IoTSecurity101

contribute

You are welcome to fork and

: An interactive disassembler that provides extensive information about binary code and is widely used for static analysis

: The GNU Project Debugger allows you to see what is going on 'inside' another program while it executes or what another program was doing at the moment it crashed

: An open-source framework for reverse engineering and analyzing binaries; includes a disassembler for multiple architectures

: A Qt and C++ GUI for Radare2, aiming to provide a more user-friendly interface as well as additional features

: A software reverse engineering suite of tools developed by NSA that includes a decompiler, assembler, disassembler, and other tools to analyze binaries

: A reverse engineering platform that is an alternative to IDA Pro, with a focus on binary analysis for security research and reverse engineering

: An x86 debugger that emphasizes binary code analysis, which is useful for reverse engineering and finding security vulnerabilities

: An open-source x64/x32 debugger for windows with a focus on plugin support and scriptability

: A reverse engineering tool for macOS and Linux that lets you disassemble, decompile and debug your applications

: A powerful debugger for analyzing malware and reverse engineering with an integrated Python scripting interface for automation

: A tool that detects most common packers, cryptors, and compilers for PE files and is useful for reverse engineering of malware

: A vulnerability in MQTT protocol 3.1.1, allowing remote attackers to cause a denial of service. CVSS score: 7.5 (High)

: Involves insufficient authentication in MQTT backend, leading to potential data access and manipulation. CVSS score: 9.8 (Critical)

: Pertains to uncontrolled resource consumption in Juniper Networks Junos OS MQTT server. CVSS score: 5.3 (Medium)

: A malformed MQTT Subscribe packet can crash MQTT Brokers. CVSS score: 7.5 (High)

A comprehensive guide to reverse engineering Android applications

A detailed book on penetration testing techniques for Android devices

A series of video tutorials on Android penetration testing

A Virtual/Live Platform for Android Security professionals, offering tools and environment for Android security

A guide to penetration testing in iOS environments

The Open Web Application Security Project's guide for mobile security testing, applicable to iOS

/

By Barnaby Jack

[fuzzing-iot-binaries] - /

CVE-2022-40363:

DVID

IoT: -

Safe: -

IoT-vulhub: -

DVRF

Router: -

SCADA: -

PI: -

SS7 Network: -

VoIP: -

Hardware Hacking 101

Hardware Hacking 101: -

RHme-2015

RHME-2015: -

Rhme-2016

RHME-2016: -

Rhme-2017

RHME-2017: -

BLE CTF

A framework focused on Bluetooth Low Energy security

Rhme-2016

Riscure's hardware security competition for 2016

Rhme-2017

Riscure's hardware security competition for 2017

IoTGoat

Deliberately insecure firmware based on OpenWrt for IoT security training

A Capture The Flag event specifically focused on IoT security

Offers IoT related challenges for continuous learning

A deliberately vulnerable ARM router for exploitation practice

Firmware analysis tools and challenges by Router Analysis Toolkit

ARM-X CTF

A set of challenges focused on ARM exploitation

Offers ARM assembly challenges and tutorials

Embedded security CTF focusing on lock systems

Offers various reverse engineering challenges

Platform offering a range of challenges, including hardware and reverse engineering

Platform with various types of challenges including hardware and reverse engineering

Lists various CTFs, including those in hardware, IoT, and firmware

(Use Wayback Machine for old blogs)