Amazon Affiliate Store
➡️ https://www.amazon.com/shop/lawrencesystemspcpickup
Gear we used on Kit (affiliate Links)
➡️ https://kit.co/lawrencesystems
Try ITProTV free of charge and get 30% off!
➡️ https://go.itpro.tv/lts
Use OfferCode LTSERVICES to get 10% off your order at
➡️ https://www.techsupplydirect.com/
Tesla Referral Program Offer
🚘 https://www.tesla.com/referral/thomas65092
Lawrence Systems Shirts and Swag
👕 https://teespring.com/stores/lawrence-technology-services
Digital Ocean Offer Code
➡️ https://m.do.co/c/85de8d181725
HostiFi UniFi Cloud Hosting Service
➡️ https://hostifi.net/?via=lawrencesystems
Protect you privacy with a VPN from Private Internet Access
➡️ https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS
Google Fi Service Referral Code
📱https://g.co/fi/r/TA02XR
More Of Our Affiliates that help us out and can get you discounts!
➡️ https://www.lawrencesystems.com/partners-and-affiliates/
Twitter
🐦 https://twitter.com/TomLawrenceTech
Patreon
🔗 https://www.patreon.com/lawrencesystems
Our Forums
🔗 https://forums.lawrencesystems.com/
GitHub
🔗 https://github.com/flipsidecreations/
Discord
🔗 https://discord.gg/ZwTz3Mh
Our Web Site
🔗 https://www.lawrencesystems.com/
The write up and links to the proof of concept code:
Risks from symmetric encryption in Ubiquiti UniFi’s inform protocol
https://jade.wtf/words/unifi-l3inform-crypto/
How to use Wireshark with pfsense
https://youtu.be/a9t_7JKpsmg
Video on UniFi 6.x Upgrade
https://forums.lawrencesystems.com/t/dont-upgrade-to-unifi-controller-6-0-20/6478
⏱️ Timestamps ⏱️
0:00 UniFi Adoption Key Extractions CVE-2020-28936
1:46 The UniFi Set Inform Protocol
4:10 Lab Demo setup
5:28 Simple Mitigation Of Key Interception
6:13 Using Wireshark to Sniff the keys
7:39 Manually Using set-inform 8080/inform
9:25 Using Pixiedust to extract keys
10:03 What can you do with extracted keys
10:52 final thoughts on this