{"guid":"lEFQRUU823FUOPqKG85vWg","title":"Too Many Cooks - Exploiting the Internet-of-TR-069-Things","subtitle":null,"slug":"31c3_-_6166_-_en_-_saal_6_-_201412282145_-_too_many_cooks_-_exploiting_the_internet-of-tr-069-things_-_lior_oppenheim_-_shahar_tal","link":"http://events.ccc.de/congress/2014/Fahrplan/events/6166.html","description":"TL;DR We unravel the story of a bug that would become one of the most important vulnerabilities released this year. Also, we have free cookies.\nThe findings we published earlier this year demystified the voodoo that is TR-069, demonstrated how mass pwnage can be achieved via server-side attacks, and proved the landscape is ripe for harvesting. We will continue where we left off to explore TR-069 client-side vulnerabilities; we analyze client implementations, pour some insight into mysterious results from our internet-wide scans, and follow to mass pwnage through remote code execution on millions of online devices. again.\n","original_language":"eng","persons":["Lior Oppenheim","Shahar Tal"],"view_count":8637,"promoted":false,"date":"2014-12-28T21:45:00.000+01:00","release_date":"2014-12-29T01:00:00.000+01:00","updated_at":"2026-05-03T13:30:05.100+02:00","tags":["Security \u0026 Hacking"],"length":3217,"duration":3217,"thumb_url":"https://static.media.ccc.de/media/congress/2014/6166-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2014/6166-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2014/lEFQRUU823FUOPqKG85vWg-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2014/lEFQRUU823FUOPqKG85vWg-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/31c3_-_6166_-_en_-_saal_6_-_201412282145_-_too_many_cooks_-_exploiting_the_internet-of-tr-069-things_-_lior_oppenheim_-_shahar_tal","url":"https://api.media.ccc.de/public/events/lEFQRUU823FUOPqKG85vWg","conference_title":"31C3: a new dawn","conference_url":"https://api.media.ccc.de/public/conferences/31c3","related":[{"event_id":110,"event_guid":"import-4c3f3c71414bac18ea","weight":1},{"event_id":1359,"event_guid":"import-014f898cf2db41888a","weight":2},{"event_id":1396,"event_guid":"import-75b2d58a4dc12e1a88","weight":1},{"event_id":1422,"event_guid":"import-d7f37b1162046a6dc0","weight":1},{"event_id":1514,"event_guid":"import-277d479110cdedadc5","weight":1},{"event_id":1555,"event_guid":"import-1343b743a0a62d96cf","weight":1},{"event_id":1590,"event_guid":"import-6e9147236a7cb3f1ce","weight":1},{"event_id":1642,"event_guid":"import-fa7c344d969e1f7c8d","weight":1},{"event_id":1673,"event_guid":"import-12dadd7eeae0711182","weight":1},{"event_id":1694,"event_guid":"import-93c25b8ee500834319","weight":1},{"event_id":1698,"event_guid":"import-8ea249dc923ddef614","weight":2},{"event_id":1717,"event_guid":"import-414f4552e787b88b7c","weight":1},{"event_id":1722,"event_guid":"RiskSjr33wsyUrC5oX80uw","weight":2},{"event_id":1736,"event_guid":"VFu55BmcslSk-0RC0SZioA","weight":1},{"event_id":1743,"event_guid":"i5TMBRf_-3TiDrceuY3osQ","weight":1},{"event_id":1744,"event_guid":"0eXymhGD4B5LSOSwUFnPfg","weight":1},{"event_id":1750,"event_guid":"jFlUl2VQF7jfm3M4V2Iuiw","weight":1},{"event_id":1776,"event_guid":"bucvwuHzaSgt7x_L06ZcFA","weight":1},{"event_id":1807,"event_guid":"wGEf2KpP3_UU4Qm0vrtz1g","weight":1},{"event_id":1829,"event_guid":"n4vgYDc2e8tbtF6g9mZIlA","weight":1},{"event_id":2151,"event_guid":"SXxWu-U4pNjjFZLl9XXDDA","weight":1},{"event_id":2157,"event_guid":"szHEwO2pazLIG7w8wQTa1w","weight":2},{"event_id":2161,"event_guid":"oI8n77eKy3Uz2Fklmk4hVQ","weight":2},{"event_id":2164,"event_guid":"XGqu620EKR92-WUWMXNRvA","weight":2},{"event_id":2165,"event_guid":"hnRe8t6JYI_8PYnFh-dsug","weight":2},{"event_id":2166,"event_guid":"Km3oA97mSXAMOZGte_v8Fg","weight":1},{"event_id":2170,"event_guid":"DvpNPWPGVgSqGcOI1WK45g","weight":3},{"event_id":2176,"event_guid":"psS7-V3-VqYDuiKCr5PmWg","weight":2},{"event_id":2189,"event_guid":"0T8GTXjwMVJLM_n5VEuE0A","weight":1},{"event_id":2197,"event_guid":"qRQclNxyOV7ZYPwbrXrw1Q","weight":2},{"event_id":2199,"event_guid":"MBpSOQzfPD4ky0hqL6B-hg","weight":2},{"event_id":2205,"event_guid":"gRbk7OprwZBqF3cv0NddMQ","weight":2},{"event_id":2209,"event_guid":"6bXRd7c5UJbIlb4QiTd1ng","weight":1},{"event_id":2211,"event_guid":"bX1J_FaFjsFbyn15h7OGdg","weight":2},{"event_id":2221,"event_guid":"defd3b01-c39d-433f-b3c4-dbea1ea2fe00","weight":3},{"event_id":2224,"event_guid":"SkWIxKKgQFunVQAJT_oagA","weight":3},{"event_id":2226,"event_guid":"hl9yD87mkTYvOY5J2BIQwQ","weight":4},{"event_id":2227,"event_guid":"H1GEe9l64eUbo1oZXtLkEg","weight":2},{"event_id":2229,"event_guid":"P8L4krxqjXP7zHMZToU6CQ","weight":1},{"event_id":2239,"event_guid":"-fw4u4HgOtFUvdKnF7Xrbw","weight":2},{"event_id":2241,"event_guid":"4f9TGtkPJafH9LU7RqsZnw","weight":1},{"event_id":2249,"event_guid":"7dt2PzyGxZI8i0QQysCZ6Q","weight":1},{"event_id":2252,"event_guid":"Lt7ABZNFLzAgdiGcpHPHUQ","weight":1},{"event_id":2261,"event_guid":"uJGVeWdNzwr_8AvAXa2DKA","weight":2},{"event_id":2269,"event_guid":"C4w30id6HpMnzKM2xcrT4g","weight":1},{"event_id":2273,"event_guid":"38ea922b-5b2d-4290-8c79-da0c891edd7a","weight":1},{"event_id":2277,"event_guid":"ad722522-5817-4317-8f3d-bb443b4e6c77","weight":1},{"event_id":2554,"event_guid":"0030f6d6-8bc4-400c-a000-020ee1892bee","weight":1},{"event_id":2565,"event_guid":"2ca563bd-9c30-432b-a01b-f564757030d4","weight":1},{"event_id":2577,"event_guid":"81e7a37a-1be3-4d76-98da-42afa71fa2ee","weight":1},{"event_id":2815,"event_guid":"6ef3da22-6e38-4997-b44d-e279907be98d","weight":1},{"event_id":2819,"event_guid":"dda07b64-844a-4a54-8135-8c03f7ee6718","weight":1},{"event_id":2830,"event_guid":"28891a0d-98d9-484a-bd59-ccea80852b12","weight":1},{"event_id":2833,"event_guid":"534b5a9d-f786-4fc9-96d1-a0827125ee6e","weight":1},{"event_id":2837,"event_guid":"9f2e9ff0-1555-470b-8743-9f07f54e9097","weight":1},{"event_id":2844,"event_guid":"b753dbd8-32bb-437c-9f15-db0d7ac1811a","weight":1},{"event_id":2867,"event_guid":"341d7c6a-a8c0-47ec-8c24-4f6fc8639f3f","weight":1},{"event_id":2875,"event_guid":"0bdbef2d-1594-4582-b315-7ee5da5505bf","weight":2},{"event_id":2879,"event_guid":"3f61827f-8b17-47b4-a43c-e0dce6532cbe","weight":1},{"event_id":2882,"event_guid":"df35c860-60fc-4df8-801c-b2f4f91b33b8","weight":1},{"event_id":2886,"event_guid":"088e3078-bab2-433d-8be2-f1a4b37b4d5c","weight":1},{"event_id":2888,"event_guid":"018148c1-62c9-4796-8443-2a8c8b8e3a01","weight":1},{"event_id":2896,"event_guid":"ab751ee0-8623-4a20-bab3-f82f8cf3dd82","weight":2},{"event_id":2907,"event_guid":"3b16ddc9-499b-44b1-9084-b3e328daea30","weight":1},{"event_id":2913,"event_guid":"25dc688f-fe4f-4648-8b82-82c05cc090b8","weight":1},{"event_id":2920,"event_guid":"d516ffe3-d32d-4bed-8289-09d245ac2b2f","weight":1},{"event_id":2927,"event_guid":"f6149460-a278-4600-bf9d-61ea737c46de","weight":1},{"event_id":2938,"event_guid":"03c8501f-d327-4228-a9fe-2635370d25d2","weight":1},{"event_id":2951,"event_guid":"2e3d2878-e8b0-44cd-aea8-baf52be25ecf","weight":2},{"event_id":2987,"event_guid":"9a2446e0-f287-4e92-9030-0df63edef025","weight":1},{"event_id":3039,"event_guid":"4a820df8-8297-4135-9240-6e51bcf47b9b","weight":1},{"event_id":3364,"event_guid":"673a0736-8798-56d3-9083-7fc72a304f31","weight":1},{"event_id":3386,"event_guid":"02c20a13-fdf5-4fc3-a86a-dbb08a23ea20","weight":1},{"event_id":3597,"event_guid":"87092ad2-d3fd-4a37-bb58-1fe71217a06b","weight":1},{"event_id":3601,"event_guid":"5a517be2-220b-4eb6-88c3-e7ef08c98ace","weight":1},{"event_id":3615,"event_guid":"74783236-46f4-493c-9574-1b27a44847b7","weight":2},{"event_id":3618,"event_guid":"fc959f0c-5e93-4b23-8a63-5b6478adb700","weight":1},{"event_id":3629,"event_guid":"686b1941-b211-4902-b4c4-1d642398e08b","weight":1},{"event_id":3643,"event_guid":"2689ebfe-0d84-4c88-9ea6-5cadad9d4fa4","weight":1},{"event_id":3646,"event_guid":"f32a1a13-b244-4a1d-a6cf-99c5e3bdad27","weight":1},{"event_id":3672,"event_guid":"c45fa431-69f9-47db-a90c-fb596efdcb55","weight":1},{"event_id":3674,"event_guid":"bfc2ab1f-8384-4d7d-801a-dde8c81e039c","weight":1},{"event_id":3687,"event_guid":"5ae90a09-0b83-4357-bdb4-9afc04100c68","weight":1},{"event_id":3702,"event_guid":"5fb5e620-383a-4679-b37a-beef20bcd4fe","weight":1},{"event_id":3704,"event_guid":"a1f43609-a446-41e7-9ac6-4db12bcb14c1","weight":1},{"event_id":3710,"event_guid":"a288d8dd-db0a-455d-881b-bc6d9c593fa3","weight":1},{"event_id":3734,"event_guid":"34ea8f1f-9fad-41aa-8424-e833f10e5e8b","weight":2},{"event_id":3737,"event_guid":"d51d9e44-947b-4a09-94ad-c31c5cf5e5e1","weight":1},{"event_id":3742,"event_guid":"7a5971c8-746b-4450-ba89-6569667f77c2","weight":1},{"event_id":3760,"event_guid":"1c75e6a1-e586-4b91-abce-92a4561d0181","weight":1},{"event_id":3784,"event_guid":"454751e0-fd42-11e6-b7aa-174b5fe37b07","weight":1},{"event_id":3959,"event_guid":"9c2ba720-59f2-5f5f-be54-53684918bf28","weight":1},{"event_id":3960,"event_guid":"a816ab3e-408f-5de3-81e2-da38f1a2a771","weight":1},{"event_id":3962,"event_guid":"08392a06-456a-5945-8759-df23adf1ed06","weight":1},{"event_id":4191,"event_guid":"4f8066d3-3ee3-5bd8-9385-f6828a179b79","weight":1},{"event_id":4261,"event_guid":"3852e448-f6cf-4bfe-8b14-12d590075bd6","weight":1},{"event_id":4287,"event_guid":"a3d8af27-783d-4974-8118-8f536651201a","weight":5},{"event_id":4365,"event_guid":"7b8075fb-aafa-4037-beb9-168b5461c831","weight":2},{"event_id":4762,"event_guid":"b036385c-ec1a-44e5-ae48-af703ce9b5d3","weight":1},{"event_id":4763,"event_guid":"2ef3b60f-6e5c-4c23-a145-d263685ec13e","weight":1},{"event_id":4825,"event_guid":"a39634b4-d220-4c84-bf5a-e52c375827c5","weight":1},{"event_id":4866,"event_guid":"117a52b4-f675-49dd-aafe-659c07b6bc9c","weight":1},{"event_id":6603,"event_guid":"ea00d1e0-a580-415f-a8cf-f02883d939dc","weight":2},{"event_id":7095,"event_guid":"9e0c19c0-935b-5f08-9fbe-a9daaebbc2c6","weight":3},{"event_id":7106,"event_guid":"e5435c9d-3e16-5419-b326-391df1522988","weight":2},{"event_id":7110,"event_guid":"3e7f1444-b72c-594f-b033-d96b21c1961c","weight":2},{"event_id":7143,"event_guid":"95fb5f56-4e01-5a6f-8fcd-cd6a235c08e0","weight":2}],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"DRAFT_31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things.en_DRAFT.srt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-15T19:13:36.332+01:00","recording_url":"https://cdn.media.ccc.de/congress/2014/DRAFT_31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things.en_DRAFT.srt","url":"https://api.media.ccc.de/public/recordings/50912","event_url":"https://api.media.ccc.de/public/events/lEFQRUU823FUOPqKG85vWg","conference_url":"https://api.media.ccc.de/public/conferences/31c3"},{"size":107,"length":3217,"mime_type":"video/webm","language":"eng","filename":"31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_webm-sd.webm","state":"downloaded","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:07:21.214+01:00","recording_url":"https://cdn.media.ccc.de/congress/2014/webm-sd/31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/5366","event_url":"https://api.media.ccc.de/public/events/lEFQRUU823FUOPqKG85vWg","conference_url":"https://api.media.ccc.de/public/conferences/31c3"},{"size":73,"length":3208,"mime_type":"audio/mpeg","language":"eng","filename":"31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_mp3.mp3","state":"downloaded","folder":"mp3","high_quality":true,"width":null,"height":null,"updated_at":"2014-12-29T17:49:04.471+01:00","recording_url":"https://cdn.media.ccc.de/congress/2014/mp3/31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/5365","event_url":"https://api.media.ccc.de/public/events/lEFQRUU823FUOPqKG85vWg","conference_url":"https://api.media.ccc.de/public/conferences/31c3"},{"size":36,"length":3208,"mime_type":"audio/opus","language":"eng","filename":"31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_opus.opus","state":"downloaded","folder":"opus","high_quality":true,"width":null,"height":null,"updated_at":"2014-12-30T01:36:42.066+01:00","recording_url":"https://cdn.media.ccc.de/congress/2014/opus/31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_opus.opus","url":"https://api.media.ccc.de/public/recordings/5561","event_url":"https://api.media.ccc.de/public/events/lEFQRUU823FUOPqKG85vWg","conference_url":"https://api.media.ccc.de/public/conferences/31c3"},{"size":129,"length":3217,"mime_type":"video/mp4","language":"eng","filename":"31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_sd.mp4","state":"downloaded","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:07:21.062+01:00","recording_url":"https://cdn.media.ccc.de/congress/2014/h264-sd/31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_sd.mp4","url":"https://api.media.ccc.de/public/recordings/5364","event_url":"https://api.media.ccc.de/public/events/lEFQRUU823FUOPqKG85vWg","conference_url":"https://api.media.ccc.de/public/conferences/31c3"},{"size":289,"length":3217,"mime_type":"video/mp4","language":"eng","filename":"31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_hd.mp4","state":"downloaded","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:07:08.789+01:00","recording_url":"https://cdn.media.ccc.de/congress/2014/h264-hd/31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_hd.mp4","url":"https://api.media.ccc.de/public/recordings/5239","event_url":"https://api.media.ccc.de/public/events/lEFQRUU823FUOPqKG85vWg","conference_url":"https://api.media.ccc.de/public/conferences/31c3"},{"size":296,"length":3217,"mime_type":"video/webm","language":"eng","filename":"31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_webm-hd.webm","state":"downloaded","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:07:23.098+01:00","recording_url":"https://cdn.media.ccc.de/congress/2014/webm-hd/31c3-6166-en-Too_Many_Cooks_-_Exploiting_the_Internet-of-TR-069-Things_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/5389","event_url":"https://api.media.ccc.de/public/events/lEFQRUU823FUOPqKG85vWg","conference_url":"https://api.media.ccc.de/public/conferences/31c3"}]}