IOT01 - IoT Penetration Testing Essentials

Unlock the potential of Internet of Things and hardware hacking! This course covers the essentials topics on security testing and hacking IoT devices and hardware.

Purchase this course at VHL

IOT01 Course curriculum

1. Foreword
2. Welcome letter
3. Learning objectives
4. Hardware requirements
5. Lesson types
6. Pre-course survey
1. IoT Introduction
2. 1.1 IoT versus Computers
3. 1.2 Smart devices
4. 1.3 IoT Ecosystem
5. 1.4 IoT Risks and Opportunities
6. 1.5 IoT Attack Surface
7. 1.6 IoT Vulnerabilities
8. 1.7 Summary
9. Module 1: Practical assignment
10. Module 1: Knowledge check
1. Introduction
2. 2.1 Electricity
3. 2.2 Electro Static Discharge (ESD)
4. 2.3 Warranty
5. 2.4 Soldering
6. 2.5 Disclaimer
7. 2.6 Summary
8. Module 2: Knowledge check
1. Introduction
2. 3.1 Legislation EU
3. 3.2 Legislation UK
4. 3.3 Legislation USA
5. 3.4 Standards, Norms & Certification
6. 3.5 Summary
7. Module 3 Downloads
8. Module 3: Knowledge check
1. Introduction
2. 4.1 Soldering and desoldering
3. 4.2 Measuring, testing and inspecting
4. 4.3 Debuggers and programmers
5. 4.4 Development boards & multipurpose tools
6. 4.5 SDR & Wireless tools
7. 4.6 Tools
8. 4.7 Hardware & Tools stores
9. 4.8 Summary
10. Module 4: Practical assignment
11. Module 4: Knowledge check
1. Introduction
2. 5.1 Specifications
3. 5.2 Software
4. 5.3 Summary
5. Module 5: Knowledge check
1. Introduction
2. 6.1 Network
3. 6.2 Configuration
4. 6.3 Vulnerabilities
5. 6.4 Summary
6. Module 6: Downloads
7. Module 6: Knowledge check
1. Introduction
2. 7.1 IoT hardware building blocks
3. 7.2 Opening IoT devices
4. 7.3 Identifying Components
5. 7.4 Case study hardware: TP-Link TL-WR841N
6. 7.5 Case study hardware: IP Camera
7. 7.6 Summary
8. Module 7: Downloads
9. Module 7: Knowledge check
1. Introduction
2. 8.1 Serial vs Parallel communication
3. Module 8: Knowledge check
1. Introduction
2. 9.1 UART communication
3. 9.2 Identifying UART interfaces
4. 9.3 Multimeter
5. 9.4 Logic analyzer
6. 9.5 Oscilloscope
7. 9.6 USB-to-Serial adapter
8. 9.7 Summary
9. Module 9: Practical assignment
10. Module 9: Downloads
11. Module 9: Knowledge check
1. Introduction
2. 10.1 I2C communication
3. 10.2 Case study: Programming I2C LCD display
4. 10.3 Case study: Sniffing I2C communication
5. 10.4 Case study: IP Camera I2C
6. 10.5 Summary
7. Lesson 10 Downloads
8. Module 10: Knowledge check
1. Introduction
2. 11.1 SPI Communication
3. 11.2 Sniffing SPI communication
4. 11.3 Case study SPI: Sniffing Bitlocker keys
5. 11.4 Summary
6. Module 11: Practical assignment
7. Module 11: Knowledge check
1. Introduction
2. 12.1 JTAG communication
3. 12.2 Identifying JTAG interfaces
4. 12.3 Case study: Raspberry Pi Pico with JTAGenum
5. 12.4 Case study: Identifying JTAG pins with JTAGenum
6. 12.5 Communicating via JTAG
7. 12.6 Serial Wire Debug (SWD)
8. 12.7 Summary
9. Module 12: Downloads
10. Module 12: Knowledge check
1. Introduction
2. 13.1 Firmware introduction
3. 13.2 Downloading Firmware
4. 13.3 Intercepting network updates
5. 13.4 Bootloader serial transfer
6. 13.5 UART shell with TFPT
7. 13.6 JTAG
8. 13.7 SPI
9. 13.8 Flash chip desoldering
10. 13.9 Summary
11. Module 13: Downloads
12. Module 13: Knowledge check
1. Introduction
2. 14.1 Firmware string analysis
3. 14.2 Extracting firmware with Binwalk
4. 14.3 Analyzing firmware files
5. 14.5 Summary
6. Module 14: Practical assignment
7. Module 14: Downloads
8. Module 14: Knowledge check
1. Introduction
2. 15.1 Firmware reverse engineering
3. 15.2 Installing Ghidra
4. 15.3 Ghidra projects
5. 15.4 Importing and analyzing files
6. 15.5 Ghidra Code Browser
7. 15.6 Analyzing functions
8. 15.7 Case study: Recovering encryption keys with Ghidra
9. 15.8 Case study: Analyzing IP camera firmware
10. 15.9 Summary
11. Module 15: Practical assignment
12. Module 15: Downloads
13. Module 15: Knowledge check
1. Introduction
2. 16.1 Physical and Virtual devices
3. 16.2 QEMU User Mode Emulation
4. 16.3 QEMU System Mode Emulation
5. 16.4 Automated emulation tools
6. 16.5 Case study: FirmAE emulation
7. 16.6 Summary
8. Module 16: Practical assignment
9. Module 16: Downloads
10. Module 16: Knowledge check
1. Introduction
2. 17.1 Debugging introduction
3. 17.2 Remote debugging TP-Link router
4. 17.3 GDB CLI introduction
5. 17.4 Summary
6. Module 17: Downloads
7. Module 17: Knowledge check
1. Introduction
2. 18.1 OS Command injection
3. 18.2 Case study: TP-Link WR841N system calls
4. 18.3 Buffer overflow
5. 18.4 Case study: Analyzing buffer overflows with GDB
6. 18.5 Summary
7. Module 18: Practical assignment 1
8. Module 18: Practical assignment 2
9. Module 18: Downloads
10. Module 18: Knowledge check
1. Introduction
2. 19.1 Vulnerability Disclosure Program (VDP)
3. 19.2 Responsible disclosure
4. 19.3 Obtaining a CVE ID
5. 19.4 Summary
6. Module 19: Practical assignment
7. Module 19: Downloads
8. Module 19: Knowledge check
1. Video demonstrations
2. Video: TP-Link WR841N Router
1. Afterword
2. Certificate of Completion
3. Exam
4. Post-course survey

About this course

€249,00
177 lessons
0.5 hours of video content
Practical assignments
Case studies
Exam available in Q2/2025

Start learning IoT Pentesting today!

Buy Now

IOT01 - IoT Penetration Testing Essentials

IOT01 Course curriculum

IoT Penetration Testing Essentials Course

1. IoT introduction

2. Safety and Disclaimer

3. Legislation, standards and guidelines

4. Hardware hacking lab tools

5. IoT Reconnaissance 1: Product Specifications & Information

6. IoT Reconnaissance 2: Network, Configuration & Vulnerabilities

7. IoT Reconnaissance 3: Hardware & Components

8. Serial Communication & Protocols

9. UART (Universal Asynchronous Receiver/Transmitter)

10. I2C (Inter-Integrated Circuit)

11. SPI (Serial Peripheral Interface)

12. JTAG/SWD

13. Obtaining IoT firmware

14. Static firmware analysis

15 Ghidra reverse engineering

16 Emulation with QEMU

17 Debugging with GDB

18. Identifying vulnerabilities in IoT

19 Responsible Disclosure

20 Video Demonstrations

Course end

About this course

Start learning IoT Pentesting today!