BLUEMONDAY Series: Exploitation and Mapping of Vulnerable Devices
Ken Pyle presents the BLUEMONDAY research series, uncovering systemic insecure-by-design vulnerabilities in enterprise IoT, NAS, and cloud gateways.
Summary
Insecure Design in Enterprise IoT Gateways
Enterprise backup appliances, NAS devices, and cloud-managed network gateways (such as Datto, Meraki, and Synology) manage vast repositories of sensitive corporate data.
The BLUEMONDAY Vulnerability Research Findings
Ken Pyle discloses a series of architectural design flaws and web application vulnerabilities that allow attackers to bypass authentication and access device shares.
Exploiting Self-Provisioning Cloud Relay Services
Pyle illustrates how automated cloud relay connections inadvertently expose internal storage volumes and administrative interfaces to public internet scanning.
Remediation Guidance for Enterprise Deployments
The author provides network administrators with segmentation rules and configuration audits to protect corporate storage gateways from unauthorized remote access.
Related talks
Village Interviews·1 min
A tour of the IoT Village at DEF CON 32 exploring hands-on router hacking, connected device vulnerability research, and zero-day labs.
IoT Village·37 min
Elvis Collado
This talk is about how an unauthenticated heap-based buffer overflow vulnerability was discovered and exploited within a router distributed by a market-leading ISP. Despite the targeted process utilizing mitigations s...
IoT Village·44 min
Daniel Wegemer
We will show how the Fitbit ecosystem works based on the Fitbit Flex and Fitbit Charge HR as well as the Fitbit Ionic smartwatch. We also show how we modified the firmware of the Fitbit Flex and discuss several vulner...