Hacking ISPs with Point-to-Pwn Protocol over Ethernet (PPPoE)
Gal Zror turns the tables on SOHO router research, demonstrating how compromised customer routers exploit upstream ISP PPPoE concentrators and infrastructure.
Summary
Reversing the Attack Vector: Router to ISP Infrastructure
While security research typically focuses on hacking consumer SOHO routers from the internet, Gal Zror explores attacking ISP core networks directly from compromised routers.
Analyzing Point-to-Point Protocol over Ethernet (PPPoE)
Zror investigates the PPPoE handshake protocol used by millions of broadband modems to establish authenticated WAN connections with ISP access concentrators (BRASS/BNG).
Fuzzing PPPoE Daemons and Kernel Parsers
The speaker demonstrates fuzzing proprietary and open-source PPPoE implementations, uncovering memory corruption and remote code execution vulnerabilities in ISP aggregation nodes.
Securing Broadband Access Networks
The presentation provides telecom network architects with guidance on protocol validation, process sandboxing, and subscriber isolation.
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Wireless Village·33 min
Travis Goodspeed
Travis Goodspeed provides an update on the Goodwatch open-source wrist-worn RF radio hacking and packet manipulation platform.
Main Stage·41 min
Jeroen 'Jeroen' Domburg
Demonstrates hardware hacking and reverse engineering to run custom Linux kernels and open software on inexpensive USB webcams.