“MyMiko” – Responsible Vulnerability Disclosure
Introduction: This is my another case of a vulnerable IoT device. In my previous blogs, we talked about vulnerabilities there was found in Smart lock and beacons. This one is a fun…
“Find – Bluetooth Tracker” Responsible Vulnerability Disclosure – Blog
Introduction: With the advent of IoT, everything is getting connected to the internet. Bluetooth is one such protocol which is used to connect devices to the internet as the most mobile…
Another case of a Vulnerable Smart Lock
I am back with a another blog after a long time. I have been buying lot of random things from aliexpress/banggood and smart locks are one of them. With the…
IoT Security – Part 4 (Bluetooth Low Energy – 101)
Bluetooth Low Energy 101 If you haven’t read through Part 1 to Part 3 of our IoT Security Blog series I would urge you to go through them first unless you…
6 tools you need to be aware of if you are into device pentesting
IoT and smart devices are dominating the market at a tremendous rate. But with growing competition in the market, these devices often forgo proper standard and security procedures leading to…
How I Reverse Engineered and Exploited a Smart Massager
I have been working with Bluetooth for quite some time. I chose to reverse engineer a smart device to prove how crazy is the security standard being implemented in these…
IoT SECURITY – PART 4
This is the 4th part of our IoT blog series. So before we get into reverse engineering of I2C protocol, let’s dive deep into understanding of I2C protocol. So what is…
IoT Security – Part 1 (101 – IoT Introduction and Architecture)
I have been getting a lot of queries recently from folks interested in Internet of Things security about where to start in IoT security research so, I decided to create…
Hijacking Kankun IoT Smart socket
Introduction: The Internet of Things (IoT) space is very interesting as it encompasses hardware, mobile and cloud/web. Its a very good mix of technologies to hack around where you can sharpen…
Hardcoded AES 256 bit key used in Kankun Smart socket and its mobile App
Vulnerability: Hardcoded AES 256 bit key used in Kankun Smart socket and its mobile App. Vulnerability Description The kankun smart socket device and the mobile app use a hardcoded AES 256 bit key…