#609: How Hackers Target Satellites Through Ground Control Systems

Big thanks to DeleteMe for sponsoring this video. Protect your business with DeleteMe by using the following Link: https://joindeleteme.com/bombal-biz You’ll also get a free year of social media protection for every seat you purchase.

How do you hack a satellite? The attack can start on the ground. Watch a mission control demo showing how web vulnerabilities can change a simulated spacecraft’s orbit.

At DEF CON, I meet Milenko and Andrzej, the authors of The Spacecraft Hackers Handbook, to explore spacecraft cybersecurity. They explain the infrastructure behind satellite operations, what the Via sat attack actually targeted, and why protecting spacecraft requires both security and space engineering knowledge. Then Andrzej demonstrates previously patched vulnerabilities in an older version of mission control software. Using Burp Suite, he shows how path traversal exposes configuration files and how cross-site scripting can trigger a spacecraft command through an operator’s browser.

We cover:

• Why satellite security extends to systems on the ground

• How path traversal and XSS affect mission control software

• Telemetry, telecommands, CCSDS and the SDLS security layer

• How GPS supports timing as well as navigation

• Python examples, a prepared lab VM and learning resources

• The authors’ nine satellite cybersecurity challenges on Hack The Box

• Skills and career opportunities in spacecraft cybersecurity

The demonstration uses a spacecraft simulator. The vulnerabilities shown were disclosed to the vendor and patched.