View source for See no evil, hear no evil: Hacking invisibly and silently with light and sound

From BruCON 2017

← See no evil, hear no evil: Hacking invisibly and silently with light and sound

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page has been protected to prevent editing or other actions.

You can view and copy the source of this page.

Traditional techniques for C2 channels, exfiltration, surveillance, and exploitation are often frustrated by the growing sophistication and prevalence of security protections, monitoring solutions, and controls. Whilst all is definitely not lost, from an attacker's perspective - we constantly see examples of attackers creatively bypassing such protections - it is always beneficial to have more weapons in one's arsenal, particularly when coming up against heavily-defended networks and highly-secured environments.

This talk demonstrates a number of techniques and attacks which leverage light and/or sound, using off-the-shelf hardware. It covers everything from C2 channels and exfiltration using light and near-ultrasonic sound, to disabling and disrupting motion detectors; from laser microphones, to catapulting drones into the stratosphere (or the ceiling if you're risk-averse); from trolling friends, to jamming speech and demotivating malware analysts.
This talk not only provides attendees with a new suite of techniques and methodologies to consider when coming up against a well-defended target, but also demonstrates, in a hopefully fun and practical way, how these techniques work, their advantages, disadvantages, and possible future developments. It also gives details of real case studies where some of these techniques have been used, and provides defenders with realistic methods for the mitigation of these attacks.

Finally, the talk covers some ideas for future research in this area.

Return to See no evil, hear no evil: Hacking invisibly and silently with light and sound.

Retrieved from "https://2017.brucon.org/index.php/See_no_evil,_hear_no_evil:_Hacking_invisibly_and_silently_with_light_and_sound"

navigation

SEARCH

TOOLBOX

LANGUAGES

View source for See no evil, hear no evil: Hacking invisibly and silently with light and sound

From BruCON 2017