PwdLess: Exploitation Tales from RouterLand | Cristofaro Mune | NULLCON Goa 2020

This talk guides the audience through the mindset of an attacker, focusing on techniques and decision-making when targeting real consumer IoT devices. The speaker explores various techniques including fuzzing, reverse engineering, code injection, and exploit development within constrained environments. Multiple methods are used to achieve full remote control of the device, highlighting common patterns in IoT device security and revealing previously undisclosed vulnerabilities. The discussion also addresses the security challenges related to supply chains, device obsolescence, and security support. Cristofaro Mune brings over 15 years of experience in software and hardware security assessment, having spoken at prestigious conferences on topics such as IoT exploitation and mobile security.