IoT Exploitation Learning Kit by Attify
- Buy now
- Learn more
Getting Started

Introduction
Exploring the kit
Labs
Download Links to VM and Exercises
Internet of Things
Attack Surface Mapping
Recon
Exploiting an IP Camera (UART)

Introduction to UART
UART Exploitation: Getting Shell access over Serial
v1:Cracking UART authentication
v1: Exploiting IP Camera via UART
SPI Exploitation

Hardware Required
Introduction to Serial Peripheral Interface (SPI)
Dumping firmware from the IPCamera
JTAG Exploitation

Installing required packages
Identifying JTAG pins with Arduino
Identifying pins with JTAGulator
Connections for JTAG
Using Attify Badge Tool to perform JTAG debugging
Connecting and Flashing vulnerable binary
Reading Data from Target device
Dumping entire data from the target device
Connections for the Final Exercise
Manipulating target runtime over JTAG
Logic Sniffing

Logic Sniffing
Software Defined Radio

Sending Data with 433 MHz and Arduino
Identifying target frequency
Decoding 433 MHz data
BLE Exploitation for IoT Devices

Getting started with ESP32 for BLE research
Exploring BLE using ESP32
Taking over Smart Bulb
Exploiting Smart Doorlock

Analyzing BLE Smart Lock (OKLOK)
Reverse Engineering and Frida analysis on OkLok
Smart Lock BLE Traffic Capture and Analysis
Understanding the Smart Lock Logic
Smartlock Unlock Script and Mechanism
Zigbee Analysis

Sniffing Zigbee traffic with Xbee
Hacking a Smart plug

Hacking a Smart Plug - Introduction
Orvibo Smart Plug Hacking
Videos from earlier versions of IoT Exploitation Learning Kit

Reading and Writing to SPI Flash chips (For kits till mid-2020)
Dumping Firmware using SPIFlash.py on WRTNode (2018 Edition)
Analyzing Beacon using BLE dongle
Taking over Smart Lock
(v1) Mobile app and Firmware analysis
(v1) Cracking password of the smart plug
(v1) Controlling Smart Plug

Dumping Firmware using SPIFlash.py on WRTNode (2018 Edition)

Lesson unavailable

Please login to your account or buy the course.