IoT Penetration Testing Cookbook

Step 1 - identifying assets and entry points

Every car is different with some models having more features than other models. Research the publicly available resources on Subaru-connected vehicles and the different features between models and years. For example, we know a connected vehicle have access to the internet via a cellar 4G/LTE connection, but others may gain internet access via tethering to a phone's connection or other means such as Wi-Fi. Let's start there and document what we know about the target vehicle before performing any active attack phases:

• Cellular connectivity: The Subaru connected vehicles are connected to the internet via AT&T 4G LTE (http://about.att.com/story/att_subaru_bring_4G_lte_to_select_model_year_vehicles.html ...