WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe • Jul 10, 2026 • Session details

Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API

Marc Plogas

Think a factory reset secures your discarded smart plug? Watch an autonomous AI agent exploit hidden debug ports to instantly extract lingering Wi-Fi passwords and cloud tokens.

Pause
Mute Enter Fullscreen
#1 about 3 min

Introduction to autonomous hardware hacking agents

How an AI agent autonomously hacked smart filament tags without prior training.

#2 about 4 min

Architecture of the AI hardware hacking system

Structuring Claude Code with project and tool MCPs to enforce physical safety tiers.

#3 about 2 min

Evaluating the Gosund v2 smart plug target

Identifying the physical hardware changes and undocumented silicon in an off-the-shelf smart plug.

#4 about 3 min

Automating physical exploit execution and firmware extraction

The agent plans the engagement and acquires an encrypted flash dump from the bootloader.

#5 about 2 min

Intercepting local communications via cloned access points

Attempts to monitor device activity using a rogue AP and man-in-the-middle strategies.

#6 about 3 min

Analyzing BLE attack surfaces for vulnerabilities

Enumerating unauthenticated BLE services and gathering fingerprint data from the device radio.

#7 about 2 min

App layer defenses and TLS certificate pinning

How the companion app successfully prevented network interception by enforcing strict certificate checks.

#8 about 6 min

Bypassing physical enclosures for UART flash decryption

Desoldering uncooperative casing to access debug pads and retrieve plain text AES keys.

#9 about 2 min

Refining the agent by automating physical hardware restarts

Upgrading test environments with persistent power control tools to eliminate human intervention loops.

#10 about 2 min

Assessing the collapse of obscurity as a defense

Why traditional limitations of time and specialized knowledge no longer stop automated vulnerability discovery.

#11 about 2 min

Releasing isolated capabilities and persistent data risks

The implications of open-sourcing tool integrations while keeping the AI reasoning engines local.

#12 about 3 min

Addressing questions on model guardrails and alternative entry techniques

Audience questions cover LLM security bypasses and alternative chip-off data extraction methods.

Matching moments

3:38 min

Evaluating security risks in autonomous artificial intelligence agents

Chris Heilmann Chris Heilmann +2 · LIVE

2:18 min

Managing security risks introduced by autonomous AI agents

Christian Heilmann Christian Heilmann · World Congress 2025

2:04 min

The shift from credential abuse to software exploitation

Christian Heilmann Christian Heilmann +1 · World Congress 2026 North America

6:25 min

Coding hazards and software supply chain vulnerabilities

Isaac Evans Isaac Evans · World Congress 2026 North America

2:25 min

Understanding the lethal trifecta of AI agent compromise

Abdel Fane Abdel Fane · World Congress 2026 North America

11:34 min

Rapid prototyping with AI agents at hackathons

Chris Heilmann Chris Heilmann +2 · LIVE

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17
3 months ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41
3 months ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06
3 months ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13
3 months ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23
3 months ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26
3 months ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Upcoming sessions on this topic

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Autopsy of an Autonomous Incident: When the Agent Made It Worse

  • Navin Pai

    StackGen

    Director of Engineering

Open session

Architecting Trusted AI: Coupling Multi-Agent Systems with dbt Semantic Store for Zero-Hallucination

  • Pushkar Mishra

    J.P. Morgan

    Senior Vice President

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

ULTRON: Your Agent Has No Hands - Real-Time Voice, MCP, and Ten Phones on Stage

  • Sagar Tamang

    Two Spoon Technologies

    AI Engineer

Open session

Beyond File Dumps: Context Engineering for Coding Agents

  • Animesh Dutta

    Arm

    Senior Software Engineer

Related videos

From Software Agents to Physical Devices: Inside the Agentic Hardware Stack thumbnail
29:30
World Congress 2026 North America • 22 days ago

From Software Agents to Physical Devices: Inside the Agentic Hardware Stack

Michael Yuan, Vivian Hu

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale thumbnail
25:54
World Congress 2026 North America • 22 days ago

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More thumbnail
59:42
LIVE • 8 months ago

WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More

Chris Heilmann, Daniel Cranney, Colleen Lake

The day the chatbot asked for sudo thumbnail
27:48
World Congress 2026 Europe • 3 months ago

The day the chatbot asked for sudo

Alex Olivier

Supply Chain Security When Agents Write the Code thumbnail
27:08
World Congress 2026 North America • 23 days ago

Supply Chain Security When Agents Write the Code

Ajeet Raina

Smart, Connected, Unexpected: The Wild Side of IoT and AI thumbnail
25:29
World Congress 2024 • about 2 years ago

Smart, Connected, Unexpected: The Wild Side of IoT and AI

Pawel Skiba

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.