filmov
tv
Philippe Laulheret - Intro to Hardware Hacking - DEF CON 27 Conference
Показать описание
From small business to large enterprise, VOIP phones can be found on nearly every desk. But how secure are they? What if your phone was spying on every conversation you have?
This talk is an introduction to hardware hacking and as a case study I’ll use the [REDACTED] Deskphone, a device frequently deployed in corporate environments. I’ll use it to introduce the tools and methodology needed to answer these questions.
During this talk, attendees will get a close up look at the operations of a hardware hacker, including ARM disassembly, firmware extraction using binwalk, micro-soldering to patch an EEPROM and get a root shell over UART, and ultimately uncover an already known decade-old bug that somehow remained unnoticed in the device’s firmware.
Beyond the case study I will also address alternative tactics; some did not work, others may have but were not the lowest-hanging fruit. When it comes to hardware hacking, the process is as important as the result; knowing that there are multiple ways to reach the end goal helps researchers remain confident when hurdles arise. After the talk, attendees will have an increased distrust towards always-on devices; however, they will have the background knowledge to investigate the products and systems they encounter daily.
Philippe Laulheret
Philippe Laulheret is a Senior Security Researcher on the McAfee Advanced Threat Research team. With a focus on Reverse Engineering and Vulnerability Research, Philippe uses his background in Embedded Security and Software Engineering to poke at complex system and get them to behave in interesting ways. He previously talked about Reverse Engineering PSX game at Bsides PDX, created & contributed to some Hardware Hacking CTF when working at Red Balloon Security and shared the love of tearing apart VOIP phones during ad-hoc workshops at multiple conferences (Summer Con, Hardware Hacking Village, etc.)
Twitter: @phLaul
This talk is an introduction to hardware hacking and as a case study I’ll use the [REDACTED] Deskphone, a device frequently deployed in corporate environments. I’ll use it to introduce the tools and methodology needed to answer these questions.
During this talk, attendees will get a close up look at the operations of a hardware hacker, including ARM disassembly, firmware extraction using binwalk, micro-soldering to patch an EEPROM and get a root shell over UART, and ultimately uncover an already known decade-old bug that somehow remained unnoticed in the device’s firmware.
Beyond the case study I will also address alternative tactics; some did not work, others may have but were not the lowest-hanging fruit. When it comes to hardware hacking, the process is as important as the result; knowing that there are multiple ways to reach the end goal helps researchers remain confident when hurdles arise. After the talk, attendees will have an increased distrust towards always-on devices; however, they will have the background knowledge to investigate the products and systems they encounter daily.
Philippe Laulheret
Philippe Laulheret is a Senior Security Researcher on the McAfee Advanced Threat Research team. With a focus on Reverse Engineering and Vulnerability Research, Philippe uses his background in Embedded Security and Software Engineering to poke at complex system and get them to behave in interesting ways. He previously talked about Reverse Engineering PSX game at Bsides PDX, created & contributed to some Hardware Hacking CTF when working at Red Balloon Security and shared the love of tearing apart VOIP phones during ad-hoc workshops at multiple conferences (Summer Con, Hardware Hacking Village, etc.)
Twitter: @phLaul
0:46:07
Philippe Laulheret - Intro to Hardware Hacking - DEF CON 27 Conference
0:46:07
Philippe Laulheret - Intro to Hardware Hacking - DEF CON 27 Conference
0:46:07
Philippe Laulheret Intro to Hardware Hacking DEF CON 27 Conference
0:22:43
Philippe Laulheret - Let’s learn MIPS and Japanese!!!
0:43:24
HEXACON2022 - Emulate it until you make it! Pwning a DrayTek Router by Philippe Laulheret
0:43:08
HEXACON2024 - What the hell is Windows's CLIP Service by Philippe Laulheret
0:41:55
Breaking the security barrier of a major infusion pump ▪ D. McKee & P. Laulheret ▪ Ekoparty 2021...
0:37:48
Fail Harder: Finding Critical 0-Days in Spite of Ourselves
0:51:16
Code Blue! Medical Devices Under Attack
0:00:09
hacker hurt window
0:46:07
DEF CON 27 - Intro to Embedded Hacking-How you can find a decade old bug in widely deployed devices
0:25:08
Recon 2022 - Reversing an M32C firmware Lesson learned from playing with an uncommon architecture
0:12:14
DEF CON 23 - Hardware Hacking Village - Soldering 101 - Melting metal for fun and profit
0:36:56
Using Sounds as Dangerous Weapons – DEF CON 27
0:03:37
do NOT hold back - DEF CON 30 Call For Speakers
0:48:42
Andreas Baumhof - Are Quantum Computers Really A Threat To Cryptography? - DEF CON 27 Conference
0:35:02
Intro to Hardware Hacking - Emmanuel Adewale and Kenny Anderson
0:00:35
Hacking in the Movie
0:12:07
Intro to Hardware Reversing: Finding a UART and getting a shell
0:00:11
Minha intro - By Designer | Prime :3
0:20:21
DEF CON 27 - Mike Spicer - I Know What You Did Last Summer 3 Years of Wireless Monitoring at DEF CON
1:00:27
Professor Phil Hodgkin - Reverse Engineering the Immune System
0:00:11
Intro #7 - Plastyne
0:46:31
DEF CON 25 - How to roll your own counterfeit hardware security devices
Комментарии