IoT Penetration Testing Cookbook

How it works...

In this recipe, we walked through obtaining a firmware image via a vendor's website as well as setting up an MITM testbed to capture device traffic, dumping firmware directly from the device and Googling as a last resort. Here, I'll break down why we obtain firmware via these methods.

When downloading firmware files from vendors, you can typically find what you need via their support website, file share, or community forums. Sometimes the vendor will require a password in order to download the file or have the firmware password protected in a ZIP file. If this is the case, we will more than likely skip to the next steps of obtaining firmware in the interest of time.

Next, we walked through how to set up a MITM testbed using ...