IoT Penetesting 101 && IoT security 101

Approach Methodology

1. Network
2. Web (Front & Backend and Web services)
3. Mobile App(Android & iOS)
4. IoT Protocol Testing
5. Wireless Connectivity
6. Firmware Pentesting(Hardware or IoT device OS)
7. Hardware Level Approach

Contents

Books

• Android Hacker's Handbook
• Hacking the Xbox
• Car hacker's handbook
• IoT Penetration Testing Cookbook
• Abusing the Internet of Things
• Hardware Hacking: Have Fun while Voiding your Warranty
• Linksys WRT54G Ultimate Hacking

Blogs for iotpentest

1. iotpentest.com
2. blog.attify.com
3. https://payatu.com/blog/
4. http://jcjc-dev.com/
5. https://w00tsec.blogspot.in/
6. http://www.devttys0.com/

IoT security vulnerabilites checking guides

• Reflecting upon OWASP TOP-10 IoT Vulnerabilities

Exploitation Tools & OS

• Exploit - IoT Exploitation framework - by Aseemjakhar
• AttifyOS - IoT Pentest OS - by Aditya Gupta
• Ubutnu Best Host Linux for IoT's - Use LTS
• A Small, Scalable Open Source RTOS for IoT Embedded Devices

Introduction

• Introduction to IoT
• IoT Architecture
• IoT attack surface
• IoT Protocols Overview