The-Journey-of-IoT-Security-from-Zero-to-One

记录IOT学习之路

固件下载

TENDA https://www.tenda.com.cn/download/default.html

迅捷 https://service.fastcom.com.cn/download-list.html#0

TP-LINK https://resource.tp-link.com.cn/?&productorlist=1&filterClass=[4]

TP-LINK(国外)https://www.tp-link.com/us/support/download/

水星 https://service.mercurycom.com.cn/download-list.html

艾泰 https://www.utt.com.cn/downloadcenter.php

锐捷 https://www.ruijie.com.cn/fw/rj-first-2321/

DLINK https://support.dlink.com/resource/products/

NETGEAR http://support.netgear.cn/download.asp

SOFTPEDIA https://drivers.softpedia.com/

DrayTek https://www.draytek.com/support/resources/routers#version

海康威视 https://www.hiksemitech.com/en/hiksemi/support/download.html

iptime https://iptime.com/iptime/?page_id=126

ubiquiti https://ui.com.cn/download/releases/firmware

grandstream https://www.grandstream.com/support/firmware

peplink https://www.peplink.com/support/downloads/

avm https://www.anthemav.com/support/latest-software.php

axis https://www.axis.com/support/device-software

固件解密

DrayTek https://www.hexacon.fr/slides/hexacon_draytek_2022_final.pdf

DLINK https://bbs.kanxue.com/thread-281043.htm

Dlink https://wzt.ac.cn/2019/09/18/D-Link_BUG/

SonicOS https://wzt.ac.cn/2024/09/05/sonicwall_dec2/

SonicOS https://wzt.ac.cn/2022/02/08/sonicwall_dec1/

书籍推荐

《物联网安全漏洞挖掘实战》

《揭秘家用路由器0day漏洞挖掘技术》

《IOT Penetration Testing》 (中文版 《物联网渗透测试》)

论坛推荐

IOTsec-zone https://www.iotsec-zone.com/

看雪 https://bbs.kanxue.com/

先知社区 https://xz.aliyun.com/

hackaday https://hackaday.com/ (国外的IOT黑客论坛 比较偏硬件 里面的内容很有意思)

UART

劫持启动服务为telnetd拿shell https://badmonkey.site/archives/router-debug-getshell

越权

https://wzt.ac.cn/2020/08/28/bypass_auth/

杂项

浅谈 IoT 安全入门-漏洞挖掘向 https://mp.weixin.qq.com/s/_hzsjtZjyEZAU4zig1Bnig