IoT Penetration Testing Cookbook

Software exploitation using hardware exploitation methods

Once we have access to the target device over a given hardware interface, the next step would be to perform various software exploitation techniques via hardware exploitation. These involve performing things such as dumping the firmware, writing new content at a given memory region, performing modifications to running processes, and so on.

As you might have understood by now, most exploitation's using hardware techniques would lead you to gain access to sensitive resources, which then could be exploited in a number of ways.

Now that we have an understanding of the overall hardware pen testing methodology, let's move deeper into how to perform reconnaissance on hardware devices.