SSH port forwarding through command injection in Veralite home security controller

Опубликовано: 17 Март 2016
на канале: Offensive Cyber-Security
287
1

This video shows the command injection issue existing in Veralite smart home controllers that allow an attacker to port forward and control an internal Veralite home controller. This attack has been fixed as per the Veralite's dev team and hence the attack is published here. Between a great book that covers the details on this specific home controller is written by an author named Samuel Huntley and is available at amazon: http://www.amazon.com/Embedded-Device...