CVE Hunting: Wi-Fi Routers, OSINT & 'The Tyranny of the Default'
Where
PasswordsCon
BSides Las Vegas
Duration
24 min
Walks through hunting CVEs in Wi-Fi routers using open-source research and the risks of default configurations.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Breaking Ground·17 min
Dor Dali
Shows how reading public RDP Gateway protocol specifications exposed remote code execution, an authentication bypass and other CVEs.
vulnerability-researchnetworkopen-source+2
Main Stage·43 min
Qiqing Huang
Shows how ASN.1-generated decoders in 5G phone basebands skip specification rules, so one altered byte can crash a modem before authentication.
vulnerability-researchmobilenetwork+2
PasswordsCon·44 min
Tom Pohl
Shows how office printers leak stored credentials that can be used to move deeper into a corporate network.
devicenetworkattack+2