Hardwear.io NL 2025: Arise From The Wireless: Breaking The Security Barrier In Wi-Fi - Wei-Che Kao

Описание: Talk Title: Arise from the Wireless: Breaking the Security Barrier in Wi-Fi
Speaker: Wei-Che Kao

Abstract:
Wi-Fi has become the backbone of modern IoT communication and is now found in a wide range of devices such as smartphones, in-vehicle infotainment systems, smart cameras, smart TVs, and home routers. If attackers uncover vulnerabilities in Wi-Fi implementations, they can launch indiscriminate attacks against any Wi-Fi device, disrupting or even taking control of your daily life.

Until now, attacks on Wi-Fi devices often required Wi-Fi passphrase to join the private network before launching any attack. However, our in-depth analysis of MediaTek’s Wi-Fi implementation uncovered multiple “shortcuts” allowing hackers to gain control without authentication. Notably, a frame injection vulnerability was discovered that allows unauthenticated attackers to skip pairwise master key validation and gain private network access. And what’s more, we dug deeper and uncovered vulnerabilities in MediaTek’s Wi-Fi frame processing that allows nearby attackers to achieve remote code exeuction without requiring a Wi-Fi passphrase.

In this talk, we will present Wi-Fi architecture alongside practical techniques for reverse-engineering and exploiting it. Attendees will learn how to analyze custom instructions, use debugging tools, and leverage public resources to reconstruct MediaTek’s Wi-Fi chipset architecture. We will cover authentication bypass, frame-parsing flaws, and Wi-Fi 7 vulnerabilities, demonstrating how each can be used to compromise Wi-Fi devices. By the end of the session, attendees will have mastered a repeatable methodology for uncovering and exploiting Wi-Fi vulnerabilities.

Slides: https://hardwear.io/archives/netherla...
----
Follow us on : https://hardwear.io/
X : https://x.com/hardwear_io
LinkedIn:   / hardwear-io-hardwaresecurityconferenceandt...  
Facebook:   / hardwear.io