Hacking IoT

This workshop is for pentesters, security researchers or someone looking to get into IoT security but is reluctant due to the wide range of technologies involved and plethora of different tools. While it does require a considerable amount of knowledge in the domain, it is not as difficult as you may think. In this workshop we will introduce you to some of the important concepts and EXPLIoT framework in a very simple way that can be used for the various IoT attack vectors. The primary focus of this workshop is to introduce the attendees to the open source IoT Security Testing and Exploitation Framework - EXPLIoT (https://gitlab.com/expliot_framework/expliot) and enable them to use as well as extend it by writing plugins for new IoT based exploits and analysis test cases. It’s a flexible and extendable framework that would help the security community in writing quick IoT test cases and exploits. The objectives of the framework are:

1. Easy to use

2. Extendable

3. Support for hardware, radio and IoT protocol analysis

EXPLIoT currently supports the following protocols which can be utilized for writing new plugins/exploits:

1. Radio – BLE , Zigbee

2. Network – MQTT, CoAP, DICOM, MODBUS, MDNS, NMAP, TCP, UDP

3. Hardware – CAN, SPI, I2C, UART, JTAG

This talk would give attendees a first-hand view of the functionality, how to use it and how to write plugins to extend the framework.