awesome-connected-things-sec
A Curated list of Security Resources for all connected things
https://github.com/V33RU/awesome-connected-things-sec
Last synced: 6 days ago
JSON representation
Cloud and Backend Security
AWS IoT Security
- AWS Penetration Testing Policy
- AWS Pentesting Guide - HackerOne
- A few notes on AWS Nitro Enclaves
- Pacu - AWS Exploitation Framework
- ScoutSuite - Multi-cloud Security Auditing
- Prowler - Cloud Security Assessment
- Comprehensive AWS Pentesting Guide - BreachLock
- AWS Pentest Methodology - MorattiSec
- AWS Penetration Testing Methodology - Rootshell
- AWS Penetration Testing Techniques 2025
- CloudFox - Cloud Attack Paths
- S3Scanner - Leaky Bucket Discovery
- Cloudfoxable Labs
- AWS Security Pentesting Resources
- PayloadsAllTheThings - AWS Pentest
- 7 Best AWS Pentesting Tools 2026
Firebase / Cloud Misconfigurations
Defensive Security
Incident Response
Secure Development
- Embedded Linux Hardening
- OWASP IoT Project
- ETSI EN 303 645 - Cyber Security for Consumer IoT
- Compiler Options Hardening Guide for C and C++
- Linux Hardening Guide
- Docker Security - Step-by-Step Hardening
- How To Secure A Linux Server
- Zephyr RTOS Security Features
- NIST IoT Cybersecurity Framework
- NIST SP 800-213 - IoT Device Cybersecurity Guidance
- NISTIR 8259 - Foundational Cybersecurity Activities for IoT Manufacturers
- IoT Device Hardening Best Practices
- OWASP IoT Top 10 (2018)
Threat Modeling
- STRIDE Threat Model Guide - Practical DevSecOps
- OWASP Threat Modeling Process
- STRIDE-based Threat Modeling for IoT Precision Agriculture
- What is STRIDE in Threat Modeling - Security Compass
- What is Threat Modeling - Fortinet
- STRIDE Threat Modeling for IoT Smart Home
- STRIDE Threat Modeling for Smart Solar Energy Systems
- STRIDE Threat Modeling for IoT Healthcare Systems
- STRIDE for IoT Agriculture - IEEE
- Threat Modeling with ATT&CK - MITRE
Firmware Security
ARM Exploitation
- Azeria Labs ARM Tutorials
- ARM Exploitation for IoT
- Damn Vulnerable ARM Router (DVAR)
- Exploit Education
- ARMv8 AArch64/ARM64 Full Beginner's Assembly Tutorial
- ARM64 Reversing And Exploitation Series (8ksec) - Parts 1-10
- AArch64 memory and paging
- We are ARMed no more ROPpery Here
- A Guide to ARM64 / AArch64 Assembly on Linux
Binary Analysis
Dynamic Analysis and Emulation
- Firmadyne - Automated Firmware Emulation
- QEMU
- PANDA - Architecture-Neutral Dynamic Analysis
- Avatar2 - Dynamic Firmware Analysis
- Renode - Embedded Systems Emulator
- Unicorn Engine - CPU Emulator
- S2E - Selective Symbolic Execution
- FirmWire - Baseband Firmware Emulation
- Qiling Framework
- Firmware Emulation with QEMU
- Emulating ARM Router Firmware - Azeria Labs
- Qiling and Binary Emulation for Automatic Unpacking
- IoT Binary Analysis and Emulation Part 1
- Cross Debugging for ARM/MIPS with QEMU
- QEMU + Buildroot 101
- Emulating IoT Firmware Made Easy
- Adaptive Emulation Framework for Multi-Architecture IoT
- Automatic Firmware Emulation through Invalidity-guided Knowledge Inference
- Debugging D-Link: Emulating Firmware and Hacking Hardware
- SAME70 Emulator
- Emulating RH850 architecture with Unicorn Engine
- Challenges and Pitfalls while Emulating Six Current Icelandic Household Routers
- My Emulation Goes to the Moon... Until False Flag
- Simulating and Hunting Firmware Vulnerabilities with Qiling
- FirmAE - Firmware Analysis and Emulation
- HALucinator
- SymQEMU
- Bochs - x86 Emulator
- Emulate Until You Make it
- Icicle: A Re-designed Emulator for Grey-Box Firmware Fuzzing
- How to Emulate Android Native Libraries Using Qiling
Extraction
- Firmware Samples - firmware.center
- Hardware Hacking Tutorial: Dumping and Reversing Firmware
- Router Analysis Part 1: UART Discovery and SPI Flash Extraction
- BasicFUN Series: Hardware Analysis / SPI Flash Extraction
- BasicFUN Series: Reverse Engineering Firmware / Reflashing SPI Flash
- Retrofitting encrypted firmware is a Bad Idea
Fundamentals
- Reversing 101
- IoT Security Verification Standard (ISVS)
- Hands-on Firmware Extraction, Exploration, and Emulation
- Introduction to Firmware Analysis - OWASP
- OWASP Firmware Security Testing Methodology
Online Assemblers
OTA Update Security
- IoT Firmware Security and Update Mechanisms
- Implementing OTA Updates for IoT Devices
- Secure OTA Boot Chains and Firmware Verification
- The Key to Firmware Security in Connected IoT Devices
- Top 10 IoT Vulnerabilities - OTA Update Attacks
- Updating IoT Devices 2025: Best Practices
- Review of IoT Firmware Vulnerabilities and Auditing Techniques
- Security Considerations for OTA Updates - Stack Overflow
Reverse Engineering Tools
- GDB
- Radare2
- Binary Ninja
- OllyDbg
- x64dbg
- Hopper
- PEiD
- Ghidra
- Cutter - GUI for Radare2
- RetDec - Decompiler
- Diaphora - Binary Diffing
- Angr - Binary Analysis
- Frida - Dynamic Instrumentation
- Ret-sync
- Reversing ESP8266 Firmware
- Reversing Firmware with Radare
- Finding Bugs in Netgear Router
- Automating Binary Vulnerability Discovery with Ghidra and Semgrep
- Ghidriff - Ghidra Binary Diffing Engine
- The rev.ng decompiler goes open source
- Intro to Cutter
- pyghidra-mcp: Headless Ghidra MCP Server
- Mindshare: Using Binary Ninja API to Detect Potential Use-after-free Vulnerabilities
- Reverse Engineering with Ghidra: Breaking Firmware Encryption
- Ghidra 101: Cursor Text Highlighting
- Ghidra 101: Decoding Stack Strings
- Extending Ghidra Part 1: Setting up a Development Environment
- Binary type inference in Ghidra
- Writing a Ghidra processor module
- Debugger Ghidra Class
- Immunity Debugger
- Expanding the Dragon: Adding an ISA to Ghidra
- Reverse Engineering and Patching with Ghidra
- Ghidra nanoMIPS ISA module
Router Exploitation
- Hunting for Unauthenticated n-days in Asus Routers
- Pulling MikroTik into the Limelight
- Rooting Xiaomi WiFi Routers
- ROPing our way to RCE
- ROPing Routers from scratch: Tenda Ac8v4
- PwnAgent: A One-Click WAN-side RCE in Netgear RAX Routers
- Reversing, Discovering, And Exploiting A TP-Link Router Vulnerability - CVE-2024-54887
- Exploiting Zero-Day (CVE-2025-9961) Vulnerability in the TP-Link AX10 Router
- FiberGateway GR241AG - Full Exploit Chain
- Blackbox-Fuzzing of IoT Devices Using the Router TL-WR902AC
- Rooting the TP-Link Tapo C200 Rev.5
- Netgear Orbi: Introduction, UART Access, Recon
- Netgear Orbi: Crashes in SOAP-API
- The Last Breath of Our Netgear RAX30 Bugs
- TP-Link TDDP Buffer Overflow Vulnerability
- Pwn2Own Tokyo 2020: Defeating the TP-Link AC1750
- TP-Link Tapo c200 Camera Unauthenticated RCE (CVE-2021-4045)
- Patch Diffing a Cisco RV110W Firmware Update - Part 1
- Flashback Connects - Cisco RV340 SSL VPN RCE
- Route to Safety: Navigating Router Pitfalls
- Netgear Orbi: NDay Exploit CVE-2020-27861
- Exploiting MikroTik RouterOS Hardware with CVE-2023-30799
- Puckungfu 2: Another NETGEAR WAN Command Injection
Router Firmware Analysis
- A Journey into IoT: Discover Components and Ports
- Dynamic Analysis of Firmware Components in IoT Devices
- RV130X Firmware Analysis
- TP-Link Firmware Decryption C210 V2 cloud camera bootloaders
- A Journey into IoT: Firmware Dump and Analysis
- A Journey into IoT: Radio Communications
- A Journey into IoT: Internal Communications
RTOS Security
- Zephyr RTOS GitHub
- Zephyr Vulnerabilities List
- Tackling Security in Zephyr RTOS
- Enhancing Security with Zephyr RTOS
- Exploiting Memory Corruption in FreeRTOS - ShmooCon
- RTOS Security Analysis - USENIX
- Dynamic Vulnerability Patching for RTOS
- FreeRTOS 13 Vulnerabilities in TCP/IP Stack
- 26 Flaws in Zephyr and MCUboot
- AWS FreeRTOS Vulnerabilities
- NCC Group Zephyr and MCUboot Security Assessment
Secure Boot
- Amlogic S905 SoC: Bypassing Secure Boot
- Defeating Secure Boot with Symlink Attacks
- PS4 Secure Boot Hacking - Fail0verflow
- U-Boot USB DFU Vulnerability (CVE-2022-2347)
- Breaking Secure Boot on Silicon Labs Gecko
- ESP32 Secure Boot Bypass (CVE-2020-13629)
- Pwn the ESP32 Secure Boot
- Pwn ESP32 Forever: Flash Encryption and Secure Boot Keys Extraction
- Writing a Bootloader
- Dell BIOS Vulnerabilities - BIOSDisconnect
Secure Boot Bypasses
- Bypassing Secure Boot using Fault Injection
- Breaking Secure Boot on Google Nest Hub (2nd Gen)
- Booting into Breaches: Hunting Windows SecureBoot's Remote Attack Surfaces