Offensive Embedded Exploitation: From Hardware Interfaces to Root Shells
Kaustubh provides a comprehensive walkthrough of offensive embedded IoT device exploitation, covering UART/JTAG probing, firmware extraction, and memory corruption.
Summary
The Proliferation of Connected Embedded Devices
Smart consumer appliances, industrial gateways, and medical IoT devices integrate embedded Linux microcontrollers that frequently lack basic physical and software protections.
Hardware Interface Probing: UART, JTAG, and SPI
Kaustubh demonstrates identifying physical debug interfaces on printed circuit boards, connecting logic analyzers, and dumping SPI flash memory chips.
Firmware Reverse Engineering and Root Filesystem Extraction
The author walks through unpacking proprietary firmware images using binwalk, analyzing squashfs filesystems, and discovering hardcoded root credentials and backdoors.
Memory Corruption and Service Exploitation
The presentation details finding buffer overflows in embedded HTTP and Telnet daemons, cross-compiling payloads, and spawning interactive root shells.
Related talks
ROOTCON Hacking Conference·40 min
Presenters detail vulnerability discovery and exploitation in IoT and JTAG Primer by: Michel Chamberland.
Creator Stage·21 min
Larry Pesce
Demonstrates hardware disassembly, SPI flash extraction, and JTAG interfacing to build an accurate Software Bill of Materials for an IoT Wi-Fi router.
Village Interviews·1 min
A tour of the IoT Village at DEF CON 32 exploring hands-on router hacking, connected device vulnerability research, and zero-day labs.