Workshop materials for IoT supply chain analysis and firmware reconnaissance
Presented workshops since 2019
| Slides (PDF) | When & Where |
|---|---|
| A brief introduction to firmware extraction | 10th February 2020 - OffensiveCon 2020 |
Notes to support the workshop
| Title | Last Update | Level |
|---|---|---|
| Running firmware binaries in a virtualised environment (qemu) | 12th February 2020 | Medium |
Required level of knowledge and competence
| Level name | Expected knowledge and competence |
|---|---|
| entry | Basic computer skills as a user. Programming or knowledge of computer structure is not required. |
| medium | Basic computer skills as an advanced user with a daily use of a Unix-like operating system. Basic programming skills are required such as shell scripting. |
| advanced | Knowlege of multiple programming languages such as Python or C. Basic knowledge of computer structure and an assembly language. |
Contributing
We welcome contributions or ideas in order to improve or extend the workshop materials. You can contribute by creating issues or proposing pull-request to this repository.
Reach people
There is a Gitter available at : https://gitter.im/workshop-materials/ where you can discuss directly with people who join the project and/or who attended a workshop.
License
All material are licensed under the Creative Commons Attributions Share alike 4.0 International license.
Legal - Vulnerability Disclosure
As you might know reversing firmware and hardware might lead to discover security vulnerabilities. If you contribute to this repository and discover potential vulnerabilities in the analysed firmware, we recommend to contact the security contact of the vendor to make a coordinated vulnerability disclosure. If you cannot or don't want to report to the vendor, you can report via zerodisclo.com or to CIRCL.