Skip to content
50

Awesome IoT Hacks

A Collection of Hacks in IoT Space so that we can address them (hopefully).

2.4k stars416 forks66 entriesLast push May 16, 2020 (6 years ago)License MIT

This page lists names, links and short descriptions. The original list on GitHub is the source and belongs to its authors.

Analysis, Reports and Slides

Internet of Things Research Study (HP 2014 Report)

The Internet of Fails

, (video)

Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices

Hack All The Things: 20 Devices in 45 Minutes

(wiki, video)

Careful Connections: Building Security in the Internet of Things (FTC)

Analysis of IoT honeypot data; How devices are hacked, type of infections and origin of attacks (Kaspersky lab, 2018)

Communities

IoT VillageTM

In 2 lists

BuildItSecure.ly

Secure Internet of Things Project (Stanford)

The Open Web Application Security Project (OWASP)

is an online community, produces freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.

In 4 lists

IoT Hacks >Thingbots

Proofpoint Uncovers Internet of Things (IoT) Cyberattack

IoT Hacks >RFID

Vulnerabilities in First-Generation RFID-enabled Credit Cards

MIT Subway Hack Paper Published on the Web

Tampered Card Readers Steal Data via Bluetooth

IoT Hacks >Home Automation

IOActive identifies vulnerabilities in Belkin WeMo's Home Automation

Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices

Popular Home Automation System Backdoored Via Unpatched Flaw

IoT Hacks >Connected Doorbell

CVE-2015-4400: Backdoorbot, Network Configuration Leak on a Connected Doorbell

, (video)

IoT Hacks >Hub

TWSL2013-023: Lack of Web and API AuthenticationVulnerability in INSTEON Hub

IoT Hacks >Smart Coffee

Reversing the Smarter Coffee IoT Machine Protocol to Make Coffee Using the Terminal

IoT Hacks >Wearable

How I hacked my smart bracelet

IoT Hacks >Smart Plug

Hacking the D-Link DSP-W215 Smart Plug

Reverse Engineering the TP-Link HS110

Hacking Kankun Smart Wifi Plug

Smart Socket Hack Tutorial

IoT Hacks >Cameras

Trendnet Cameras - I always feel like somebody's watching me

Hacker Hotshots: Eyes on IZON Surveilling IP Camera Security

Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices

Hacker 'shouts abuse' via Foscam baby monitoring camera

Urban surveillance camera systems lacking security

TWSL2014-007: Multiple Vulnerabilities in Y-Cam IP Cameras

Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras

Samsung SmartCam install.php Remote Root Command Exec

IoT Hacks >Traffic Lights

Green Lights Forever: Analyzing The Security of Traffic Infrastructure

Hacking US (and UK, Australia, France, etc.) Traffic Control Systems

IoT Hacks >Automobiles

Hackers Remotely Attack a Jeep on the Highway

Comprehensive Experimental Analyses of Automotive Attack Surfaces

In 2 lists

IoT Hacks >Airplanes

Hackers could take control of a plane using in-flight entertainment system

IoT Hacks >Light Bulbs

Hacking into Internet Connected Light Bulbs

Hacking Lightbulbs: Security Evaluation Of The Philips Hue Personal Wireless Lighting System

IoT Goes Nuclear: Creating a ZigBee Chain Reaction

Extended Functionality Attacks on IoT Devices: The Case of Smart Lights

IoT Hacks >Locks

Lockpicking in the IoT

IoT Hacks >Smart Scale

Fitbit Aria Wi-Fi Smart Scale

IoT Hacks >Smart Meters

Solar Power Firm Patches Meters Vulnerable to Command Injection Attacks

IoT Hacks >Pacemaker

Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses

IoT Hacks >Thermostats

Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices

Google Nest: Exploiting DFU For Root

Smart Nest Thermostat, A Smart Spy in Your Home

TWSL2013-022: No Authentication Vulnerability in Radio Thermostat

IoT Hacks >Fridge

Proofpoint Uncovers Internet of Things (IoT) Cyberattack

Hacking Defcon 23'S IoT Village Samsung Fridge

IoT Hacks >Media Player & TV

Breaking Secure-Boot on the Roku

Google TV Or: How I Learned to Stop Worrying and Exploit Secure Boot

Chromecast: Exploiting the Newest Device By Google

Ransomware Ruins Holiday By Hijacking Family's LG Smart TV on Christmas Day

IoT Hacks >Firearms

DEF CON 25 - Plore - Popping a Smart Gun

(Slides)

Hacking a IoT Rifle - BlackHat 2015 - 36 slides

Hackers Can Disable a Sniper Rifle—Or Change Its Target - Wired 2015

IoT Hacks >Toilet

TWSL2013-020: Hard-Coded Bluetooth PIN Vulnerability in LIXIL Satis Toilet

IoT Hacks >Toys

TWSL2013-021: Multiple Vulnerabilities in Karotz Smart Rabbit

Fisher-Price smart bear allowed hacking of children's biographical data (CVE-2015-8269)

Hello Barbie Initial Security Analysis

Security researcher Ken Munro discovers vulnerability in Vivid Toy's talking Doll 'Cayla'

Data from connected CloudPets teddy bears leaked and ransomed, exposing kids' voice messages

IoT Hacks >Drones

Parrot Drones Hijacking - RSA2018 Video, Pedro Cabrera, March 2018

(Slides)

Hacking the DJI Phantom 3, Paolo Stagno, January 25, 2017

PHDays VI, hacking Syma X5C quadcopter, Pavel Novikov and Artur Garipov, June 9, 2016

All your bebop drones still belong to us, drone hijacking, Pedro Cabrera, 2016

Shelling out on 3DR Solo, Kevin Finisterre,June 15, 2015

See category
94

Awesome-Selfhosted

awesome-selfhosted/awesome-selfhosted

A list of Free Software network services and web applications which can be hosted on your own servers

Fresh★ 323k1312 entriesPushed yesterday
91

Awesome Hacker Search Engines

edoardottt/awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Fresh★ 11k574 entriesPushed today
91

Awesome Privacy

lissy93/awesome-privacy

🦄 A curated list of privacy & security-focused software and services

Fresh★ 9.9k459 entriesPushed today
89

Awesome Bug Bounty Tools

vavkamil/awesome-bugbounty-tools

A curated list of various bug bounty tools

Fresh★ 6.3k400 entriesPushed yesterday
88

android-security-awesome

ashishb/android-security-awesome

A collection of android security related resources

Fresh★ 9.7k233 entriesPushed 2 days ago
87

Awesome Web Security

qazbnm456/awesome-web-security

🐶 A curated list of Web Security materials and resources.

Fresh★ 14k368 entriesPushed 15 days ago