Get full access to IoT Penetration Testing Cookbook and 60K+ other titles, with a free 10-day trial of O'Reilly.

There are also live events, courses curated by job role, and more.

How to do it...

For this exercise, we will require and use the following tools and utilities:

Damn Vulnerable Router Firmware (DVRF) - downloadable from the GitHub URL
GDB-Multiarch
GDB Enhanced Features (GEF)
QEMU
chroot
IDA Pro/Radare2 (optional)

Let's go through each of them one by one and see how to set them up. Let's go ahead and download the DVRF firmware from the following URL: https://github.com/praetorian-inc/DVRF/tree/master/Firmware.

DVRF is a firmware written by b1ack0wl with the firmware meant for the MIPS-based platforms. Even though the firmware is intended for Linksys E1550, it could be run in an emulated environment using QEMU which also includes performing of exploitation:

Now that we have the firmware with us, let's ...

Get IoT Penetration Testing Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Don’t leave empty-handed

Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.

It’s yours, free.

Get it now

Check it out now on O’Reilly

Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.

Start your free trial Become a member now