Wow! eBook
Practical IoT Hacking: The Definitive Guide to Attacking the Internet of Things
Author(s): F. Chantzis (Author), E. Deirme (Author), I. Stais (Author), P. Calderon (Author), B Woods (Author)
- Publisher: No Starch Press
- Publication Date: 9 April 2021
- Language: English
- Print length: 460 pages
- ISBN-10: 1718500904
- ISBN-13: 9781718500907
Book Description
The definitive guide to hacking the world of the Internet of Things (IoT) – Internet connected devices such as medical devices, home assistants, smart home appliances and more.
Drawing from the real-life exploits of five highly regarded IoT security researchers, Practical IoT Hacking teaches you how to test IoT systems, devices, and protocols to mitigate risk.
The book begins by walking you through common threats and a threat modeling framework. You’ll develop a security testing methodology, discover the art of passive reconnaissance, and assess security on all layers of an IoT system. Next, you’ll perform VLAN hopping, crack MQTT authentication, abuse UPnP, develop an mDNS poisoner, and craft WS-Discovery attacks.
You’ll tackle both hardware hacking and radio hacking, with in-depth coverage of attacks against embedded IoT devices and RFID systems.
You’ll also learn how to:
• Write a DICOM service scanner as an NSE module
• Hack a microcontroller through the UART and SWD interfaces
• Reverse engineer firmware and analyze mobile companion apps
• Develop an NFC fuzzer using Proxmark3
• Hack a smart home by jamming wireless alarms, playing back IP camera feeds, and controlling a smart treadmill
The tools and devices you’ll use are affordable and readily available, so you can easily practice what you learn. Whether you’re a security researcher, IT team member, or hacking hobbyist, you’ll find Practical IoT Hacking indispensable in your efforts to hack all the things
REQUIREMENTS: Basic knowledge of Linux command line, TCP/IP, and programming
Editorial Reviews
Review
–Dave Kennedy, founder of TrustedSec, Binary Defense
“This book is everything you would want to learn from the subject masters–it is an authoritative and a precious resource that both IoT security researchers and developers will want keep close by. I recommend this book for anyone interested in making IoT more secure.”
–John Moor, Managing Director, IoT Security Foundation
“The authors provide a simple, effective and structured approach to hacking IoT, covering the major attack surface of the ecosystem.”
–Aseem Jakhar, Author of EXPLIoT Framework and Co-Founder Payatu
“Practical IoT Hacking is an essential guide to get an understanding on how the world around you works. This is a must have book to add to your hardware hacking arsenal.”
—–Craig Smith, author of the Car Hacker’s Handbook
“Practical IoT Hacking gracefully takes on the herculean task of introducing an organized approach to IoT device security with an end to end, accessible and actionable set of guidance and tool recommendations. A wide range of stakeholders in IoT product development and manufacturing would benefit from applying this knowledge early and often. I would recommend this book as a required reference for anyone involved in IoT device design, or even for personal awareness of data privacy and security for technically oriented users.”
–J. Metzger, Director of Cybersecurity, implanted and wireless data medical device manufacturer
“What I really like about this book is that it is useful for a wide ranging audience: students interested in IT security, people who are interested in securing their home network, and professionals who want to learn how to hack and secure new IoT devices for their colleagues or customers. This book deserves a place on your (digital) bookshelf.”
–Stef van Dop, KPN REDteam
I’m so thrilled to see this book available to people to take the high level ‘IoT security is important’ and turn it into a practical guide to hack these devices in an effort to expose the security issues we must address as a community. The authors are immediately credible on the topic, the content is superbly approachable, and it’s obvious this book and its readers will have a meaningful positive impact on the topic.
–Robert M. Lee, CEO and Co-Founder of Dragos, Inc. and Senior SANS Instructor
“This incredible resource provides comprehensive, hands-on information on everything from security nuances in IoT devices and ecosystems, to ethical disclosure of vulnerabilities, and even the application of anti-hacking laws. We may joke about the absurdity of Internet-connected toasters and dog dishes, but lack of IoT security can mean real physical consequences. For those who would test and secure the rising tide of digitally-enabled physical objects, this is the book for you.” —
–Harley Geiger, Senior Director of Public Policy, Rapid 7
