https://tube.ekaii.fr/videos/watch/b60ab0c9-8a9f-4897-be95-a369aefb02bc Big thanks to DeleteMe for sponsoring this video. Protect your business with DeleteMe by using the following Link: https://joindeleteme.com/bombal-biz You’ll also get a free year of social media protection for every seat you purchase. How do you hack a satellite? The attack can start on the ground. Watch a mission control demo showing how web vulnerabilities can change a simulated spacecraft’s orbit. At DEF CON, I meet Milenko and Andrzej, the authors of The Spacecraft Hackers Handbook, to explore spacecraft cybersecurity. They explain the infrastructure behind satellite operations, what the Viasat attack actually targeted, and why protecting spacecraft requires both security and space engineering knowledge. Then Andrzej demonstrates previously patched vulnerabilities in an older version of mission control software. Using Burp Suite, he shows how path traversal exposes configuration files and how cross-site scripting can trigger a spacecraft command through an operator’s browser. We cover: • Why satellite security extends to systems on the ground • How path traversal and XSS affect mission control software • Telemetry, telecommands, CCSDS and the SDLS security layer • How GPS supports timing as well as navigation • Python examples, a prepared lab VM and learning resources • The authors’ nine satellite cybersecurity challenges on Hack The Box • Skills and career opportunities in spacecraft cybersecurity The demonstration uses a spacecraft simulator. The vulnerabilities shown were disclosed to the vendor and patched. // Link to No Starch Website for Milenko and Andrzej’s Book// The Spacecraft Hacker’s Handbook: https://nostarch.com/spacecraft-hackers-handbook Use Coupon Code SPACE25 for 25% off The Spacecraft Hacker’s Handbook. // Milenko Starcik’s SOCIALS // Website: https://visionspace.com/team/milenko-starcik/ Website 2: https://starcik.space/ // Andrzej Olchawa’s SOCIALS // Website: https://visionspace.com/author/a-olchawa/ // Online Resources // https://spacesecurity.club https://github.com/orgs/spacecrafthacking // Blog Post REFERENCE // https://www.hackthebox.com/blog/hack-the-orbit-satellite-exploitation-track // David's SOCIAL // Discord: https://discord.com/invite/usKSyzb X: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/@davidbombal Spotify: https://open.spotify.com/show/3f6k6gERfuriI96efWWLQQ SoundCloud: https://soundcloud.com/davidbombal Apple Podcast: https://podcasts.apple.com/us/podcast/david-bombal/id1466865532 // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 0:00 - Intro 0:52 - How Russia hacked satellites 02:12 - The Spacecraft Hacker's Handbook 03:23 - VisionSpace 04:04 - DeleteMe sponsor segment 05:29 - Growth in satellites launched 06:28 - What would losing satellites mean 07:12 - Protocols explained 08:00 - Misconceptions of satellite hacking 09:28 - Threat level of satellite hacking 10:39 - Upcoming demo explained 12:20 - Who is the book for? 16:46 - A gap 17:48 - Other recommendations 19:49 - Hacking satellite demo overview 20:34 - Hacking satellite demo walkthrough 33:54 - Demo next steps 34:29 - Demo walkthrough continued 38:51 - Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #sattelitehacking #spacecraftcybersecurity #defcon Sat, 03 Oct 2026 01:29:20 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://tube.ekaii.fr https://tube.ekaii.fr/client/assets/images/icons/icon-1500x1500.png https://tube.ekaii.fr/videos/watch/b60ab0c9-8a9f-4897-be95-a369aefb02bc All rights reserved, unless otherwise specified in the terms specified at https://tube.ekaii.fr/about and potential licenses granted by each content's rightholder.