The fox is still in the hen house...

It's nice to see that research on UPnP is still going on. Rapid 7 just released result showing that 81 million IPs still respond to UPnP requests on the internet.
https://community.rapid7.com/docs/DOC-2150

Vendors, Really?

Nice work Rapid 7!

For those who are curious... UPnPwn is not a dead project, We've just been buried under other projects (for a long time.) We're hoping to put together some updates in the coming months.

Updated Slides available

The updated slides from my presentation as well as the white paper are now available.
Slides
White Paper

I'm still in the process of performing some minor code cleanup, but I'll get a newer version of UPnPwn up as soon as possible.

UPnPWn has been released

The talk went well and UPnPwn has now been released. I will be posting updated code from what was submitted on the conference CDs within the next few days or so.

Upcoming Talk: A Fox in the Hen House (UPnP IGD)

For those attending Black Hat Briefings USA 2008, I will be giving a turbo talk entitled A Fox in the Hen House (UPnP IGD).

In this talk I'll be discussing the Universal Plug and Play (UPnP) Internet Gateway Device (IGD) profile as well as releasing some research tools written in ruby.

temporary blog move

Due to some server configuration issues, the blog will temporarily be hosted at blogspot.

August 3, 2006 @ Black Hat Briefings, Las Vegas, NV

The bird has landed.

Project Cowbird was released today to the audience at Black Hat Briefings USA 2006.
Downloads:
Blackhat Presentation
Cowbird v0.9.0 (Blackhat Release)