Inside Dash Cam Custom Protocols and Discovered 0days
Analyzes connected dash cams from global manufacturers, discovering shared OEM vulnerabilities, OS command injections, and custom protocol flaws.
Summary
Connected Dash Cam Attack Surface
Modern automotive dash cams increasingly incorporate Wi-Fi, Bluetooth, and cellular connectivity, creating new attack surfaces that jeopardize vehicle and passenger privacy.
Firmware Extraction and Boot Logic Analysis
Researchers evaluated dash cams from manufacturers in South Korea, the United States, Germany, and China, extracting filesystems to analyze boot logic and debug ports.
Zero Day Vulnerabilities in Custom Protocols
Analysis revealed critical zero-day vulnerabilities, including unauthenticated OS command injection, logic bypasses, and insecure communications over custom protocols.
Shared OEM Hardware and Supply Chain Flaws
Testing showed that four distinct commercial dash cam models shared an identical OEM circuit board, allowing a single exploit chain to compromise multiple vendor product lines.
Related talks
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
Creator Stage·54 min
Andrew Bellini
Provides a beginner-friendly methodology and budget hardware toolkit guide for disassembling, extracting firmware, and hacking IoT devices.
Creator Stage·28 min
Justin Mott · Ava Petersen
Documents finding nine zero-day vulnerabilities in Vilo consumer home routers through UART interfacing, firmware reversing, and protocol analysis.