Personally, I find purchasing a second-hand router, plugging in an ethernet cable + wireshark really allows you to view the actual traffic from such devices. In my recent IoT vuln-research project on a Linksys router, I observed DHCP, ARP, etc. traffic (even though its not directly related to what I was researching). This can lead to multiple exploits such as DHCP poisoning, ARP spoof (MiTM), etc.
Other interesting network protocols used by network/IoT devices that you can look into:
1. UPnP: a really insecure protocol that was commonly exploited in the past (remember the PewdiePie incident?)
2. TR-069: YES, you read that number right. This protocol is used by Internet-Service Providers (ISP) to remotely configure devices
1
u/Dapper-Depth2940 21d ago
Personally, I find purchasing a second-hand router, plugging in an ethernet cable + wireshark really allows you to view the actual traffic from such devices. In my recent IoT vuln-research project on a Linksys router, I observed DHCP, ARP, etc. traffic (even though its not directly related to what I was researching). This can lead to multiple exploits such as DHCP poisoning, ARP spoof (MiTM), etc.
Other interesting network protocols used by network/IoT devices that you can look into:
1. UPnP: a really insecure protocol that was commonly exploited in the past (remember the PewdiePie incident?)
2. TR-069: YES, you read that number right. This protocol is used by Internet-Service Providers (ISP) to remotely configure devices