Pwn the World: Industrial IoT & Critical Infrastructure Exploitation Basics
Chris Kubecka covers the basics of hacking industrial IoT, SCADA networks, and critical infrastructure, demonstrating protocol weaknesses and physical impacts.
Summary
The Vulnerable Foundation of Modern Infrastructure
Critical utilities, maritime operations, and manufacturing plants rely on connected industrial IoT and legacy SCADA systems designed before modern cyber threats existed.
Discovering and Fingerprinting Exposed Industrial Devices
Chris Kubecka demonstrates using specialized search engines (Shodan, Censys) to locate exposed PLCs, building automation systems, and satellite communication terminals.
Exploiting Insecure Industrial Protocols (Modbus, BACnet, DNP3)
The speaker illustrates how cleartext industrial protocols lacking authentication allow remote attackers to inject control commands and alter sensor telemetry.
Bridging the Gap Between Engineering Safety and Cyber Defense
The presentation emphasizes the urgent need for OT-specific security controls, air-gapping verification, and collaborative engineering safety standards.
Related talks
Village Presentations·39 min
K. Reid Wightman
K. Reid Wightman investigates vulnerability inheritance in industrial PLCs, demonstrating how shared third-party network stacks propagate critical zero-days.
ICS Village·2 min
The ICS Village closing reflections and fast-forward overview on emerging threats and security challenges across industrial control systems.
Main Stage·22 min
Sharon Brizinov
Sharon Brizinov demonstrates 'Evil PLC' attacks, weaponizing compromised industrial PLCs as offensive footholds to compromise engineering workstations.