Pwning Smart Weighing Machines with API and Hardware Hacking

This conference talk from nullcon Goa 2025 demonstrates how to hack smart weighing machines through a combination of API exploitation and hardware hacking techniques. Follow along as Eugene Lim conducts a thorough security assessment of smart weighing machines from both Chinese OEM and European manufacturers, revealing critical vulnerabilities that allow attackers to associate any device with their own account. Learn the complete attack methodology including reconnaissance, hardware analysis, firmware reverse-engineering, and API exploitation. Gain valuable insights into common IoT security challenges and practical hacking methods that can be applied to various smart devices beyond weighing machines. The 34-minute presentation provides both technical depth and practical approaches for security researchers interested in IoT vulnerabilities and bug bounty hunting.