Nullcon Goa 2025: Pwning Smart Weighing Machines wt API & Hardware Hacking - Eugene Lim
About this talk
This talk covers the process of reconnaissance, hardware analysis, firmware reverse-engineering, and exploiting insecure APIs, highlighting the broader security challenges associated with IoT devices. The speaker investigates vulnerabilities in smart weighing machines from a Chinese OEM and a European vendor, demonstrating flaws that could allow an attacker to link any device to their account. This presentation provides valuable methods applicable to a variety of smart devices, enhancing understanding of IoT security.
More from this event
See all 30 talks →
Nullcon Goa 2025: Securing the chains: Building defensive layers for software supply chains
38:14
Nullcon Goa 2025 | Large-Scale Exposure Of Orphaned Commits On Major Git Platforms by Kumar Ashwin
26:30
Nullcon Goa 2025 | Panel: Modernizing Security Architecture: Platforms or Best-of-Breed, What Works?
44:47
Nullcon Goa 2025: Panel | Cyber Fusion Center: The Command Center For Integrated Cyber Defense
42:01