WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe • Jul 10, 2026 • Session details

Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API

Marc Plogas

Think a factory reset secures your discarded smart plug? Watch an autonomous AI agent exploit hidden debug ports to instantly extract lingering Wi-Fi passwords and cloud tokens.

Pause
Mute Enter Fullscreen
#1 about 3 min

Introduction to autonomous hardware hacking agents

How an AI agent autonomously hacked smart filament tags without prior training.

#2 about 4 min

Architecture of the AI hardware hacking system

Structuring Claude Code with project and tool MCPs to enforce physical safety tiers.

#3 about 2 min

Evaluating the Gosund v2 smart plug target

Identifying the physical hardware changes and undocumented silicon in an off-the-shelf smart plug.

#4 about 3 min

Automating physical exploit execution and firmware extraction

The agent plans the engagement and acquires an encrypted flash dump from the bootloader.

#5 about 2 min

Intercepting local communications via cloned access points

Attempts to monitor device activity using a rogue AP and man-in-the-middle strategies.

#6 about 3 min

Analyzing BLE attack surfaces for vulnerabilities

Enumerating unauthenticated BLE services and gathering fingerprint data from the device radio.

#7 about 2 min

App layer defenses and TLS certificate pinning

How the companion app successfully prevented network interception by enforcing strict certificate checks.

#8 about 6 min

Bypassing physical enclosures for UART flash decryption

Desoldering uncooperative casing to access debug pads and retrieve plain text AES keys.

#9 about 2 min

Refining the agent by automating physical hardware restarts

Upgrading test environments with persistent power control tools to eliminate human intervention loops.

#10 about 2 min

Assessing the collapse of obscurity as a defense

Why traditional limitations of time and specialized knowledge no longer stop automated vulnerability discovery.

#11 about 2 min

Releasing isolated capabilities and persistent data risks

The implications of open-sourcing tool integrations while keeping the AI reasoning engines local.

#12 about 3 min

Addressing questions on model guardrails and alternative entry techniques

Audience questions cover LLM security bypasses and alternative chip-off data extraction methods.

Matching moments

3:38 min

Evaluating security risks in autonomous artificial intelligence agents

Chris Heilmann +2 · LIVE

2:18 min

Managing security risks introduced by autonomous AI agents

Christian Heilmann Christian Heilmann · WWC 2025

3:25 min

Troubleshooting rogue agent behavior and mobile automation challenges

Elaine Dias Batista Elaine Dias Batista · WWC Europe 2026

1:36 min

Misusing AI for malware generation and physical evasion

Balázs Kiss · WWC 2023

1:10 min

Identifying emerging security vulnerabilities in generative AI agents

Alejandro Saucedo Alejandro Saucedo · WWC 2025

1:55 min

Current state of security in AI applications

Deepu Deepu · WWC 2025

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17
about 1 month ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41
about 1 month ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06
about 1 month ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13
about 1 month ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23
about 1 month ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26
about 1 month ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Upcoming sessions on this topic

Open session

World Congress 2026 North America

From Software Agents to Physical Devices: Inside the Agentic Hardware Stack

Michael Yuan, Vivian Hu

Michael Yuan
Vivian Hu
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

Responsible AI Architecture with Zero Trust Agents

Ashok Prakash

Staff ML Engineer at Apple

Ashok Prakash
Open session

World Congress 2026 North America

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar
Open session

World Congress 2026 North America

Making (and Breaking) Agents by Adding 1,000 MCP Tools

Guillaume Lebedel

Stackone, CTO & Co-Founder

Guillaume Lebedel

Related videos

WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More thumbnail
59:42
LIVE • 6 months ago

WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More

Chris Heilmann, Daniel Cranney, Colleen Lake

The day the chatbot asked for sudo thumbnail
27:48
WWC Europe 2026 • about 1 month ago

The day the chatbot asked for sudo

Alex Olivier

Smart, Connected, Unexpected: The Wild Side of IoT and AI thumbnail
25:29
WWC 2024 • almost 2 years ago

Smart, Connected, Unexpected: The Wild Side of IoT and AI

Pawel Skiba

Let’s write an exploit using AI thumbnail
21:01
WWC 2024 • almost 2 years ago

Let’s write an exploit using AI

Julian Totzek-Hallhuber

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail
24:33
WWC Europe 2026 • about 1 month ago

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth

Spot, Squash, Secure: Fighting Security Bugs with GitHub Copilot thumbnail
22:56
WWC Europe 2026 • about 1 month ago

Spot, Squash, Secure: Fighting Security Bugs with GitHub Copilot

Malte Lantin, Marie Theresa Brosig

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.