EXPLIoT

Pentest framework like Metasploit but specialized for IoT.

FACT - The Firmware Analysis and Comparison Tool

Full-featured static analysis framework including extraction of firmware, analysis utilizing different plug-ins and comparison of different firmware versions.

Improving your firmware security analysis process with FACT

Conference talk about FACT :tv:.

FwAnalyzer

Analyze security of firmware based on customized rules. Intended as additional step in DevSecOps, similar to CI.

HAL – The Hardware Analyzer

A comprehensive reverse engineering and manipulation framework for gate-level netlists.

HomePWN

Swiss Army Knife for Pentesting of IoT Devices.

IoTSecFuzz

Framework for automatisation of IoT layers security analysis: hardware, software and communication.

Killerbee

Framework for Testing & Auditing ZigBee and IEEE 802.15.4 Networks.

PRET

Printer Exploitation Toolkit.

Routersploit

Framework dedicated to exploit embedded devices.

Binwalk

Searches a binary for "interesting" stuff, as well as extracts arbitrary files.

cwe_checker

Finds vulnerable patterns in binary executables - ELF support for x86, ARM, and MIPS, experimental bare-metal support.

emba

Analyze Linux-based firmware of embedded devices.

Firmadyne

Tries to emulate and pentest a firmware.

Firmwalker

Searches extracted firmware images for interesting files and information.

Firmware Slap

Discovering vulnerabilities in firmware through concolic analysis and function clustering.

Ghidra

Software Reverse Engineering suite; handles arbitrary binaries, if you provide CPU architecture and endianness of the binary.

Radare2

Software Reverse Engineering framework, also handles popular formats and arbitrary binaries, has an extensive command line toolset.

Trommel

Searches extracted firmware images for interesting files and information.

FACT Extractor

Detects container format automatically and executes the corresponding extraction tool.

Firmware Mod Kit

Extraction tools for several container formats.

The SRecord package

Collection of tools for manipulating EPROM files (can convert lots of binary formats).

JTAGenum

Add JTAG capabilities to an Arduino.

OpenOCD

Free and Open On-Chip Debugging, In-System Programming and Boundary-Scan Testing.

Cotopaxi

Set of tools for security testing of Internet of Things devices using specific network IoT protocols.

dumpflash

Low-level NAND Flash dump and parsing utility.

flashrom

Tool for detecting, reading, writing, verifying and erasing flash chips.

Samsung Firmware Magic

Decrypt Samsung SSD firmware updates.

Bus Blaster

Detects and interacts with hardware debug ports like UART and JTAG.

Bus Pirate

Detects and interacts with hardware debug ports like UART and JTAG.

Shikra

Detects and interacts with hardware debug ports like UART and JTAG. Among other protocols.

JTAGULATOR

Detects JTAG Pinouts fast.

Saleae

Easy to use Logic Analyzer that support many protocols :euro:.

Ikalogic

Alternative to Saleae logic analyzers :euro:.

HydraBus

Open source multi-tool hardware similar to the BusPirate but with NFC capabilities.

ChipWhisperer

Detects Glitch/Side-channel attacks.

Glasgow

Tool for exploring and debugging different digital interfaces.

J-Link

J-Link offers USB powered JTAG debug probes for multiple different CPU cores :euro:.

UberTooth One

Open source 2.4 GHz wireless development platform suitable for Bluetooth experimentation.

Bluefruit LE Sniffer

Easy to use Bluetooth Low Energy sniffer.

ApiMote

ZigBee security research hardware for learning about and evaluating the security of IEEE 802.15.4/ZigBee systems. Killerbee compatible.

Freakduino

Low Cost Battery Operated Wireless Arduino Board that can be turned into a IEEE 802.15.4 protocol sniffer.

RTL-SDR

Cheapest SDR for beginners. It is a computer based radio scanner for receiving live radio signals frequencies from 500 kHz up to 1.75 GHz.

HackRF One

Software Defined Radio peripheral capable of transmission or reception of radio signals from 1 MHz to 6 GHz (half-duplex).

YardStick One

Half-duplex sub-1 GHz wireless transceiver.

LimeSDR

Software Defined Radio peripheral capable of transmission or reception of radio signals from 100 KHz to 3.8 GHz (full-duplex).

BladeRF 2.0

Software Defined Radio peripheral capable of transmission or reception of radio signals from 47 MHz to 6 GHz (full-duplex).

USRP B Series

Software Defined Radio peripheral capable of transmission or reception of radio signals from 70 MHz to 6 GHz (full-duplex).

Proxmark 3 RDV4

Powerful general purpose RFID tool. From Low Frequency (125kHz) to High Frequency (13.56MHz) tags.

ChamaleonMini

Programmable, portable tool for NFC security analysis.

HydraNFC

Powerful 13.56MHz RFID / NFC platform. Read / write / crack / sniff / emulate.

Binary Hardening in IoT products

Cracking Linksys “Encryption”

Deadly Sins Of Development

Conference talk presenting several real world examples on real bad implementations :tv:.

Dumping firmware from a device's SPI flash with a buspirate

Hacking the DSP-W215, Again

Hacking the PS4

Introduction to PS4's security.

IoT Security@CERN

Multiple vulnerabilities found in the D-link DWR-932B

Pwning the Dlink 850L routers and abusing the MyDlink Cloud protocol

PWN Xerox Printers (...again)

Reversing Firmware With Radare

Reversing the Huawei HG533

CSAW Embedded Security Challenge 2019

CSAW 2019 Embedded Security Challenge (ESC).

Embedded Security CTF

Microcorruption: Embedded Security CTF.

Hardware Hacking 101

Workshop @ BSides Munich 2019.

IoTGoat

IoTGoat is a deliberately insecure firmware based on OpenWrt.

Rhme-2015

First riscure Hack me hardware CTF challenge.

Rhme-2016

Riscure Hack me 2 is a low level hardware CTF challenge.

Rhme-2017/2018

Riscure Hack Me 3 embedded hardware CTF 2017-2018.

Hacking Printers Wiki

All things printer.

OWASP Embedded Application Security Project

Development best practices and list of hardware and software tools.

OWASP Internet of Things Project

IoT common vulnerabilities and attack surfaces.

Router Passwords

Default login credential database sorted by manufacturer.

Siliconpr0n

A Wiki/Archive of all things IC reversing.

RTL-SDR

/dev/ttyS0's Embedded Device Hacking

Exploiteers

Hackaday

Probably the most popular blog covering electronics and hardware hacking with a whole staff of writers.

jcjc's Hack The World

Quarkslab

wrong baud

Firmware Security

PenTestPartners

Attify

Patayu

GracefulSecurity - Hardware tag

Black Hills - Hardware Hacking tag

Azeria Lab

Miscellaneous ARM related Tutorials.

JTAG Explained

A walkthrough covering UART and JTAG bypassing a protected login shell.

Reverse Engineering Serial Ports

Detailed tutorial about how to spot debug pads on a PCB.

UART explained

An in depth explanation of the UART protocol.

Flashback Team

A duo of hackers explaining their step by step approach to finding and exploiting vulnerabilities in embedded devices.

StackSmashing

Reverse engineering and hardware hacking of embedded devices.

Hardwear.io

EU, The Hague, September.; USA, Santa Clara, June.