conf 2024-11-07 14:15 – 15:00 La Marive EN

Now I See You: Pwning The Synology BC500 Camera

Name: Black Alps 2024
Start: 2024-11-06
End: 2024-11-07
Location: La Marive, Yverdon-les-Bains

Abstract

Data privacy and network security are threatened by the rapid spread of Internet-connected devices. This includes IP cameras which can be found in both residential and commercial environments. This talk outlines step by step how we successfully hacked the Synology BC500 IP camera for Pwn2Own 2023 Toronto.

Speaker

Emanuele Barbeno

IT Security Analyst

Compass Security

Emanuele has 10 years of experience working in the area of IT security and he is an IT Security Analyst at Compass Security since 2019. As part of Compass Security's offensive security team, Emanuele conducts security analysis of web applications, external and internal networks, cloud infrastructures, as well as Android applications. Emanuele has responsibly disclosed vulnerabilities in different open source libraries and products, among others in products from Microsoft, Alibaba and others and is also responsible for giving various security-related trainings at Compass Security such as web application security and internal network with focus on the Active Directory security.

Talk

Now I See You: Pwning The Synology BC500 Camera