PwdLess - Exploitation Tales from RouterLand

This course explores attacker mindset, techniques, and choices when targeting a real consumer IoT device. It covers fuzzing, reverse engineering, code injection, and exploit development in constrained environments. Participants will learn how to achieve full remote control of the target through various methods, discussing common IoT device security patterns and previously undisclosed vulnerabilities. The course also addresses security challenges related to supply chains, device obsolescence, and security support. The intended audience includes individuals interested in software and hardware security assessment, IoT exploitation, and mobile security. The teaching method involves a presentation format with real-world demonstrations and examples.