Attacking UPnP
Universal Plug and Play (UPnP) technology enables next-generation devices to communicate among themselves, and benefit from one another's services automatically without any user intervention. It allows a device to join the network, convey its capabilities to other devices on the network, and benefit from the capabilities of other devices on the network. UPnP makes life easier in the networking world, where the devices automatically make decisions to enhance the user experience and accomplish the task without any user intervention. For example, UPnP clients on your network can auto-detect UPnP media servers on the network, and can browse and stream media from them.
We will now look at a typical UPnP workflow:
- Initially, UPnP device joins the network and gets an IP address.
- Then, it searches for other UPnP devices on the network or notifies its presence to others.
- Once discovered, the UPnP-enabled devices will exchange details of other services to be offered and their capabilities...