Mirror of https://github.com/nebgnahz/awesome-iot-hacks :

A curated list of hacks in IoT space so that researchers and industrial products can address the security vulnerabilities (hopefully).

Thingbots

• Proofpoint Uncovers Internet of Things (IoT) Cyberattack

RFID

• Vulnerabilities in First-Generation RFID-enabled Credit Cards
• MIT Subway Hack Paper Published on the Web
• Tampered Card Readers Steal Data via Bluetooth

Home Automation

• IOActive identifies vulnerabilities in Belkin WeMo’s Home Automation
• Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices
• Popular Home Automation System Backdoored Via Unpatched Flaw

Connected Doorbell

• CVE-2015-4400: Backdoorbot, Network Configuration Leak on a Connected Doorbell, (video)

Hub

• TWSL2013-023: Lack of Web and API AuthenticationVulnerability in INSTEON Hub

Smart Coffee

• Reversing the Smarter Coffee IoT Machine Protocol to Make Coffee Using the Terminal

Wearable

• How I hacked my smart bracelet

Smart Plug

• Hacking the D-Link DSP-W215 Smart Plug
• Reverse Engineering the TP-Link HS110
• Hacking Kankun Smart Wifi Plug
• Smart Socket Hack Tutorial

Cameras

• Trendnet Cameras – I always feel like somebody’s watching me
• Hacker Hotshots: Eyes on IZON Surveilling IP Camera Security
• Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices
• Hacker ‘shouts abuse’ via Foscam baby monitoring camera
• Urban surveillance camera systems lacking security
• TWSL2014-007: Multiple Vulnerabilities in Y-Cam IP Cameras
• Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras
• Samsung SmartCam install.php Remote Root Command Exec

Traffic Lights

• Green Lights Forever: Analyzing The Security of Traffic Infrastructure
• Hacking US (and UK, Australia, France, etc.) Traffic Control Systems

Automobiles

• Hackers Remotely Attack a Jeep on the Highway
• Comprehensive Experimental Analyses of Automotive Attack Surfaces

Airplanes

• Hackers could take control of a plane using in-flight entertainment system

Light Bulbs

• Hacking into Internet Connected Light Bulbs
• Hacking Lightbulbs: Security Evaluation Of The Philips Hue Personal Wireless Lighting System
• IoT Goes Nuclear: Creating a ZigBee Chain Reaction
• Extended Functionality Attacks on IoT Devices: The Case of Smart Lights

Locks

• Lockpicking in the IoT

Smart Scale

• Fitbit Aria Wi-Fi Smart Scale

Smart Meters

• Solar Power Firm Patches Meters Vulnerable to Command Injection Attacks

Pacemaker

• Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses

Thermostats

• Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices
• Google Nest: Exploiting DFU For Root
• Smart Nest Thermostat, A Smart Spy in Your Home
• TWSL2013-022: No Authentication Vulnerability in Radio Thermostat

Fridge

• Proofpoint Uncovers Internet of Things (IoT) Cyberattack – Spam emails from fridges.
• Hacking Defcon 23’S IoT Village Samsung Fridge

Media Player & TV

• Breaking Secure-Boot on the Roku
• Google TV Or: How I Learned to Stop Worrying and Exploit Secure Boot
• Chromecast: Exploiting the Newest Device By Google
• Ransomware Ruins Holiday By Hijacking Family’s LG Smart TV on Christmas Day

Toilet

• TWSL2013-020: Hard-Coded Bluetooth PIN Vulnerability in LIXIL Satis Toilet

Toys

• TWSL2013-021: Multiple Vulnerabilities in Karotz Smart Rabbit
• Fisher-Price smart bear allowed hacking of children’s biographical data (CVE-2015-8269)
• Hello Barbie Initial Security Analysis
• Security researcher Ken Munro discovers vulnerability in Vivid Toy’s talking Doll ‘Cayla’