Yacht Pwned
Uncovers vulnerabilities in luxury yacht automation systems, NMEA 2000 marine networks, and satellite telematics.
Summary
In this technical penetration testing briefing from the DEF CON Safe Mode Hack the Seas Village, researcher OB166 presents "Yacht Pwned," exploring the expansive digital and industrial attack surface aboard luxury superyachts. Opening at 00:02, the speaker outlines the dense networking architectures deployed on modern mega-yachts.
At 12:00, he reveals that high-end vessels typically house multiple 42U equipment racks containing satellite communication modems, guest Wi-Fi infrastructure, entertainment servers, and marine automation controllers. At 24:01, the presenter demonstrates pivoting from unsegmented guest networks through NMEA gateways that bridge vessel IT with critical maritime operational networks.
At 36:02, he shows how sniffing unencrypted serial and Ethernet communications enables testers to manipulate environmental automation and navigation systems, concluding at 48:02 with defensive segmentation guidelines published on his maritime research repository. (AI summary — Gemini Flash)
Related talks
Hack the Seas Village·28 min
Andrew Tierney
Examines real-world cyber attack surfaces across cruise ships, maritime navigation systems, and onboard industrial controls.
Creator Stage·25 min
Juwon Cho
Presents vulnerability analysis and web interface exploits (CVE-2023-44852 to CVE-2023-44857) targeting maritime VSAT antenna control units and testbed validations.
Creator Stage·25 min
Avinash Srinivasan · Brien Croteau
Presents an SDN and SDR-driven cross-layer framework utilizing SATCOM infrastructure for resilient, reconfigurable communications across autonomous vessels.