Defeating PlayStation 5 network encryption
summary
A new automated MITM tool CMM replays 10–20 year old TLS tricks to fuzz client validation and finds 200 vulnerable apps, about half still unpatched; combined bug bounties total roughly $200,000 and a single PlayStation report nets $50,000. The root cause is library misuse — e.g. basicConstraints missing / CA checks omitted in an HTTP/TLS client — which lets most PS4/PS5 connections be decrypted; Sony issues a forced patch and firmware update.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 13:18TLS vulnerabilities in IoT
- 23:57PS5 encryption bypass
- 27:07PlayStation flaw details
- 30:17Sony’s patch update
- 33:30Old hacking techniques
- 36:25Testing platform flaws
- 38:14Call to action
related talks
30mNext-Gen Exploitation: Exploring The PS5 Security Landscape
45mThe Top 10 Web Hacks of 2014
53mThe BEAST Wins Again: Why TLS Keeps Failing to Protect HTTP
29mLike Lightning From the Cloud: Finding RCEs in an Embedded TLS Library
46mSelf-Signed, Why Not! Exploiting Insecure Certificate Validation In iOS And macOS
39mA Pain in the NAS: Exploiting Cloud Connectivity to PWN Your NAS
45mAutomatic Discovery of Evasion Vulnerabilities Using Targeted Protocol Fuzzing
55mAttacking Modern Web Technologies