Hacking a Hospital for Fun and Profit

This course presents a hospital penetration-testing case study covering network mapping, exposed infrastructure, and vulnerabilities in connected medical devices and clinical systems. It examines examples including DICOM imaging, surgical navigation, CT, PLCs, ECG systems, and hospital applications.

Syllabus

Intro
MY HOSPITAL
How to get in?
Potential attack surface - Open AP bridged to LAN
Potential attack surface - "Hot" network jacks bridged to LAN
Potential attack surface-unhardened kiosk connected to LAN
Security Mechanisms
We are in... What's next?
Digital Imaging and Communications (DICOM)
Brain surgical navigation system
Portable computed tomography (CT)
Programmable logic controllers (PLC's)
Electrocardiography (ECG/EKG) - default passwords
One month checkpoint, but what have we learn so far?