IoT Penetesting 101 && IoT security 101

Approach Methodology

1. Network
2. Web (Front & Backend and Web services)
3. Mobile App(Android & iOS)
4. IoT Protocol Testting
5. Wireless Connectivity
6. Firmware Pentesting(Hardware or IoT device OS)
7. Hardware Level Approach

Contents

Books

• Android Hacker's Handbook: (esp. hardware hacking chapter)
• Hacking the Xbox: https://www.nostarch.com/xboxfree
• Car hacker's handbook(GPL 3.0): http://opengarages.org/handbook/
• IoT Penetration Testing Cookbook https://www.packtpub.com/networking-and-servers/iot-penetration-testing-cookbook
• Abusing the Internet of Things: https://www.amazon.in/Abusing-Internet-Things-Blackouts-Freakouts-ebook/dp/B013VQ7N36
• Hardware Hacking: Have Fun while Voiding your Warranty: https://www.elsevier.com/books/hardware-hacking/grand/978-1-932266-83-2
• Linksys WRT54G Ultimate Hacking: https://www.amazon.com/Linksys-WRT54G-Ultimate-Hacking-Asadoorian/dp/1597491667

INTRODUCTION

• Introduction to IoT: https://en.wikipedia.org/wiki/Internet_of_things
• IoT Architecture: https://www.c-sharpcorner.com/UploadFile/f88748/internet-of-things-part-2/
• IoT attack surface: https://www.owasp.org/index.php/IoT_Attack_Surface_Areas
• IoT Protocols Overview: https://www.postscapes.com/internet-of-things-protocols/