Nullcon Berlin 2023 | The Silent Spy Among Us: Modern Attacks Against Smart Intercoms by Vera Mens
About this talk
This talk explores the security of smart cloud-based intercoms after the speaker's company encountered a new device in their office. The speaker dives into how these modern intercoms operate, focusing on the technologies and protocols involved in VOIP communications, such as SIP, SDP, STUN, and RTP. The session reveals multiple vulnerabilities discovered in the intercom and its connection to the cloud platform, demonstrating how exploiting these vulnerabilities allowed for remote code execution, access to images from cloud-connected devices, and the ability to open remote video streams silently.
More from this event
See all 17 talks →
Nullcon Berlin 2023 | Server Side Prototype Pollution: Blackbox Detection Without The DoS by Gareth
42:10
Nullcon Berlin 2023 | Why I Write My Own Security Tooling & Why You Should Too! by James Forshaw
41:49
Nullcon Berlin 2023 | SCCI: The Road To Side-Channel Regression Testing In CI Development by Witold
46:39
Nullcon Berlin 2023 | Panel: Securing the Road to Autonomy
36:23