awesome-connected-things-sec/new.md

IoT Security Resources

A curated collection of resources for IoT Security. You are welcome to fork and contribute.

Approach Methodology

1. Network
2. Web (Front & Backend and Web services)
3. Mobile App (Android & iOS)
4. Wireless Connectivity (Zigbee, WiFi, Bluetooth, etc)
5. Firmware Pentesting (OS of IoT Devices)
6. Hardware Hacking & Fault Injections & SCA Attacks
7. Storage Medium
8. I/O Ports

Contents

IoT Security Information

• IoT Security Chat Groups
• IoT and Hardware Security Trainings
• Books for IoT Pentesting
• Blogs
• Awesome Cheat Sheets
• Search Engines
• CTF
• YouTube Channels
• Exploitation Tools
• IoT Pentesting OSes
• IoT Vulnerabilities Checking Guides
• IoT Labs
• Awesome IoT Pentesting Guides
• Fuzzing Things
• IoT Lab Setup Guide
• FlipperZero

Network

Web IoT Message Protocols

• MQTT
• CoAP

Mobile App

• Mobile Security (Android & iOS)

Wireless Protocols

• Radio Hacking Starting Guide
• Cellular Hacking GSM BTS
• Zigbee
• Bluetooth
• DECT (Digital Enhanced Cordless Telecommunications)

Firmware

• Reverse Engineering Tools
• Online Assemblers
• ARM
• Pentesting Firmwares and Emulating and Analyzing
• Firmware Samples to Pentest
• Secureboot

Hardware

• IoT Hardware Intro
• Required Hardware to Pentest IoT
• Attacking Hardware Interfaces
  • SPI
  • UART
  • JTAG
  • SideChannel Attacks & Glitching Attacks
  • Glitching Attacks

Storage Medium

• EMMC Hacking

Payment Security

• ATM Hacking

To See Hacked Devices

• Exploitee.rs Blog
• Exploitee.rs Website
• Exploitee.rs Forum
• Your Lenovo Watch X Is Watching You & Sharing What It Learns
• Your Smart Scale is Leaking More than Your Weight: Privacy Issues in IoT
• Smart Bulb Offers Light, Color, Music, and… Data Exfiltration?
• Besder-IPCamera Analysis
• Rapid7 Smart Lock Vulnerabilities
• Subaru Head Unit Jailbreak
• Jeep Hack
• Dropcam Hacking
• Printer Hacking Live Sessions (YouTube)
• LED Light Hacking
• IoT Vulnerabilities with CVE and PoC of Tenda and D-Link

Chat Groups for IoT Security

• IoTSecurity101 Telegram
• IoTSecurity101 Reddit
• IoTSecurity101 Discord
• Hardware Hacking Telegram
• RFID Discord Group
• ICS Discord Group

IoT and Hardware Security Trainings

• Open Security Training 2

Books for IoT Pentesting

• [The Firmware Handbook (Embedded Technology) 1st Edition by Jack Ganssle](https://www.amazon.com/Firmware-Handbook-Embedded-Technology/dp/075067606