After tons of research and conducting 100+ IoT device pentests so far, we have put a training together which will teach you how to pentest IoT devices."Offensive IoT Exploitation" is an IoT hacking class where we take an offensive approach to break the security of so-called "smart devices". 

It's a 5-day action packed class which we have converted to an online self-paced version covering a number of topics including Embedded Device Hacking, Firmware Reverse Engineering, Binary Exploitation, Radio, BLE, ZigBee exploitation and more. 

The training puts special emphasis on learning-by-doing, which means that in the three days, you will get a chance to attack and pwn various real-world devices through the skillsets taught by the instructor. 

More importantly, you will have access to the virtual machine, the hardware tools and devices that we use during the class and a support channel for any post-training questions.

In this module, we start by understanding the Internet of Things, what they are, how they behave and the underlying components which make up the IoT Ecosystem. 

We also have a look at the Attack Surface Mapping, which is the process of identifying a device architecture and preparing a detailed spreadsheet including all the information about the device, the possible vulnerabilities and the test cases that we will perform to identify the vulnerabilities. 

We also look into some of the previous vulnerabilities and their case studies of why the devices were vulnerable and the techniques you could use to identify vulnerabilities like those, which you will learn in the upcoming modules. 

Even if you have no prior background of Internet of Things or IoT Security Assessment, this module is the perfect starting point for you in the world of IoT security exploration. 

The first component of IoT exploitation that we cover is Firmware based vulnerabilities. Here, we go through a number of different firmware to learn techniques like file system extraction, emulation, debugging, modifying firmware binaries, backdooring them, static analysis and so on. All of the files and binaries used for this section are available in the virtual machine, which will be provided to you when you register for the class. 

We also put special attention here to not only illustrate the vulnerabilities which are specific to these firmware, but also how to get an understanding of where things could go wrong in the firmware development process of IoT devices, and how you, as an IoT Security Researcher, can find and exploit those vulnerabilities.

Once you have played around with the device a bit and had a look at the firmware, the next step for a pentester or a security researcher is to find vulnerabilities in the individual binaries within the firmware file system. A vulnerability could be an easily identifiable one such as hardcoded values or it could be something like a buffer overflow or it could be something as tricky as a vulnerability that requires gadget-hunting and ROP exploitation techniques – we will cover all of them in this module. 

This module will also give you a background about ARM and MIPS architecture types, which are the two most common processor architecture you will see in IoT devices around you. You don’t need to think in assembly or be an assembly guru to write ROP exploits, but just a good understanding of the fundamentals and a clear goal of what you want to achieve will make you unstoppable at exploiting software flaws.

This module is where we unleash the demons. We take an IoT device, open it up, find specs, look at the chipsets, find what the chipsets do, interact with the chipsets, dump data from the flash chips, debug using JTAG, get root access using UART and tap into the buses. Yes, this module does holds a lot of content and is also one of the most fun and exciting sections of the course. 

Especially if you have never worked with hardware before, you are in for a joy ride. You will be able to get rid of your fear of working with embedded devices in this module and emerge as someone who can look at an IoT device’s PCB and know what to do next.

Even if you have played with hardware and electronics in the past, this module will give you an entirely new perspective to look at Embedded devices by putting the pentester glasses on. For instance, if you now notice a flash chip, the first thing that will come to your mind would be – oh, let’s dump the firmware. Or by looking at the PCB, you might say that this looks like a JTAG interface, let me get my setup, and we will go JTAG debugging.

All the devices, tools, and targets that we use in this module come along with the IoT Exploitation Learning Kit, which is a part of the full Offensive IoT Exploitation bundle.

The last, final, and most powerful of all modules, because radio-based communication and exploitation techniques allow you to take control of devices remotely. Here we will look at how do we capture raw radio signals, look at the frequency spectrum, find the bursts of data, use GNURadio to build radio processing blocks and then see the actual data hidden behind those raw radio bits. 

Even if you do not have a background in Digital Signal Processing, this module will make you venture into the world of radio signals and use different techniques to visualize and process the data, and even perform various attacks. We will cover three different types of radio communications in this module – the raw radio communication, Bluetooth Low Energy (BLE), and ZigBee. We will take over devices such as a Smart Lock, a BLE Light Bulb and some of our own custom build setups. This module provides you with everything you need to perform vulnerability discovery and exploitation of real-world IoT devices using radio techniques. 

The above is one of the very first times we ran the training class at BlackHat USA. 

What happened next year -

We are not just a training provider; we actually use the stuff that we teach. We use the learning and findings from our IoT Penetration testing engagements and incorporate it in the training class. The Offensive IoT Exploitation has been built by a team of penetration testers who have been involved in IoT pentests of devices from different industries and verticals. 

In other words, this training course is years of penetration testing experience of a varied range of IoT devices squeezed into over 10 hours of teachings. If you were to look inside our mind of what we learned by being involved with over 100 companies finding vulnerabilities in their products and suggesting recommendations, you will find what is covered in the training class. 

And that is why we created the Offensive IoT Exploitation training class and certification bundle.

We brainstormed and tried to identify the problems faced by the individuals who attend InfoSec training and figured out that:

Most of the training courses out there are there to just make money and not with the genuine intention of teaching in a way that benefits the attendee in the long-term. 

Many training courses are just instructors showing off their knowledge and showing that they are the experts or “gurus” and over-complicate even the basic concepts.

Some of the most expensive training classes ($5000 and above) make it difficult to adjust to your training budget. On top of that, it’s a hit and miss, if the training class was unsatisfactory, you have your entire training budget spent on a single class without actually getting anything out of it.

There are so many online training courses available but they fail to work when it comes to the Internet of Things - especially when you are the kind of person that wants to learn about the practical aspect of things rather than just a theoretical 10,000-foot view.Pretty much all of the courses out there focus on the wrong thing.

Live classes have a very short time duration to learn, analyze, process and perform with very little time left to clear doubts of the learner.

Once we built the first version of the course, we then tested with our new employees who had very little to no prior IoT security experience and used it to train them on the Internet of Things security. 

The results blew us away. The training course worked, and the employees were able to learn not only how to pentest IoT devices, but during real-world engagements, they were able to come up with their own new exploitation techniques and craft tactics. 

The “Offensive IoT Exploitation” training course is not just a class teaching you the technical aspects of IoT penetration testing, but rather a journey where you evolve as a penetration tester and get to learn new perspectives about how you can approach IoT Security and build your career around it.  

When you join the class, one of the first things you will receive is an exclusive Slack invitation. This allows you to ask any questions or doubts you have regarding anything related to IoT security. These discussions are an integral part of what the Offensive IoT Exploitation is. 

Offensive IoT Exploitation also includes lifetime access including any future updates to the content in the training class. This means, when let’s say after 6 months a major vulnerability in IoT devices gets discovered in the security community, it will be included in the training content in easy-to-follow step-by-step videos.

A lot of our past students have gotten salary hikes up to $20,000 by just switching to IoT Pentesting after taking the training class. Are you planning to move to an IoT pentesting role or take on some IoT pentesting gigs? Or maybe write a research paper on one of the Internet of Things components after taking the class? Or maybe present a talk or training at a major security con? Even finding 0-days? How would achieving milestones like that be worth to you? 

But what if you did not take the training class? If you were to do nothing and continue doing what you are doing now, do you think there would be a significant difference in your life be after 6 months or a year? 

A lot of us are comfortable with where we are now, what we are doing and what we are working on. I don’t blame you if you are like this. In fact, to be honest, I was just like you and soon realized that I have stopped evolving. Most of my close friends in the infosec industry were getting better roles and were able to achieve their professional goals. But not me. 

Then I decided that instead of being comfortable, why not try something which challenged me- after all that is how we all grow – be it professionally or personally. I decided that I will start learning the basics of the Internet of Things as one the most up-coming and exciting (it even is now) areas in the security industry. 

The first challenge that I faced was not enough resources available from where I could learn about IoT security. There were hardly any courses on the security of the Internet of Things, just a couple of conference talks and presentations. Then there were quite a handful of articles and blog posts, however when I tried it out something or the other didn’t work and I struggled to find my way through. 

I wish there were a course or training which taught from the basics to get me ready for real-world IoT Security Research. 

So I did whatever I could… 

I went through all the books I could find about the Internet of Things or one of the components such as Bluetooth Low Energy. 

I flew to 3 different continents to attend private training classes (spent over $20K+) and even bought everything I could find online which had even one module about the security of IoT devices. 

At one point in time, I even hired a Korean to English translator and attended training in S. Korea on Embedded Device security. 

I invested all the time I had over the next 8 months in performing research using everything, and bought different routers, IP Cameras, any IoT device I could find within a $100, bricked many of those (unintentionally), encountered white smoke coming during hardware security research and in the process learnt many techniques on how these devices could be exploited and what different attacks are possible. 

I started offering free IoT device pentesting to some local companies to apply my skillsets to real-world devices which gave me further exposure especially how to do a security assessment in the most effective way possible within a limited duration of time. 

Things have come a long way from there and we (at Attify) have performed 100s of IoT device pentests in the last few years. 

But the point is.. I took a decision and a step towards a goal. 

What if you took a step today, the first step to getting yourself started? 

From there, it is just momentum. The momentum often takes us long ways. It’s just the 1st step which seems like a mountain, creates all the infinite thought processes in the head. 

The Offensive IoT Exploitation has so far helped 1000s of students in their professional career, and I can guarantee you, it will do that to you too. 

I know what it takes to succeed in IoT Security. 

I started just like you, but in the past 5 years, I have led 100s of pentests, worked with clients ranging from VC-funded startups to Fortune 500s, delivered talks and training in 10+ countries and at some of the biggest conferences in the world including many times at BlackHat USA, DefCon, OWASP AppSec and many more. I have also authored two books on IoT Security - IoT Hackers Handbook and IoT Pentesting Cookbook - both huge successes. It was a lot of hard work, countless hours in front of the laptop, a lot of head-scratching and most importantly, dedication. 

You don’t have to re-invent the wheel. 

You don’t need to figure out every little detail. I have already done all of that for you, and more. And I have put everything together with the help of my team to deliver you the finest and the most cutting-edge training on the Internet of Things Security available on the planet. This is the exact framework that I have used to teach my team. Which is now available to you. 

Here's everything that is included in the Offensive IoT Exploitation Training Bundle: 

10+ Hours of High-Definition video training on Offensive IoT Exploitation

The Offensive IoT Exploitation training available in video format is 5 days of training content of a live training class. We have conducted short 2-day versions of this class at conferences like BlackHat and OWASP AppSec where people have paid up to $3000 to attend the training class. You will receive not only the current training material but also free access to all future updates to the class.

IoT Exploitation Learning Kit (The Complete Edition)

The IoT Exploitation Learning Kit is our flagship learning kit that includes all target devices to perform the exploitation exercises, hardware gear to perform security assessments and a step-by-step lab manual. The IoT Exploitation Learning kit saves you countless hours purchasing and testing various target devices and assessment tools.

Pre-configured virtual machines with all the software labs

To quickly get you started with the training course without you having to set up all different tools and spend hours, you will instantly receive a training lab VM which includes all the lab exercises and pre-configured tools to go through the training class.

Certified IoT Penetration Tester certification

When you take the bundle, you will also receive a complimentary examination attempt for the Certified IoT Penetration Tester certification. This certification will allow you to prove your skill-set as an IoT pentester to the outside world including potential employers.

If you add the above, the price of all the items combined, it comes to be $6504.

On top of all of the above listed items, you will also receive: 

3-year access to a private Slack group to mentors and peers 

If you get stuck in any of the labs or need a doubt cleared or just discuss something, you could ask it in the private group which includes the course creator, mentors and your peers who have taken the training class. A community like this is crucial to your success as an IoT pentester and security researcher because you’ll be looking at things from not just your perspective, but rather have ideas from 100s of members with different backgrounds. 

What do you think that would be worth? To not spend countless hours looking for answers when you’re stuck with an issue stopping you from moving forward? To not have to feel clueless when some of your commands or a certain tool or script is not working as it’s supposed to? What about the feeling of not being clueless about IoT pentesting anymore?

All of the above, for a single one-time fee of $2697.  

The single payment will grant you access to all of the above. Five years ago, I was getting started with IoT Security. Today, I run a successful IoT Penetration testing and training company, have delivered talks, workshops, and training at conferences like BlackHat and Defcon, authored two books on Internet of Things Security and pentested 100s of IoT products. The last run of this training class at BlackHat, around 150 people attended the training class by paying up to $3000 for the 2-day class.

A course on the non-technical aspects of running an InfoSec agency offering penetration testing services to your clients. This course teaches you what no other course in the industry does. 

You will learn how to: 

Spot opportunities for pentesting based on public research and private reach-outs 

How to draft your pentesting proposal email 

Crafting the perfect pentest engagement proposal and SoW 

Building your brand in a crowded space and capturing leads 

How to turn leads to clients, and retain them forever

Structuring your pentests and offering transparency – The Ninja Pentest Methodology 

How to play the pricing game – The Secret Ladder Technique

Building a business that thrives 

Hiring, Firing, and Culture 

All of this comes from our personal experience of running a 7-figure agency offering penetration testing services and training to our clients. Unlike what most people think, you do need a marketing machine to fuel your technical business – be it for an organization or for your side gigs.This course will open the floodgates of consistent pentesting clients for you. 

Launching in Jan 2020, The InfoSec MasterClass is priced at $699. But if you order the Offensive IoT Exploitation Master Bundle now, this course is absolutely free for you and you’ll be the first ones to get access to this training class.