# IoT Pentesting Methodology

This is merely a high-level overview of the IoT pentesting methodology.&#x20;

But suitable for those who want to start learning it.&#x20;

Tools you need are on [iot-pentesting-tools-list](https://stanley-chan.gitbook.io/iot-pentesting/iot-pentesting/iot-pentesting-tools-list "mention")

## References:

1. The IoT Hacker's Handbook: [www.ime.cas.cn/icac/learning/learning\\\_3/201907/P020190724586712846107.pdf](http://www.ime.cas.cn/icac/learning/learning\\_3/201907/P020190724586712846107.pdf)
2. Firmware Pentesting Methodologies: <https://scriptingxss.gitbook.io/firmware-security-testing-methodology/>
3. Resources for IoT Security: <https://github.com/V33RU/IoTSecurity101>
4. Hardware List: <https://defcon-nn.ru/0x0B/Hardware%20toolkits%20for%20IoT%20security%20analysis.pdf>
5. MQTT Security: <https://payatu.com/blog/aseem/iot-security---part-10-introduction-to-mqtt-protocol-and-security>
