Thursday, May 16th, 2024: 2:00 PM to 3:00 PM
A Pain in the NAS: Exploiting Cloud Connectivity to PWN Your NAS (May 16th)
In this talk, we will explain the pairing process of WD and Synology NAS. We will elaborate on the overall architecture of their cloud offering and focus on the vulnerabilities we found including ways to enumerate and impersonate all edge devices using certificate transparency log (CTL), and steal cloud proxy auth tokens.
more →




