SEC556: IoT Penetration Testing

• Slide 1 of 2
  Larry Pesce

  Larry Pesce

  Larry Pesce

  Senior Instructor

  Larry has revolutionized embedded device security with decades of hands-on offensive research, co-authoring SANS's flagship wireless and IoT penetration testing courses, and pioneering SBOM exploitation techniques for supply chain defense strategies.

  Read more about Larry Pesce
• Slide 2 of 2
  James Leyte-Vidal

  James Leyte-Vidal

  James Leyte-Vidal

  Principal Instructor

  James Leyte-Vidal, GSE #209, has shaped offensive cybersecurity through decades of frontline innovation, authoring Ethical Password Cracking and leading Fortune 100 InfoSec teams to elevate global cyber defense.

  Read more about James Leyte-Vidal

Relevant Job Roles

Vulnerability Analysis (OPM 541)

Responsible for assessing systems and networks to identify deviations from acceptable configurations, enclave policy, or local policy. Measure effectiveness of defense-in-depth architecture against known vulnerabilities.

Application Pen Tester

Application penetration testers probe the security integrity of a company’s applications and defenses by evaluating the attack surface of all in-scope vulnerable web-based services, clientside applications, servers-side processes, and more. Mimicking a malicious attacker, app pen testers work to bypass security barriers in order to gain access to sensitive information or enter a company’s internal systems through techniques such as pivoting or lateral movement.

Cyber Operations Planner (DCWF 332)

Coordinates cyber operations plans, working with analysts and operators to support targeting and synchronization of actions in cyberspace.

Red Teamer

In this role you will be challenged to look at problems and situations from the perspective of an adversary. The focus is on making the Blue Team better by testing and measuring the organization’s detection and response policies, procedures, and technologies. This role includes performing adversary emulation, a type of Red Team exercise where the Red Team emulates how an adversary operates, following the same tactics, techniques, and procedures (TTPs), with a specific objective similar to those of realistic threats or adversaries. It can also include creating custom implants and C2 frameworks to evade detection.

Systems Testing and Evaluation (OPM 671)

Responsible for planning, preparing, and executing system tests; evaluating test results against specifications and requirements; and reporting test results and findings.

• Slide 1 of 2
  I really liked the firmware dumping hardware-based stuff, followed by the Bluetooth BLE and SDR exercises. I had not done this before and it was taught well enough that I could go out into the field and do them again.

• Slide 2 of 2
  The labs work well for bringing concepts home and making them real. The work done to scale/virtualize them and make them repeatable is amazing.