IoT devices often present unique and unexpected challenges for hackers to overcome. In this talk, we provide an in-depth walk-through of how we broke custom solutions and built exploits to remotely control the targeted device as a root user. The challenge involves reverse engineering a proprietary protocol used to issue commands and receive data to and from the targeted Network Attached Storage NAS device.