How to Reverse-Engineer a Network Protocol and Find Vulnerabilities in a Device Without Using Firmware
summary
Describes methods for reverse-engineering a network protocol and discovering vulnerabilities in a device without accessing its firmware. Covers practical techniques for analyzing network traffic and device behavior to extract protocol structure and identify security flaws in IoT, embedded, and industrial devices.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 3:35What is a PLC
- 9:17Mitsubishi controller overview
- 10:23Network traffic analysis
- 13:34Comparison with known protocols
- 15:44Reverse engineering start
- 18:14PLC internal devices
- 21:02Using a simulator
- 23:32Firmware reverse engineering
- 27:25Protocol structure
- 29:12Night Rider demo
- 31:42Found vulnerabilities
- 33:08DoS vulnerabilities and impacts
- 35:40DoS demo on testbed
- 38:52Second DoS vulnerability
- 40:39Conclusion and advice
- 41:20Q&A
related talks
01h 46mTutorial: Introduction to Reverse Engineering
51mReverse Engineering of Proprietary Radio Protocols
43mChinese Network Hardware: Risks, Potential and Reverse Engineering
51mOT Reverse Engineering - What Can Be Automated?
32mCommon Attacks on IoT Devices
30mCommSec D1 - How to Find and Exploit Bugs in IoT Devices
31mIoT Bug Hunting: From Shells to Responsible Disclosure
28mThe IoT Hacker's Toolkit