#NullconBerlin2025 | DHCPwned: Owning Cameras One Lease at a Time by Emanuele Barbeno

This talk covers the exploitation of vulnerabilities in Ubiquiti AI Bullet IP cameras as part of the Pwn2Own 2024 event, specifically in the Surveillance Systems category. Emanuele Barbeno walks through the analysis process to identify attack surfaces, detailing the vulnerabilities discovered and the techniques employed to achieve unauthenticated remote code execution (RCE). The speaker addresses the unique challenges faced during Pwn2Own, including time constraints and the reliability of exploits, while also discussing the development of proof-of-concept exploits and the design choices that contributed to their effectiveness.