Module 1 :
Introduction to IoT

1.1 Briefing of IIoT and Usage

• Overview of IoT vs. IIoT: Differences and similarities, with examples of industrial applications.
• Real-world Examples: Smart factories, smart grids, and connected healthcare systems.

1.2 Architecture

• IoT Ecosystem Components: Sensors, actuators, gateways, and cloud services.
• Communication Protocols: Wired and wireless protocols used in IoT environments.
• Data Flow: From data collection to data processing and decision-making.

1.3 Framework/Platforms

• Common Platforms: AWS IoT, Google Cloud IoT, Microsoft Azure IoT.
• Platform Features: Device management, data analytics, security features.

1.4 Attack Surfaces

• Device-Level Vulnerabilities: Firmware, physical access.
• Network-Level Vulnerabilities: Protocol weaknesses, unsecured communication.
• Application-Level Vulnerabilities: Web interfaces, APIs.

1.5 OWASP IoT Top 10 Vulnerabilities

• Overview of OWASP IoT Top 10: Common vulnerabilities and their impact.
• Examples and Case Studies: Real-world incidents and lessons learned.

Module 2:
MQTT 

2.1 Introduction

• What is MQTT?: History and use cases.
• Core Concepts: Topics, brokers, clients, and Quality of Service (QoS) levels.

2.2 Protocol Details

• Message Structure: CONNECT, PUBLISH, SUBSCRIBE, etc.
• Communication Flow: From connection establishment to message exchange.

2.3 Recon and Enumeration of Topics

• Tools and Techniques: MQTT Explorer, MQTT.fx.
• Identifying Topics: Subscription methods and topic hierarchy.

2.4 DoS Attack

• Attack Vectors: Flooding, malformed packets.
• Mitigation Strategies: Rate limiting, authentication, and authorization    

Module 3 :
CoAP 

3.1 Introduction

• What is CoAP?: History and use cases.
• Core Concepts: RESTful API, constrained devices, and environments.

3.2 Protocol Details

• Message Structure: CON, NON, ACK, RST.
• Communication Flow: Request/response model, confirmable messages.

3.3 Recon and Enumeration

• Tools and Techniques: coap-client, Copper (Cu) Firefox plugin.
• Identifying Resources: Discovering endpoints and resource URIs.

3.4 CoAP Proxy Attacks

• Attack Vectors: Exploiting proxies to redirect or capture traffic.
• Mitigation Strategies: Secure proxy configurations, encryption    

Module 4 :
Zigbee (802.15.4)

4.1 Introduction and Protocol Overview

• What is Zigbee?: Use cases in home automation, industrial control.
• Core Concepts: Mesh networking, low power consumption.

4.2 Reconnaissance

• Tools and Techniques: KillerBee framework, ZbFind.
• Identifying Devices and Networks: Network scanning, endpoint discovery.

4.3 Sniffing and Eavesdropping

• Attack Vectors: Capturing Zigbee traffic with sniffers.
• Mitigation Strategies: Encryption, secure key management.

4.4 Replay Attacks

• Attack Vectors: Capturing and replaying legitimate packets.
• Mitigation Strategies: Nonces, sequence numbers.

4.5 Packet Forging Attack

• Attack Vectors: Creating and injecting malicious packets.
• Mitigation Strategies: Message integrity checks.

4.6 Jamming Attacks

• Attack Vectors: Disrupting Zigbee communication.
• Mitigation Strategies: Frequency hopping, signal detection.

4.7 Dissociation Attacks

• Attack Vectors: Forcing devices to leave the network.
• Mitigation Strategies: Network rejoining mechanisms.

Module 5 :
Bluetooth Low Energy (BLE)

5.1 Introduction and Protocol Overview

• What is BLE?: Use cases in wearables, healthcare.
• Core Concepts: GATT, GAP, and advertising packets.

5.2 Reconnaissance (Active and Passive) with HCI Tools

• Tools and Techniques: hciconfig, hcitool, BLE scanners.
• Identifying Devices and Services: Active scanning, passive sniffing.

5.3 GATT Service Enumeration

• Tools and Techniques: gatttool, nRF Connect.
• Identifying Services and Characteristics: Reading and writing attributes.

5.4 Sniffing GATT Protocol Communication

• Attack Vectors: Capturing GATT traffic with sniffers.
• Mitigation Strategies: Encryption, secure pairing.

5.5 Reversing GATT Protocol Communication

• Techniques: Analyzing captured traffic to understand service interactions.
• Tools: Wireshark, custom scripts.

5.6 Read and Writing on GATT Protocol

• Techniques: Accessing GATT attributes directly.
• Tools: gatttool, nRF Connect.

5.7 Cracking Encryption

• Attack Vectors: Exploiting weak pairing mechanisms.
• Mitigation Strategies: Secure pairing modes, key exchange protocols.

Module 6:
SUB-Ghz RF

6.1 Introduction

• What is SUB-Ghz RF?: Use cases in remote controls, industrial applications.
• Core Concepts: Frequency bands, modulation techniques.

6.2 Reconnaissance

• Tools and Techniques: RTL-SDR, HackRF.
• Identifying Devices and Signals: Scanning frequency bands, decoding signals.

6.3 Overview of Various Shift Keying

• Types of Modulation: ASK, FSK, PSK.
• Application Examples: Real-world usage in IoT devices.

6.4 Reversing of RF

• Techniques: Analyzing and decoding RF signals.
• Tools: GNU Radio, Universal Radio Hacker.

6.5 Crafting RF Signals

• Techniques: Creating custom RF signals.
• Tools: Signal generators, software-defined radios.

Module 7 :
Firmware Reversing 

7.1 Identifying Compression and Types

• Common Compression Methods: LZMA, gzip, bzip2.
• Identifying Techniques: File signatures, magic numbers.

7.2 Firmware Analysis

• Tools and Techniques: Binwalk, Firmware-Mod-Kit.
• Extracting and Analyzing Contents: File systems, binaries, configurations.

7.3 Simulating Firmware

• Techniques: Emulating firmware in a controlled environment.
• Tools: QEMU, Ghidra.

Module 8 :
ARM

8.1 Architecture

• Overview: ARM architecture, use cases in IoT.
• Core Components: Registers, memory management, instruction sets.

8.2 Instruction Set

• Common Instructions: Data processing, control flow.
• Example Code: Assembly language snippets.

8.3 Procedure Call Convention

• Calling Conventions: How functions are called and return values are handled.
• Stack Management: Register usage, stack frames.

8.4 System Call Convention

• System Calls: Interaction with the OS kernel.
• Examples: Common system calls in ARM architecture.

8.5 Reversing Techniques

• Tools and Techniques: Ghidra, IDA Pro.
• Analyzing ARM Binaries: Disassembly, decompilation.

8.6 Buffer Overflow Attacks

• Attack Vectors: Exploiting buffer overflows in ARM binaries.
• Mitigation Strategies: Stack canaries, ASLR, DEP.