Backdooring the Frontdoor

More documents

Recommendations

Info

After mapping out api Postman collection created (see github repo)
Page 1 and 2: Backdooring the Frontdoor Hacking a
Page 3: August Smart Lock
Page 6 and 7: Source: august.com (August 17th, 20
Page 8 and 9: Source: august.com (September 14th,
Page 12 and 13: Security claims ● ● ● ● ●
Page 14 and 15: WiFi | HTTPS BLE
Page 17 and 18: Certificate pinning …crap...
Page 19: Disabling SSL/TLS system wide at De
Page 29 and 30: No Jailbreak
Page 31: Security claims ● ● ● ● ●
Page 36 and 37: Creepy
Page 38 and 39: MiTM can modify traffic
Page 40 and 41: What else can we do?
Page 43 and 44: User Types Guest = user Owner = sup
Page 45 and 46: Guests can change lock settings!
Page 48 and 49: Security claims ● ● ● ● ●
Page 50 and 51: WiFi | HTTPS BLE
Page 55: Intercepting BLE Solution: Ubertoot
Page 58 and 59: Tap
Page 60 and 61: Plaintext BLE traffic in log files!
Page 63 and 64: SEC write/indicate 1. Communicates
Page 65 and 66: Lock security model ● BLE + Just
Page 67 and 68: "Safer than … codes that can be c
Page 69: This is weird
Page 72 and 73: Firmware key 'can not' be changed
Page 74: Security claims ● ● ● ● ●
Page 78 and 79: Don't give guest access to someone
Page 80 and 81: Demo 1. Unlock without a trace 2.
Page 82 and 83:
What was done correctly ● ● ●
show all

Backdooring the Frontdoor

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?