Google Chromecast Auth Bypass/RCE

Posted by Benjamin Floyd on Aug 25

Problem: Most modern Google-based smart devices run some form of
Chromecast (and a version of the Chrome browser to play content). All of
their Chromecast devices, Google Home, Nest, and basically any Google smart
device, as well as Android TVs with Chromecast built in run Chrome. In
Google’s Cast Developer Console, you can add arbitrary Chromecast devices
for development purposes via serial number (which is on the outside of
device…