Open Source Summit India 2026

We trust ISP-provided routers with authentication, firmware updates, and remote management. Yet, many remain opaque black boxes running outdated, poorly audited software built on open source tools.
In this session, we open that box.
Using a commercially deployed embedded Linux router, I will demonstrate a practical workflow for analyzing locked-down firmware and reclaiming control with open source tools.

First, the Security Lesson: We will walk through firmware extraction and forensic analysis in a structured way. This includes inspecting the flash storage, reverse engineering vendor binaries to uncover hardcoded passwords, and manipulating U-Boot to alter the boot process to gain root access. The focus throughout is understanding how embedded Linux systems are built and identifying where security assumptions fail.

Second, the Practical Upgrade: With root access secured, we move beyond analysis to utility. We will transform the router into a network-wide ad blocker using lightweight tools like dnsmasq, demonstrating how open source enables device longevity and architectural control.
This session is not about breaking devices; it is about understanding and reclaiming them.