SBOMs for Evil: From Software Supply Chain Documentation to an Attack Path
summary
SBOMs turn into attack playbooks when enriched with CVE and threat data: an uploaded OpenWrt firmware yields 1,563 findings with 38 high and 10 critical, flags LuCI CVEs tied to PoC Python exploits that chain to a netcat-based shell, and internet scans show 61,000 LuCI exposures. Analysis of a VPN appliance SBOM finds libnmap/Paramiko/DPKT left on disk enabling “live off the land” scanning and SSH tooling. The demo works end to end and recommends CI/CD SBOMs with VEX entries.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 3:19What are SBOMs
- 7:56SBOMs for malicious use
- 11:09OpenWrt firmware analysis
- 23:47VPN concentrator attack path
- 33:17Use SBOMs responsibly
- 41:12Adopting SBOMs practically
- 46:14Q&A
related talks
43mA radiography of a SBOM vulnerability scanner
29mUnlocking the Power of SBOMs: A Deep Dive into Risk Management and Cybersecurity Posture
37mSBOM & Vulnerabilities in SEAPATH
57mSBOMs – The Missing Link
27mSecuring Open Source With SBOM: From Visibility To Trust
46mAn SBOM Primer: From Licenses to Security, Know What’s in Your Code, or Someone Else’s!
29mMaking Software Bill of Materials (SBOMs) Actionable
56mFrom SBOM to VEX - Discovering What's in the Box and How Badly it Can Hurt You