Sneak into Buildings with KNXnet/IP
Claire Vacherot demonstrates manipulating KNXnet/IP building automation protocols, unlocking commercial facility doors, lighting, and HVAC systems remotely.
Summary
The Proliferation of KNX in Building Management Systems
KNX and KNXnet/IP are standard automation protocols used worldwide to control lighting, motorized window shutters, access control, and HVAC across commercial real estate.
Reverse Engineering KNXnet/IP Communication Frames
Claire Vacherot analyzes unencrypted KNX frame structures, examining how building controllers discover and route telegrams over IP networks.
Executing Unauthorized Building Control Operations
By injecting crafted KNXnet/IP packets, an attacker on the local network or internet-exposed gateway can manipulate building environmental controls and open physical access doors.
Securing Building Management Infrastructure
Vacherot presents KNX Secure cryptographic extensions, network segmentation strategies, and monitoring tools to detect unauthorized building automation commands.
Related talks
Main Stage·26 min
Ricky Lawshae
Ricky Lawshae demonstrates compromising building physical security controllers and access badge systems via unauthenticated network protocol vulnerabilities.
Main Stage·40 min
Douglas McKee
Exposes critical authentication and authorization failures in enterprise HVAC and building automation systems reachable from corporate networks.
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.