Ravi Sir's Cyber Security Cards › Revision Cards
Attack Surface – Defaults, Telnet, HTTP, UPnP, Dashboards
Attack Surface – Defaults, Telnet, HTTP, UPnP, Dashboards The weak points of IoT devices like cameras and smart plugs. Factory admin/admin passwords still set. Telnet or plain HTTP management. UPnP opening ports without you knowing. Change default passwords. Turn off Telnet and UPnP. Keep devices on
Read card text
What this card says
What it is
The weak points of IoT devices like cameras and smart plugs.
Common weaknesses
Factory admin/admin passwords still set.
Telnet or plain HTTP management.
UPnP opening ports without you knowing.
Defence
Change default passwords. Turn off Telnet and UPnP.
Keep devices on a separate network, not exposed to the internet.
| Red team (attacker) does | Blue team (defender)… |
|---|---|
| Tries vendor default list on port 23/80/554 | Disable Telnet; unique passwords; fail2ban-class / lockout… |
| Finds UPnP-mapped camera on WAN | UPnP off; WAN port check from own phone on mobile data |
| Uses shared "support" cloud login | SSO, MFA, least privilege, revoke vendor standing access |
Learn more in the lesson: 43.2 Attack Surface – Defaults, Telnet, HTTP, UPnP, Dashboards