From pocket to Pwn: How we hacked a multinational Corp for $200 with... (Tim Shipp)
summary
Claims a full-domain compromise using off‑the‑shelf gear for about $200 (real cost ~$125 after the $25 Android developer fee). Uses a magnetic nRF24 card reader + flipper, Bluetooth rubber‑ducky payloads to deliver a short-lived Metasploit shell, then sets SELinux permissive, installs Termux and a reverse SSH/ADB tunnel to AWS to persist until reboot; five minutes of initial access is enough to enumerate, proxy (SOCKS), and pivot into the Windows domain.
AI-written summary · about
chapters (14)
- 0:00Introduction to talk
- 1:48Speaker background and legal disclaimer
- 3:36Customer red teaming setup
- 5:24Bluetooth jamming concept
- 6:48Targeting electric vehicles
- 8:10Tools and budget breakdown
- 9:55Android developer registration trick
- 12:10USB rubber ducky over Bluetooth demo
- 14:17Remote access via ADB shell
- 16:20Lateral movement in corporate network
- 18:45Lessons learned and cost breakdown
- 20:12Defensive recommendations
- 23:02Q&A session begins
- 25:49Final Q&A and wrap-up
related talks
31mConquer the Enterprise from Inside
39mHow to think like a hacker
41mJust Another Live Hacking - How Insecure Is Secure Enough?
46mThe Art of Cyber Espionage: Unleashing the Power of SCADA and ICS Hacking
51mSteering Clear of Danger: Decrypting the Realities of Remote Car Hacking
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
01h 06mHow hacking works
58mHacking in 2016 - How is our systems broken?