How I purchase costly Devices in low price to learn IoT Pentesting

 How I purchase costly Smart Devices in low price by not to wasting money for testing devices


Note: this article based on the india location


Many of you are interested in IoT Pentesting and Device hacking. One of the main challenges for entry in this domain is money.

As per me, for learning I do not invest much money on the hardware as there chances of me bricking the device. But if it’s for a project, I definitely buy the device even if it’s expensive. Check the below flow that I follow for buying devices

  1. OLX India,

  2. Amazon

  3. Flipkart

  4. CEX (many branches all over world)

  5. Banggood

  6. Chor bazaars (thief markets)

  7. Electronic bazaar (street side)

  8. Known people



So let’s see, If i want to buy one router to start my journey into router basic knowledge to get into IoT Pentesting 

Attack vectors for the Routers like

  1. Network 

  2. Embedded application

  3. Firmware

  4. Hardware 

  5. Others depends on the router features like android app and others

1st attempt is lets check with OLX and Banggood

OLX:


See above image is showing the routers from 200 rs to 2K sometimes will get gaming routers for cheaper price .. better before buy devices check it properly and do the payment when you received the device in your hand. (don't do online payment before you buy from OLX)



Banggood: currently shipping on hold due to corona 

But cheap and best gadgets you will get from here (Ali express and Alibaba check as well)


FLIPKART AND AMAZON also you can buy cheap IoT Gadgets like smartband and others


Search for required device.


CEX: 

From cex will get smart devices with warranty with reasonable price 

I used to buy gadgets from CEX stores directly.


Chor bazaars (thief markets) : 


Thief Markets are not much secure areas and not even trust area , but for testing any devices is like better one , in this markets we may get the sometimes good products some times bad products 


So we don’t have to worry about bricking these devices since they are not expensive


Electronic bazaar (street side)


Special streets for electronics where we can get prototypes and cloned devices, over the world this type streets everywhere, also on roadside will get cheap china products or damaged once


all we purchasing for bricking purpose only.



Known people:


If anyone from my circle they want to sell any electronic device or smart devices, I always offer the reasonable price and bought from them.


The devices which I have in my personal labs 




There are many other websites like 


https://www.xfurbish.com/

https://www.2gud.com/

ebay.com

Comments

Post a Comment

Popular posts from this blog

VR Model P1 - 360 degree camera

Image
This article is one of my very old assessment for fun i did (and it is done 2017) got it by recovering hard disk and assigned CVE ID - (CVE-2020-23512) . Here my target to  test 360 degree camera which trending in the IP camera world recently, what we going test model P1 VR camera. What is VR camera..? In photography, an omnidirectional camera (from "Omni", meaning all) is a camera with a 360-degree field of view in the horizontal plane, or with a visual field that covers (approximately) the entire sphere. Omnidirectional cameras are important in areas where large visual field coverage is needed, such as in panoramic photography and robotics. VR CAM P1 Proxy Eye Fisheye Camera IP 3D Vr 360 Degree Panoramic 960P Wi-Fi CCTV Camera With Sd Memory Card Slot Multi Viewing Mode Features of this VR CAMERA:    Brand VR CAM Model P1 Product Dimension 15 x 15 x 5 cm Resolution 960p Android/iOS Devices Additional...
Read more

Buspirate v3.6 firmware upgrade from USB

Image
Buspirate:  The Bus Pirate v3.6a, created by Ian Lesnet, is a troubleshooting tool that communicates between a PC and any embedded device over 1-wire, 2-wire, 3-wire, UART, I2C, SPI, and HD44780 LCD protocols - all at voltages from 0-5.5VDC. This product eliminates a ton of early prototyping effort when working with new or unknown chips. Upgrading Firmware: buspirate will not come with new firmware so it has to be change by us. buspirate v4 : Supports firmware version 7  buspirate v3.x:  Supports firmware version 6&7 (note : firmware version 7 may hurt the device hardware not fully tested from my side doit in your won risk) Requirements: Buspirate firmware and loader : https://github.com/DangerousPrototypes/Bus_Pirate/tree/master/BPv3-bootloader ICSP pins. in these pins there are two of them which is  PGD and PGC   helps us to load the firmware into it . T he PGC and PGD pins with a jumper cable. When you are in the bootloader, the MODE LED of the Bus Pirate...
Read more

Dumping the Firmware from the device Using buspirate - SPI

Image
One of the best way to get the firmware from the hardware While doing penetration testing there are scenarios in which we need to dump the firmware from the devices.This method is typically used when there are no firmware’s available from vendor site. Today we are going to show you how to dump the firmware from an Wireless router Binatone DT 850W Software and hardware Requirements: Buspirate Ubuntu 16.04 or any other Linux machine Flashrom tool SOIC cable pin 8 Buspirate connectors               This is a Wireless router from Binatone DT 850W which will be used as an example for dumping the firmware. Let’s us Analyze the Inside Device.You can see IC chips like  EEPROM, UART  pins and Ralink  CPU  and also some Other   IC  chips Let us focus mainly on the  EEPROM chip (winbond W25Q16). What is EEPROM : EEPROM (also written E2PROM and pronounced “e-e-prom”, “double-...
Read more