The access to this course is restricted to Hakin9 Premium or IT Pack Premium Subscription

---

DURATION: 18 hours

CPE POINTS: On completion you get a certificate granting you 18 CPE points. 

Course available on demand

---

The Internet of Things is one of “the” most upcoming trends. Every month, there are hundreds of thousands of smart devices being connected to the internet and potentially being exposed to malicious attackers because there are a number of privacy and security concerns in those smart devices. There are roughly 8 billion devices connected to the internet as of now and by early 2020, it's estimated that there will be 25 to 35 billion IoT devices worldwide, however, little additional attention is being paid to the device's security. Exploitation: IoT Device Security is a unique course that offers security professionals the ability to assess the security of these smart devices. In this course, we will discuss security and privacy issues in IoT devices on two different layers, like firmware, hardware, Bluetooth and protocols, and what happens if organizations leave the IoT device vulnerable. The course will also demonstrate the actual hacking into IoT devices and highlight the top vulnerabilities that exist in IoT devices. The course will include hands-on opportunities to perform exploitation techniques on real-world IoT devices rather than just watching the videos.

Note: since this class was published in 2019, some IoT technology has advanced and tools had new versions released. These materials have not been updated, however the concepts and techniques presented remain largely relevant.  

---

---

Course general information: 

---

---

Your instructor: Vaibhav Bedi

• Experience in various fields such as Biomedical, Embedded system, Additive and Smart Manufacturing and Internet of Things.
• Experience in the security domain.
• Delivered lectures to more than 500 students in communities like OWASP, Null Bangalore and Test Tribe.
• Love spending most of my free time in making, breaking and securing IoT Devices.
• Excel at operating and working with hardware

---

Course Syllabus

---

Module 1: Analyzing and Exploiting Firmware

Nowadays, hardware and operating system (OS) security have become more robust, so hackers and researchers look for exploits in other areas such as firmware. Many IoT devices become vulnerable to cyber attacks because their firmware isn’t updated. One of the instances where we might have heard of firmware security is during the time of Mirai Botnet being widespread. Mirai Botnet infects devices by getting access to the device using default credentials. So in this module, we will purely focus our efforts on firmware reverse engineering to analyze its contents for manipulation during its runtime.

---

Module 2: Bluetooth Hacking and Exploitation

BLE has proven to be one of the most prominent technologies in the Internet of Things (IoT) space. Bluetooth Low Energy (BLE) is a low power wireless technology used for connecting devices with each other. With the rapid growth of IoT accelerating development in Bluetooth technology, constant efforts are being taken by the Bluetooth Special Interest Group (SIG) to increase the transfer speed with a maximum focus on beacons, healthcare entertainment, and fitness. Bluetooth Low Energy is built into many of the gadgets that we use today. From smartphones, smart televisions, advanced technologies such as medical equipment, to a basic device such as our coffee machines, all use BLE. This module covers some of the important topics related to Bluetooth exploitation listed below.

---

Module 3: Exploitation IoT protocol and Hardware security

Security and protocols are the leading concerns for the Internet of Things. Billions of devices will be communicating wirelessly and it is a real huge challenge to our security and privacy. IoT requires efficient and effective security solutions that satisfy IoT requirements - low power, small memory, and limited computational capabilities. In this module, we will discuss the IoT protocol Security exploitation and how to interact with any hardware device.

---

Module 4: Reversing and exploiting ARM Binaries

“There’s an Intel on every desktop, but an ARM in every pocket”. ARM processors are becoming ubiquitous in mobile devices today with RISC processors making a comeback for their applications in low power computing environments. ARM has emerged as the leading architecture in the Internet of Things (IoT) world. IoT devices being utilized in a critical infrastructure capacity are becoming more prevalent, such as embedded mobile cores, running ARM chipsets. This module introduces the ARM architecture and teaches students how to reverse ARM binaries and bypass exploit mitigations present on ARM-based IoT devices. This module covers some of the important topics related to ARM binary listed below.

---

Final Exam

Multiple choice questions related to firmware, ARM binaries, Bluetooth exploitation, Hardware security.  

---

QUESTIONS? 

If you have any questions, please contact our eLearning Manager at [email protected].