Introduction

The key central component of any Internet of Things (IoT) solution is the embedded device. It is the device that interacts with the physical environment and communicates with the web endpoints and other devices around it. Knowledge of how to exploit these hardware devices is extremely crucial for performing an IoT pen test.

The type of device being used in an IoT solution might vary from product to product. In some cases, it could be a gateway, which allows various devices to interact with it, while also communicating with the web endpoints, or, it could be a medical device utility with the sole purpose of collecting data from a patient's body and showing it on a smartphone.

However, there exist certain specific security issues, which can affect any given hardware device, no matter what its category. This is what we will be focusing on in this chapter-to gain an in-depth understanding of various IoT device security issues, how to identify them, and how to exploit them, irrespective...