IoT Penetration Testing Cookbook

Information gathering and recon

The first step in an embedded device hacking methodology is to gather as much information as possible about the target that we are working with. Now this may sound simple, but in the cases of embedded devices, this might be a bit more complicated than we might think. The information about a target device is usually limited-at least from a very high-level view-given the fact that in order to gain a relevant amount of information about the device, we will need access to the physical device itself.

But even before doing so, there are a number of ways in which a pen tester can gather more information about a given target device. These include publicly available sources or the documentation, which the client has ...