95% of IoT Security is Hands-On,
and the rest is Theory

About Training

This unique course focuses on practical IoT Hacking and covers the complete IoT technology suite, including IoT protocols, sensors, client-side, cloud, and their underlying weaknesses. It also focuses on various attack methods/scenarios for IoT, mobile, and hardware-based vulnerabilities in multiple domains such as home automation and enterprise automation. The extensive hands-on labs enable attendees to identify, exploit or fix vulnerabilities in smart devices, not just on emulators.

Key Points

• Comprehensive understanding of the complete IoT technology suite.
• Learn how to identify and exploit real smart devices, not just emulators.
• Focus on the attack surface on current and evolving IoT technologies in various domains such as Home and Enterprise Automation.
• Use innovative open-source software/hardware tools.
• Use cutting-edge tools for reverse engineering.
• Explore hardware attack vectors and approaches to identify respective vulnerabilities.
• Learn how to exploit cloud services and IoT devices.
• Get hands-on experience with in-house testing tools.
• 100% practical with real-world examples.

Difficulty Level

Beginner to Intermediate

Duration

Bootcamp - 5 Days
International Edition - 3 Days
Basic - 2 Days

Who should take this course

• Penetration testers tasked with auditing IoT
• Government officials from defensive or offensive units
• Red team members tasked with compromising the IoT infrastructure
• Security professionals who want to build IoT security skills
• Bug hunters who want to find new bugs in IoT products
• Embedded security enthusiasts
• IoT Developers and testers
• Anyone interested in IoT security

Our Tool-Kit:

• Commercial IoT devices for hands-on learning (only during the class)
• DIVA - IoT: custom vulnerable IoT sensor testbed for hands-on learning (only during the class)
• Hardware tools for sensor analysis for hands-on learning (only during the class)
• EXOS VM: platform for IoT Penetration testing
• Training material/slides
• Practical IoT Hacking Lab Manual

About Workshop

A workshop will cover the entire IoT technology suite, including IoT protocols, firmware, and underlying weaknesses. This workshop covers IoT security pitfalls and will enable attendees to identify vulnerabilities in current and emerging IoT technologies in various domains such as smart apartment units, commercial buildings, smart homes, enterprise automation, etc. The workshop focuses on IoT attack scenarios and open-source software tools.

Key Points

• Learn how to use EXOS VM and our in-house tool- EXPLIoT Open Source (open-source IoT security testing framework)
• Learn the art of IoT Security testing
• Learn about the various protocols and devices used in IoT
• Learn about the underlying protocols and firmware used in IoT
• Identify various IoT attack surfaces
• Explore various open-source tools used in IoT penetration testing
• Get to perform security action after the theory is completed.
• Learn reverse engineering
• Get a direction to start performing pen tests on IoT

Difficulty Level

Beginner to Intermediate

Duration

Workshop - 1 Day

Who should take this course

• Penetration testers tasked with auditing IoT
• Bug hunters who want to find new bugs in IoT products
• Government officials from defensive or offensive units
• Red team members tasked with compromising the IoT infrastructure
• Security professionals who want to build IoT security skills
• Embedded security enthusiasts
• IoT Developers and testers
• Anyone interested in IoT security

Our Tool-Kit

• Training Slides (PDF)
• Hands-on Lab Documents
• Hands-on Lab manual (PDF)
• EXOS VM with most of the IoT pen testing tools pre-installed