> Markdown version of [/events/world-congress-2026-europe/sessions/1299-agent-smith-gets](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1299-agent-smith-gets). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API


- **Date:** Friday, Jul 10, 2026
- **Time:** 12:20–12:50 (30 min)
- **Room:** Stage 13
- **Event:** World Congress 2026 Europe

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api)

## Description

Last year, Agent Smith turned rogue in software. This year, he got physical access.

In this session, we take a cheap off-the-shelf IoT device and let  AI agents loose on it. No manual hacking, no memorized commands, no command cheat sheets. Using MCP-driven tool orchestration, the agents autonomously probe the device's hardware debug interface, extract firmware secrets, and intercept its cloud traffic through a rogue WiFi access point. Multiple attack vectors, one device, zero human intervention.

This is not a theoretical exercise. Every demo runs on a Raspberry Pi with open-source tools, and the agents make their own decisions about what to probe, what to extract, and what to flag. We will see what they finds, what they miss, and what happens when a device is properly protected.

Whether you build IoT products, secure enterprise networks, or just want to know what your smart devices are doing behind your back: this session will make you uncomfortable. 

Good.

## Speaker

### [Marc Plogas](https://www.wearedevelopers.com/@marc-plogas)

Herding AI Cats, Before It Was Cool.


## Related talks at this congress

- [Hack Me, Bro: An Antifragile AI Battle Arena](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1352-hack-me-bro-an) — Andrew Demczuk
- [POC Prison: Why agentic systems never escape the lab and how to fix that in 90 days](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1325-poc-prison-why) — Luise Freese
- [Deep Dive: Mastering Agents, MCP and other hypes](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/946-deep-dive-mastering) — Dr. Damir Dobric
- [Context > Models: How to make your agents truly intelligent](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1465-context-models-how) — Florian Wagner, Marc Teipel