Presented at
CarolinaCon 14 (2018),
April 14, 2018, 3 p.m.
(60 minutes)
During this presentation we will be focusing on what is typically referred to as destructive methods for data acquisition. Which is the process of removing memory devices from circuit boards to gain access to their contents. But we will take it a step further by covering how to restore the device back to operation and methods and techniques on altering the devices firmware prior to rebuilding, to allow for full root level access to functional system after recovery. Topics covered will include firmware extraction and modification attacks. Followed by desolder, resoldering, hot air and IR reflow methods, BGA reballing manually and with reball kit.
Presenters:
-
Deral Heiland / percent_x
as Deral Heiland (percent_x)
Deral Heiland, serves as a Research Lead (IoT) for Rapid7. Deral has over 20 years of experience in the Information Technology field, and over the last 10+ years Deral's career has focused on security research, security assessments, penetration testing, and consulting for corporations and government agencies. Deral also has conducted security research on numerous technical subjects, releasing white papers, security advisories, and has presented the information at numerous national and international security conferences including Blackhat, Defcon, Shmoocon, DerbyCon, RSAC, Hack In Paris. Deral has been interviewed and quoted by several media outlets and publications including ABC World News Tonight, BBC, Consumer Reports, MIT Technical Review, SC Magazine, and The Register.
Links:
Similar Presentations: