰己的後⾨門 ▸ 後⾨門常常存在⼀一些你不會注意到的地⽅方
IT’S A FRESH SHELL …
FUTURE WORK FUTURE WORK ▸ 逆向⼯工程 ▸ 逆向Apk、內部程式，讓他在你⾯面前裸體 ▸ 試著⽤用內部library來來打出RCE ( 使⽤用CVE ) ▸ 挖掘更更多漏洞洞
Q & A

Recommended

Windows Offender_ Reverse Engineering Windows Defender's Antivirus Emulator
Windows Offender_ Reverse Engineering Windows Defender's Antivirus EmulatorWindows Offender_ Reverse Engineering Windows Defender's Antivirus Emulator
Windows Offender_ Reverse Engineering Windows Defender's Antivirus Emulator
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
AEG_ Automatic Exploit Generation
AEG_ Automatic Exploit GenerationAEG_ Automatic Exploit Generation
AEG_ Automatic Exploit Generation
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Unleashing MAYHEM On Binary Code
Unleashing MAYHEM On Binary CodeUnleashing MAYHEM On Binary Code
Unleashing MAYHEM On Binary Code
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Firmadyne
FirmadyneFirmadyne
Firmadyne
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Fintech Newebpay API using Flask and VueJS
Fintech Newebpay API using Flask and VueJSFintech Newebpay API using Flask and VueJS
Fintech Newebpay API using Flask and VueJS
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
TA-java-method-109
TA-java-method-109TA-java-method-109
TA-java-method-109
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
TA Lesson Web-109
TA Lesson Web-109TA Lesson Web-109
TA Lesson Web-109
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
TA Lesson Binary Exploitation (Pwn)
TA Lesson Binary Exploitation (Pwn)TA Lesson Binary Exploitation (Pwn)
TA Lesson Binary Exploitation (Pwn)
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 

Recommended

Windows Offender_ Reverse Engineering Windows Defender's Antivirus Emulator
Windows Offender_ Reverse Engineering Windows Defender's Antivirus EmulatorWindows Offender_ Reverse Engineering Windows Defender's Antivirus Emulator
Windows Offender_ Reverse Engineering Windows Defender's Antivirus Emulator
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
AEG_ Automatic Exploit Generation
AEG_ Automatic Exploit GenerationAEG_ Automatic Exploit Generation
AEG_ Automatic Exploit Generation
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Unleashing MAYHEM On Binary Code
Unleashing MAYHEM On Binary CodeUnleashing MAYHEM On Binary Code
Unleashing MAYHEM On Binary Code
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Firmadyne
FirmadyneFirmadyne
Firmadyne
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Fintech Newebpay API using Flask and VueJS
Fintech Newebpay API using Flask and VueJSFintech Newebpay API using Flask and VueJS
Fintech Newebpay API using Flask and VueJS
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
TA-java-method-109
TA-java-method-109TA-java-method-109
TA-java-method-109
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
TA Lesson Web-109
TA Lesson Web-109TA Lesson Web-109
TA Lesson Web-109
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
TA Lesson Binary Exploitation (Pwn)
TA Lesson Binary Exploitation (Pwn)TA Lesson Binary Exploitation (Pwn)
TA Lesson Binary Exploitation (Pwn)
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Java - TA課 - Array
Java - TA課 - ArrayJava - TA課 - Array
Java - TA課 - Array
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Reverse Engineering - Assembly & Introduction
Reverse Engineering - Assembly & IntroductionReverse Engineering - Assembly & Introduction
Reverse Engineering - Assembly & Introduction
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
TA Lesson3 - Method
TA Lesson3 - MethodTA Lesson3 - Method
TA Lesson3 - Method
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Web Introduction
Web IntroductionWeb Introduction
Web Introduction
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Java - TA課 - Let's Begin
Java - TA課 - Let's BeginJava - TA課 - Let's Begin
Java - TA課 - Let's Begin
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Java - TA課 - 開發環境
Java - TA課 - 開發環境Java - TA課 - 開發環境
Java - TA課 - 開發環境
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Introduction to computer network
Introduction to computer networkIntroduction to computer network
Introduction to computer network
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
Assembly Language Redhung ( x86 ) @ TDOH
Assembly Language Redhung ( x86 ) @ TDOHAssembly Language Redhung ( x86 ) @ TDOH
Assembly Language Redhung ( x86 ) @ TDOH
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
TP-Link SR20 Zero-day attack
TP-Link SR20 Zero-day attackTP-Link SR20 Zero-day attack
TP-Link SR20 Zero-day attack
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 
滲透測試入門 Penetration test - white hat hacking introduction
滲透測試入門 Penetration test - white hat hacking introduction 滲透測試入門 Penetration test - white hat hacking introduction
滲透測試入門 Penetration test - white hat hacking introduction
Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.
 

More Related Content

More from Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan.

More from Redhung @ Nationtal Chung Cheng University, Chiayi, Taiwan. (10)

Java - TA課 - Array
Java - TA課 - ArrayJava - TA課 - Array
Java - TA課 - Array
 
Reverse Engineering - Assembly & Introduction
Reverse Engineering - Assembly & IntroductionReverse Engineering - Assembly & Introduction
Reverse Engineering - Assembly & Introduction
 
TA Lesson3 - Method
TA Lesson3 - MethodTA Lesson3 - Method
TA Lesson3 - Method
 
Web Introduction
Web IntroductionWeb Introduction
Web Introduction
 
Java - TA課 - Let's Begin
Java - TA課 - Let's BeginJava - TA課 - Let's Begin
Java - TA課 - Let's Begin
 
Java - TA課 - 開發環境
Java - TA課 - 開發環境Java - TA課 - 開發環境
Java - TA課 - 開發環境
 
Introduction to computer network
Introduction to computer networkIntroduction to computer network
Introduction to computer network
 
Assembly Language Redhung ( x86 ) @ TDOH
Assembly Language Redhung ( x86 ) @ TDOHAssembly Language Redhung ( x86 ) @ TDOH
Assembly Language Redhung ( x86 ) @ TDOH
 
TP-Link SR20 Zero-day attack
TP-Link SR20 Zero-day attackTP-Link SR20 Zero-day attack
TP-Link SR20 Zero-day attack
 
滲透測試入門 Penetration test - white hat hacking introduction
滲透測試入門 Penetration test - white hat hacking introduction 滲透測試入門 Penetration test - white hat hacking introduction
滲透測試入門 Penetration test - white hat hacking introduction
 

IoT Penetration Talk