Hacking a Smart Camera: IoT Hacking With Andrew Bellini (Part 3)

In Part 3 of our smart camera hacking saga, Andrew Bellini uses binwalk to analyze and unpack the firmware. Will he successfully crack the hash and exfiltrate the password? Watch to find out. 👀 Subscribe to our channel to see similar content from Andrew and other TCM Security team members.

Ideas on smart devices we should hack in future shorts? Let us know!

#iot #shorts #hardwarehacking #iotsecurity #hackingtutorial

📱Social Media📱
___________________________________________

💸Donate💸
___________________________________________
Like the channel? Please consider supporting me on Patreon:

Hacker Books:

My Build:

My Recording Equipment:

[batuhankaya]

This series' videos are too short! I wanna know how you did it alreadyyyy :/ Great series tho

[plpGTR]

The etsy folder. Never heard that before

[Alacritous]

On the Vic 20 WAAYYY back in the day, I used the Peek command to readout the contents of game cartridge adventure games to try and cheat. Much like this.

[dimasprajoko]

Nothing is safe, nothing is unhackable

[balint]

If you can read the firmware you should probably also be able to write it. Just re-upload the firmware with a known hash :)

[TheBeanMan]

What wordlist were you using? you may need to expand to a bigger or a combined wordlist. Like the wordlist I use is about 65GB.

[apeologists]

Does hardware have a high barrier to entry because of the necessary equipment and knowledge? I feel most security related things(CTFs, comps, certs) barely touches hardware beyond vocabulary and it's difficult for me to know where to start. I love this series of shorts, would love to see more soon

[mpjstuff]

"can't find a login?" Write your own. I suppose you might find that there is a "passwordaccepted=true" flag somewhere. Unless the rom is encrypted.

[NatePerdomo]

Wait. It’s pronounced “etsy” and not “et cetera?” Are we sure about that?

[Oliveria]

Wowie, I know nothing about any of this. Sounds impressive though!

[kevinmax]

What are those hooksed you used to attyach probles onto ICs legs?

[LoneStarBassPursuit]

Have some questions about hardware hacking.

[kevinstimson]

U could make allot of money selling patches for drones. Like height restiction

[alexstixx]

can you overwrite shadow w/ your own password hash and write it to the firmware? That should get you in.

[waelabdullrahman]

Why not booting from usb then packing the system using cpio after that chroot the packed image ???

[lionhack]

What if there are no UART interfaces or a flash chips available?

[daniels]

Uhh, Gulliver's Travels Easter egg in there?

[jaxjax]

Start anton up and overclock them GPU's

[michaellowder]

Is this the guy's channel that can get data off a dead phone like photos and texts?

[isicom-tim]

How did you cracked the password of uart?