Sniffing Cable Modems

Presented at DEF CON 16 (2008), Aug. 8, 2008, 6 p.m. (50 minutes).

Cable modems are widely used these days for internet connections or other applications. This talk gives a detailed overview of this mean of communication with a focus on its security. DOCSIS (Data Over Cable Service Interface Specification) is currently the most used protocol around the world for providing internet over TV coaxial cable. Due to its nature, this protocol can easily be sniffed by taping onto the TV cable using a digital TV card. By doing this, you can not only sniff your own connection but all the connections of the entire neighborhood. With my tool packet-o-matic and an inexpensive DVB-C card, countless things are possible ranging from dumping people's email into maildir to removing firewall rules and quota limitation on your connection or even a DoS of all HTTP communications by injecting TCP reset packets.

Presenters:

• Guy Martin - Security Researcher
  Guy Martin is an active open source developer interested in all technologies that comes to his hands. After porting Gentoo Linux on the HPPA architecture five years ago, he's now primarily focused on writing a new kind of sniffer, packet-o-matic.

Links:

• https://defcon.org/html/defcon-16/dc-16-speakers.html#Martin
• https://infocon.org/cons/DEF CON/DEF CON 16/DEF CON 16 video/DEF CON 16 - Guy Martin - Sniffing Cable Modems - Video.mp4
• https://www.youtube.com/watch?v=7a_x10qi4Cs

Similar Presentations:

• DEF CON 18 (2010) / Hacking DOCSIS For Fun and Profit
• THOTCON 0x3 (2012) / Behind the Scenes: Pwning Satellite/Cable TV
• DEF CON 16 (2008) / Free Anonymous Internet Using Modified Cable Modems