GreHack 2020: Sneak into buildings with KNXnet/IP - Claire Vacherot
Channel: GreHack
Date: 2020-11-22

Building Management Systems (BMS) centralize and automate essential assets in a building. They are often linked to the LAN and sometimes reachable on the Internet, exposing building automation devices and network protocols that are usually not designed to handle cybersecurity issues. This presentation focuses on the BMS protocol KNX. We will discuss its technical details and the cybersecurity concerns raised by implementations, then present a Python library to perform basic KNX discovery, communication operations and to write advanced testing scripts. We will explain how to use it through fuzzing script examples, hoping that this library will be used to find and fix vulnerabilities in building management systems and as a handy tool for other research material on BMS protocols. 

https://grehack.fr/2020/program