IoT Penetration Testing Cookbook

Googling

If we cannot acquire a firmware image via the previous listed methods for some reason, our last option is turning to Google. This may not be our last option if we want to rely on someone else's work or check whether our device has been researched before. There is also a possibility that a current or ex-employee may have uploaded firmware files to their personal repositories or web servers. In any case, we can use Google dorking techniques to narrow down our search for our given target device. We can also leverage the Google Hacking Database to search for firmware or devices via the link https://www.exploit-db.com/google-hacking-database.