• Sydney'18
  • Training
  • Practical IoT Hacking

Practical IoT Hacking

Arun Magesh

Register Now
Arun Magesh

Trainer Name: Arun Magesh
Title:Practical IoT Hacking
Duration: 2 Days
Dates: 20th - 21nd September 2018

Intro

"Practical Internet of Things (IoT) Hacking" is a unique course which offers security professionals, a comprehensive understanding of the complete IoT Technology suite including, IoT protocols, sensors, client side, mobile, cloud and their underlying weaknesses. The extensive hands-on labs enable attendees to identify, exploit or fix vulnerabilities in IoT, not just on emulators but on real smart devices as well. Attendees will get a eXos - custom IoT security Testing VM, Complete Lab manual and slides.

Overview

"The great power of Internet Of Things comes with the great responsibility of security". Being the hottest technology, the developments and innovations are happening at a stellar speed, but the security of IoT is yet to catch up. Since the safety and security repercussions are serious and at times life threatening, there is no way you can afford to neglect the security of IoT products.

"Practical Internet of Things (IoT) Hacking” is a unique course which offers security professionals, a comprehensive understanding of the complete IoT Technology suite including, IoT protocols, sensors, client side, mobile, cloud and their underlying weaknesses. The extensive hands-on labs enable attendees to identify, exploit or fix vulnerabilities in IoT, not just on emulators but on real smart devices as well.

The course focuses on the attack surface on current and evolving IoT technologies in various domains such as home, enterprise Automation. It covers grounds-up on various IoT protocols including internals, specific attack scenarios for individual protocols and open source software/hardware tools one needs to have in their IoT penetration testing arsenal. It also covers hardware attack vectors and approaches to identify respective vulnerabilities. In addition to the protocols and hardware it also focuses on reverse engineering mobile apps and native code to find weaknesses.

Throughout the course, We will use eXos, an VM created by us specifically for IoT penetration testing. eXos is the result of our R & D and has most of the required tools for IoT security analysis. We will also distribute DIVA – IoT, a vulnerable IoT sensor made in-house for hands-on exercises.

The "Practical Internet of Things (IoT) Hacking" course is aimed at security professionals who want to enhance their skills and move to / specialise in IoT security. The course is structured for beginner to intermediate level attendees who do not have any experience in IoT, reversing or hardware.

Course outline

  • Introduction to IOT
  • IoT Architecture
  • IoT attack surface
  • Expliot – IoT exploitation framework
    • Intorduction
    • Architecture
    • Test Cases
  • IoT Protocols Overview
  • MQTT
    • Introduction
    • Protocol Internals
    • Reconnaisance
    • Information leakage
    • DOS attack
    • Hands-on with open source tools
  • CoAP
    • Introduction
    • Protocol Internals
    • Reconnaisance
    • Cross-protocol attacks
    • Hands-on with open source tools
  • Zigbee
    • Introduction and protocol Overview
    • Reconnaissance (Active and Passive)
    • Sniffing and Eavesdropping
    • Replay attacks
    • Hands-on with RZUSBstick and open source tools
  • BLE
    • Introduction and protocol Overview
    • Reconnaissance (Active and Passive) with HCI tools
    • GATT service Enumeration
    • Sniffing GATT protocol communication
    • Reversing GATT protocol communication
    • Read and writing on GATT protocol
    • Cracking encryption
    • Hands-on with open source tools
  • Device Reconnaissance
  • Firmware
    • Types
    • Firmware updates
    • Firmware analysis and reversing
    • Firmware modification
    • Firmware encryption
    • Simulating device environment
  • IoT hardware Overview
    • Introduction to hardware
    • Components
    • Memory
    • Packages
    • Hardware Tools
    • Bus Pirate
    • EEPROM readers
    • Jtagulator / Jtagenum
    • Logic Analyzer
  • Attacking Hardware Interfaces
    • Hardware Reconnaissance
      • Analyzing the board
      • Datasheets
    • UART
      • What is UART
      • Identifying UART interface
        • Method 1
        • Method 2
      • Accessing sensor via UART
      • Brute-forcing Custom consoles
    • I2C
      • Introduction
      • I2C Protocol
      • Interfacing with I2C
      • Manipulating Data via I2C
      • Sniffing run-time I2C communication
    • JTAG
      • Introduction
      • Identifying JTAG interface
        • Method 1
        • Method 2
      • Extracting firmware from the microcontroller
      • Run-time patching the firmware code
      • Live Debugging of the system

Who should take this course

  • Penetration testers tasked with auditing IoT
  • Bug hunters who want to find new bugs in IoT products
  • Government officials from defensive or offensive units
  • Red team members tasked with compromising the IoT infrastructure
  • Security professionals who want to build IoT security skills
  • Embedded security enthusiasts
  • IoT Developers and testers
  • Anyone interested in IoT security

Pre-requisites

  • Basic knowledge of web and mobile security
  • Knowledge of Linux OS
  • Basic knowledge of programming - python

What attendees should bring

  • Laptop with at least 50 GB free space
  • 8+ GB minimum RAM (4+GB for the VM)
  • External USB access (min. 2 USB ports)
  • Administrative privileges on the system
  • Virtualization software – Latest VirtualBox (5.2.X) (including Virtualbox extension pack)
  • Linux host machines should have exfat-utils and exfat-fuse installed (ex: sudo apt-get install exfat-utils exfat-fuse).
  • Virtualization (Vx-t) option enabled in the BIOS settings for virtualbox to work

What attendees will be provided With

  • Commercial IoT Devices for hands-on (only during the class)
  • DIVA - IoT: custom vulnerable IoT sensor Testbed for hands-on (only during the class)
  • Hardware tools for sensor analysis for hands-on (only during the class)
  • eXos VM - Platform for IoT Penetration testing
  • Training material / slides
  • Practical IoT hacking Lab manual PDF

What to expect

  • Hands-on Labs
  • Reversing fun
  • Getting familiar with the IoT security
  • This course will give you a direction to start performing pentests on IoT products

What not to expect

  • Becoming a hardware/IoT hacker overnight. Use the knowledge gained in the training to start pentesting IoT devices and sharpen your skills.

About Trainer

Arun Magesh works as IoT Security Researcher at payatu and has worked on numerous smart devices pentest in the past couple of years. With an electrical engineering academic background, he serves as a core committee member for several IoT local chapters and hackerspaces in India, where he regularly delivers talks and hands-on workshops. He has 5+ years hands-on experience in both building and breaking IoT devices and has been previously awarded for India’s Top 25 under 25 technologist and also a Intel Software Innovator. His main focus area in IoT is embedded device and SDR security. He has also build and contributed to a number of projects such as Brain-Computer interfacing and Augment Reality solutions. He has delivered training to numerous governmental and private organizations around the globe.

Copyright © 2018-19 | Nullcon India | International Security Conference | All Rights Reserved