# IoT Pentesting

## Intro

### What is a firmware?

* A firmware is a small piece of software that makes hardware work and do what its manufacturer intended it to do. Without it the devices we use wouldn't work.

### How to obtain it?

These are the main ways to obtaining the firmware:

1. Obtaining it from the vendor's website
2. Google it
3. Reversing the mobile application &#x20;
4. Sniffing the OTA (over the air) update mechanism
5. Dumping it from the device

Tools:

* [https://github.com/firmadyne/firmadyne](https://github.com/firmadyne/firmadyne)
* [https://github.com/V33RU/IoTSecurity101](https://github.com/V33RU/IoTSecurity101)
* [https://github.com/xdff4ee-x/IOT\_Pentest\_Checklist](https://github.com/xdff4ee-x/IOT_Pentest_Checklist)
