3 ms·
Arent most IOT devices behind a router and thus unexposed directly to the internet (excepting routers)? This part of these attacks confuses me.
by acomjean 10y ago
Arent most IOT devices behind a router and thus unexposed directly to the internet (excepting routers)?
This part of these attacks confuses me.
- sajal83 10y agoCompromised routers can be used to compromise devices behind it. Also many devices (like IP cameras) usually have port forwarding to allow the users to access it from outside.
- kijin 10y agoMany devices use UPNP to automatically punch a hole through the NAT and expose their ports to the world.
- dendory 10y agoPretty much every router is sold with UPnP turned on. Many IOT devices use UPnP to open their interface to the world.
- tyingq 10y agoThis is an interesting approach to get past NAT: https://thehackerblog.com/sonar-a-framework-for-scanning-and-exploiting-internal-hosts-with-a-webpage/ https://thehackerblog.com/sonar-a-framework-for-scanning-and...