{"id":439,"date":"2018-06-03T10:06:27","date_gmt":"2018-06-03T10:06:27","guid":{"rendered":"https:\/\/www-new.brucon.org\/2018\/?page_id=439"},"modified":"2018-06-08T09:21:26","modified_gmt":"2018-06-08T07:21:26","slug":"practical-iot-hacking","status":"publish","type":"page","link":"https:\/\/archive.brucon.org\/2018\/brucon-2018-training\/practical-iot-hacking\/","title":{"rendered":"Practical IoT Hacking"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Course_Description\" class=\"mw-headline\">Course Description<\/span><\/h2>\n<div class=\"thumb tright\">\n<div class=\"thumbinner\">\n<div class=\"thumbcaption\">\n<div class=\"magnify\">\n<p><span style=\"font-weight: 400\">&#8220;The great power of Internet Of Things comes with the great responsibility of security&#8221;. Being the hottest technology, the developments and innovations are happening at a stellar speed, but the security of IoT is yet to catch up. Since the safety and security repercussions are serious and at times life threatening, there is no way you can afford to neglect the security of IoT products.<\/span><\/p>\n<p><span style=\"font-weight: 400\">&#8220;Practical Internet of Things (IoT) Hacking\u201d is a unique course which offers security professionals, a comprehensive understanding of the complete IoT Technology suite including, IoT protocols, sensors, client side, mobile, cloud and their underlying weaknesses. The extensive hands-on labs enable attendees to identify, exploit or fix vulnerabilities in IoT, not just on emulators but on real smart devices as well. <\/span><\/p>\n<p><span style=\"font-weight: 400\">The course focuses on the attack surface on current and evolving IoT technologies in various domains such as home, enterprise Automation. It covers grounds-up on various IoT protocols including internals, specific attack scenarios for individual protocols and open source software\/hardware tools one needs to have in their IoT penetration testing arsenal. It also covers hardware attack vectors and approaches to identify respective vulnerabilities . In addition to the protocols and hardware it also focuses on reverse engineering mobile apps and native code to find weaknesses.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Throughout the course, We will use eXos, an VM created by us specifically for IoT penetration testing. eXos is the result of our R&amp;D and has most of the required tools for IoT security analysis. We will also distribute DIVA \u2013 IoT, a vulnerable IoT sensor made in-house for hands-on exercises.<\/span><\/p>\n<p><span style=\"font-weight: 400\">The \u201cPractical Internet of Things (IoT) Hacking\u201d course is aimed at security professionals who want to enhance their skills and move to\/specialise in IoT security. The course is \u00a0structured for beginner to intermediate level attendees who do not have any experience in IoT, reversing or hardware.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Course_contents\" class=\"mw-headline\">Course contents<\/span><\/h2>\n<ul>\n<li><span style=\"font-weight: 400\">Introduction to IOT<\/span><\/li>\n<li><span style=\"font-weight: 400\">IOT Architecture<\/span><\/li>\n<li><span style=\"font-weight: 400\">IoT attack surface<\/span><\/li>\n<li><span style=\"font-weight: 400\">Expliot \u2013 IoT exploitation framework<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Intorduction<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Architecture<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Test Cases<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">IoT Protocols Overview<\/span><\/li>\n<li><span style=\"font-weight: 400\">MQTT<\/span>\n<ul>\n<li><span style=\"font-weight: 400\">Introduction<\/span><\/li>\n<li><span style=\"font-weight: 400\">Protocol Internals<\/span><\/li>\n<li><span style=\"font-weight: 400\">Reconnaisance<\/span><\/li>\n<li><span style=\"font-weight: 400\">Information leakage<\/span><\/li>\n<li><span style=\"font-weight: 400\">DOS attacks<\/span><\/li>\n<li><span style=\"font-weight: 400\">Hands-on with open source tools<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">CoAP<\/span>\n<ul>\n<li><span style=\"font-weight: 400\">Introduction<\/span><\/li>\n<li><span style=\"font-weight: 400\">Protocol Internals<\/span><\/li>\n<li><span style=\"font-weight: 400\">Reconnaissance<\/span><\/li>\n<li><span style=\"font-weight: 400\">Cross-protocol attacks<\/span><\/li>\n<li><span style=\"font-weight: 400\">Hands-on with open source tools<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">Understanding Radio<\/span>\n<ul>\n<li><span style=\"font-weight: 400\">Signal Processing<\/span><\/li>\n<li><span style=\"font-weight: 400\">Software Defined Radio<\/span><\/li>\n<li><span style=\"font-weight: 400\">Gnuradio<\/span>\n<ul>\n<li><span style=\"font-weight: 400\">Introduction to gnuradio concepts<\/span><\/li>\n<li><span style=\"font-weight: 400\">Creating a flow graph<\/span><\/li>\n<li><span style=\"font-weight: 400\">Analysing radio signals<\/span><\/li>\n<li><span style=\"font-weight: 400\">Recording specific radio signal<\/span><\/li>\n<li><span style=\"font-weight: 400\">Replay Attacks<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">Radio IoT Protocols Overview<\/span><\/li>\n<li><span style=\"font-weight: 400\">Zigbee<\/span>\n<ul>\n<li><span style=\"font-weight: 400\">Introduction and protocol Overview<\/span><\/li>\n<li><span style=\"font-weight: 400\">Reconnaissance (Active and Passive)<\/span><\/li>\n<li><span style=\"font-weight: 400\">Sniffing and Eavesdropping<\/span><\/li>\n<li><span style=\"font-weight: 400\">Replay attacks<\/span><\/li>\n<li><span style=\"font-weight: 400\">Hands-on with RZUSBstick and open source tools<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">BLE<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Introduction and protocol Overview<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Reconnaissance (Active and Passive) with HCI tools<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">GATT service Enumeration<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Sniffing GATT protocol communication<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Reversing GATT protocol communication<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Read and writing on GATT protocol<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Cracking encryption<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Hands-on with open source tools<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">Mobile security (Android)<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Introduction to Android<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">App architecture<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Security architecture<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">App reversing and Analysis<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">ARM<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Architecture<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Instruction Set<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Procedure call convention<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">System call convention<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Reversing<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Hands-on Labs<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">Device Reconnaissance<\/span><\/li>\n<li>Firmware\n<ul>\n<li><span style=\"font-weight: 400\">Types<\/span><\/li>\n<li><span style=\"font-weight: 400\">Firmware updates<\/span><\/li>\n<li><span style=\"font-weight: 400\">Firmware analysis and reversing<\/span><\/li>\n<li><span style=\"font-weight: 400\">Firmware modification<\/span><\/li>\n<li><span style=\"font-weight: 400\">Firmware encryption<\/span><\/li>\n<li><span style=\"font-weight: 400\">Simulating device environment<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">Conventional Attacks<\/span><\/li>\n<li><span style=\"font-weight: 400\">External Storage Attacks<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Symlink files<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Compressed files<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">IoT hardware Overview<\/span><\/li>\n<li><span style=\"font-weight: 400\">Introduction to hardware<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Components<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Memory<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Packages<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">Hardware Tools<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Bus Pirate<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">EEPROM readers<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Jtagulator\/Jtagenum<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Logic Analyzer<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-weight: 400\">Attacking Hardware Interfaces<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Hardware Reconnaissance<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Analyzing the board<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Datasheets<\/span><\/li>\n<\/ul>\n<\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">UART<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">What is UART<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Identifying UART interface<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Method 1<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Method 2<\/span><\/li>\n<\/ul>\n<\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Accessing sensor via UART<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Brute-forcing Custom consoles<\/span><\/li>\n<\/ul>\n<\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">I2C<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Introduction<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">I2C Protocol<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Interfacing with I2C<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Manipulating Data via I2C<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Sniffing run-time I2C communication<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">SPI<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Introduction<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">SPI Protocol<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Interfacing with SPI<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Manipulating data via SPI<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Sniffing run-time SPI communication<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">JTAG<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Introduction<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Identifying JTAG interface<\/span>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Method 1<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Method 2<\/span><\/li>\n<\/ul>\n<\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Extracting firmware from the microcontroller<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Run-time patching the firmware code<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Live Debugging of the system<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Target_audience\" class=\"mw-headline\">Target audience<\/span><\/h2>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Penetration testers tasked with auditing IoT<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Bug hunters who want to find new bugs in IoT products<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Government officials from defensive or offensive units<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Red team members tasked with compromising the IoT infrastructure<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Security professionals who want to build IoT security skills <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Embedded security enthusiasts<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">IoT Developers and testers<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Anyone interested in IoT security<\/span><\/li>\n<\/ul>\n<p><b><\/b>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Requirements\" class=\"mw-headline\">Requirements<\/span><\/h2>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Basic knowledge of web and mobile security<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Knowledge of Linux OS<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Basic knowledge of programming &#8211; python<\/span><\/li>\n<\/ul>\n<p><b><\/b>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Hardware.2Fsoftware_Requirements\" class=\"mw-headline\">Hardware\/Software Requirements<\/span><\/h2>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Laptop with at least 50 GB free space<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">8+ GB minimum RAM (4+GB for the VM)<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">External USB access (min. 2 USB ports)<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Administrative privileges on the system<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Virtualization software \u2013 Latest VirtualBox (5.2.X) (including Virtualbox extension pack)<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Linux host machines should have exfat-utils and exfat-fuse installed (ex: sudo apt-get install exfat-utils exfat-fuse).<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Virtualization (Vx-t) option enabled in the BIOS settings for virtualbox to work<\/span><\/li>\n<\/ul>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2>What attendees will be provided With<\/h2>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Commercial IoT Devices for hands-on (only during the class)<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">DIVA &#8211; IoT: custom vulnerable IoT sensor Testbed for hands-on (only during the class)<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Hardware tools for sensor analysis for hands-on (only during the class)<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">eXos VM &#8211; Platform for IoT Penetration testing<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Training material\/slides<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Practical IoT hacking Lab manual PDF <\/span><\/li>\n<\/ul>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2>What to expect<\/h2>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Hands-on Labs<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Reversing fun<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Getting familiar with the IoT security<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">This course will give you a direction to start performing pentests on IoT products<\/span><\/li>\n<\/ul>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2>What not to expect<\/h2>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Becoming a hardware\/IoT hacker overnight. Use the knowledge gained in the training to start pentesting IoT devices and sharpen your skills.<\/span><\/li>\n<\/ul>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n<h2><span id=\"Trainer_Biography\" class=\"mw-headline\">Trainer Biography<\/span><\/h2>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;5\/6&#8243;][vc_column_text]Aseem Jakhar<span style=\"font-weight: 400\"> is the Director, research at Payatu <\/span><a href=\"http:\/\/payatu.com\/\"><span style=\"font-weight: 400\">payatu.com<\/span><\/a><span style=\"font-weight: 400\"> a boutique security testing company <\/span><span style=\"font-weight: 400\">specializing in IoT, embedded, mobile and cloud security assessments<\/span><span style=\"font-weight: 400\">. He is well known in the hacking and security community as the founder of null &#8211; The open security community, registered not-for-profit organization <\/span><a href=\"http:\/\/null.co.in\/\" class=\"broken_link\"><span style=\"font-weight: 400\">http:\/\/null.co.in<\/span><\/a><span style=\"font-weight: 400\"> and also the founder of nullcon security conference <\/span><a href=\"http:\/\/nullcon.net\/\"><span style=\"font-weight: 400\">nullcon.net<\/span><\/a><span style=\"font-weight: 400\"> and hardwear.io security conference <\/span><a href=\"http:\/\/hardwear.io\/\"><span style=\"font-weight: 400\">http:\/\/hardwear.io<\/span><\/a><span style=\"font-weight: 400\"> He has worked on various security software including UTM appliances, messaging\/security appliances, anti-spam engine, anti-virus software, Transparent HTTPS proxy with captive portal, bayesian spam filter to name a few. He currently spends his time researching on IoT security and hacking things. He is an active speaker and trainer at security conferences like AusCERT, Black Hat, BruCON, Defcon, Hack In The Box, Hack.lu, Hack in Paris, PHDays and many more. <\/span><span style=\"font-weight: 400\">He is the author of various open source security tools including: <\/span><\/p>\n<ol>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">ExplIoT \u2013 An open source Internet Of Things Security Testing and Exploitation framework &#8211; <\/span><a href=\"https:\/\/bitbucket.org\/aseemjakhar\/expliot_framework\"><span style=\"font-weight: 400\">https:\/\/bitbucket.org\/aseemjakhar\/expliot_framework<\/span><\/a><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Linux thread injection kit &#8211; Jugaad (<a href=\"https:\/\/bitbucket.org\/aseemjakhar\/jugaad\">https:\/\/bitbucket.org\/aseemjakhar\/jugaad<\/a>) and Indroid (<a href=\"https:\/\/bitbucket.org\/aseemjakhar\/indroid\">https:\/\/bitbucket.org\/aseemjakhar\/indroid<\/a>) which demonstrate a stealthy in- memory malware infection technique. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">DIVA (Damn Insecure and Vulnerable App) for Android which gamifies Android App vulnerabilities and is used for learning Android Security issues. <\/span><span style=\"font-weight: 400\"><a href=\"https:\/\/github.com\/payatu\/diva-android\">https:\/\/github.com\/payatu\/diva-android<\/a><\/span><\/li>\n<li style=\"font-weight: 400\">Dexfuzzer \u2013 Dex file format Fuzzer. <a href=\"https:\/\/bitbucket.org\/aseemjakhar\/dexfuzzer\/src\">https:\/\/bitbucket.org\/aseemjakhar\/dexfuzzer\/src<\/a><\/li>\n<\/ol>\n<p>[\/vc_column_text][\/vc_column][vc_column width=&#8221;1\/6&#8243;][vc_single_image image=&#8221;1354&#8243; css=&#8221;.vc_custom_1528441867642{margin-top: 50% !important;}&#8221;][\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;5\/6&#8243;][vc_column_text]Arun Magesh<span style=\"font-weight: 400\"> works as IoT Security Researcher at payatu and has worked on numerous smart devices pentest in the past couple of years. With an electrical engineering academic background, he serves as a core committee member for several IoT local chapters and hackerspaces in India, where he regularly delivers talks and hands-on workshops. He has 5+ years hands-on experience in both building and breaking IoT devices and has been previously awarded for India\u2019s Top 25 under 25 technologist and also a Intel Software Innovator. His main focus area in IoT is embedded device and SDR security. He has also build and contributed to a number of projects such as Brain-Computer interfacing and Augment Reality solutions. He has delivered training to numerous governmental and private organizations around the globe.<\/span>[\/vc_column_text][\/vc_column][vc_column width=&#8221;1\/6&#8243;][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>[vc_row][vc_column][vc_column_text] Course Description &#8220;The great power of Internet Of Things comes with the great responsibility of security&#8221;. Being the hottest technology, the developments and innovations are happening at a stellar speed, but the security of IoT is yet to catch up. Since the safety and security repercussions are serious and at times life threatening, there is no way you can afford to neglect the security of IoT products. &#8220;Practical Internet of Things (IoT) Hacking\u201d is&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":75,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-439","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/archive.brucon.org\/2018\/wp-json\/wp\/v2\/pages\/439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/archive.brucon.org\/2018\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/archive.brucon.org\/2018\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/archive.brucon.org\/2018\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/archive.brucon.org\/2018\/wp-json\/wp\/v2\/comments?post=439"}],"version-history":[{"count":8,"href":"https:\/\/archive.brucon.org\/2018\/wp-json\/wp\/v2\/pages\/439\/revisions"}],"predecessor-version":[{"id":1357,"href":"https:\/\/archive.brucon.org\/2018\/wp-json\/wp\/v2\/pages\/439\/revisions\/1357"}],"up":[{"embeddable":true,"href":"https:\/\/archive.brucon.org\/2018\/wp-json\/wp\/v2\/pages\/75"}],"wp:attachment":[{"href":"https:\/\/archive.brucon.org\/2018\/wp-json\/wp\/v2\/media?parent=439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}