ایمن سازی دستگاه های اینترنت اشیا نیازمند رویکرد جدیدی است

https://blog.morphisec.com/securing-iot-devices-new-approach
#IoT
@IotPenetrationTesting

Securing name resolution in the #IoT: DNS over CoAP

@IotPenetrationTesting

درود دوستان کانال ما یعنی @pfk_Security اکانتش پاک شد متاسفتانه مجدد کانال دیگری زدیم و فعالیتمان را مجدد بعد از جوین شما کاربران قدیمی و کاربران جدید اغاز خواهیم کرد .
کانال جدید :
@PfkSecurity

#SCADA
"Threat landscape for industrial automation systems. Statistics for H1 2022".
https://ics-cert.kaspersky.com/publications/reports/2022/09/08/threat-landscape-for-industrial-automation-systems-statistics-for-h1-2022

@IotPenetrationTesting

​​CVE-2022-27255

Realtek eCos SDK SIP ALG buffer overflow.

This repository contains de materials for the talk "Exploring the hidden attack surface of OEM #IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.", which was presented at DEFCON30.

https://github.com/infobyte/cve-2022-27255

#cve
@IotPenetrationTesting

In the latest install of the Call of Duty series: Modern Warfare II (2022) players can conduct DDoS attacks. The DDoS attack will disrupt or disable enemies or enemy equipment.

tl;dr in the future helicopters, tanks, guns, and even human beings will be IoT devices.

Reversing embedded device bootloader (U-Boot)
Part 1: https://www.shielder.com/blog/2022/03/reversing-embedded-device-bootloader-u-boot-p.1
Part 2: https://www.shielder.com/blog/2022/03/reversing-embedded-device-bootloader-u-boot-p.2

#IoT
@Iotpenetrationtesting

Analysis of Tenda firmware

@iotpenetrationtesting

IoT Security Checklist

The checklist lists 39 essential security functions that enable IoT devices to be operated safely even in an environment where threats exist, along with background information on why they are necessary

IoT Security Checklist Diagram, Users Manual, Checklist in .xlsx:
https://www.jpcert.or.jp/english/pub/sr/IoT-SecurityCheckList.html
#IoT
@Iotpenetrationtesting

To some admins to post IoT & ICS Hacking posts on the channel to share with other friends and if possible to offer conferences.

Contact : @NetPwn

+ A Collection for IoT Security Resources
https://github.com/V33RU/IoTSecurity101#Books-For-IoT-Pentesting
+ A Virtual environment for Pentesting IoT Devices
https://github.com/IoT-PTv/IoT-PT
#IoT #Pentest
@Iotpenetrationtesting

🔥🔥🔥Xiongmai IoT Exploitation(exploited in the wild)

There are a number of reasons Xiongmai devices are interesting targets:
💾 The first reason is there are a lot of them on the internet(around 200,000).
💾The second reason is these devices have been affected by a handful of high or critical vulnerabilities(CVE-2017-7577, CVE-2018-10088, CVE-2020-22253, CVE-2021-41506, CVE-2022-26259, CVE-2022-45045 & CVE-2022-45640)
💾And that’s interesting due to an almost complete lack of high quality exploits for these vulnerabilities.
#IOT
#PrivateShizo
@Iotpenetrationtesting

"ShellCore: Automating Malicious IoT Software Detection by Using Shell Commands Representation", 2021.
#IoT_Security
@Iotpenetrationtesting

A Detailed Analysis of the Gafgyt Malware Targeting IoT Devices , 2022.

#Malware_analysis
#IoT_Security
@Iotpenetrationtesting

​​awesome-iot-hacks

A Collection of Hacks in IoT Space so that we can address them (hopefully).

https://github.com/nebgnahz/awesome-iot-hacks

#IoT
@Iotpenetrationtesting

A tool which utilizes Shodan to detect vulnerable IoT devices.

BAMF is an open-source tool designed to leverage Shodan (a search engine for the Internet of Things) to discover routers vulnerable to CVE-2013-6026, commonly known as Joel's Backdoor, a severe vulnerability allowing unauthenticated access to the administration panel of many routers made by D-Link, one of the world's largest manufacturers of routers for home and business.

https://github.com/malwaredllc/bamf
#IoT
@Iotpenetrationtesting

​​IoTSecurity101

A Curated list of #IoT Security Resources

https://github.com/V33RU/IoTSecurity101

@Iotpenetrationtesting

​​IoT-PT

A Virtual environment for Pentesting IoT Devices

https://github.com/IoT-PTv/IoT-PT

Persian :

یک محیط مجازی برای Pentesting دستگاه های IoT

https://github.com/IoT-PTv/IoT-PT

#IoT
@Iotpenetrationtesting

درود
بدلیل مشغله کاری از تمامی دوستان فعال در حوزه های سایبری دعوت میشود به آیدی زیر پیام داده و در صورت تایید به عنوان مدیر و ویراستار جدید کانال انتخاب شوند
@Offensive01Bot