# Module 18: IoT & OT Hacking

Ethical hackers or pen testers use numerous tools and techniques to hack the target IoT and OT platforms. Recommended labs that will assist you in learning various IoT platform hacking techniques include:

1. Perform footprinting using various footprinting techniques
   * Gather information using online footprinting tools
2. Capture and analyze IoT device traffic
   * Capture and analyze IoT traffic using Wireshark
3. Perform IoT Attacks
   * Perform replay attack on CAN protocol



## Lab 1: Perform Footprinting using Various Footprinting Techniques <a href="#lab-1-perform-footprinting-using-various-footprinting-techniques" id="lab-1-perform-footprinting-using-various-footprinting-techniques"></a>

### Task 1: Gather Information using Online Footprinting Tools <a href="#task-1-gather-information-using-online-footprinting-tools" id="task-1-gather-information-using-online-footprinting-tools"></a>

{% hint style="info" %}
[https://www.whois.com/whois](https://www.whois.com/whois) | WHOIS Lookup

[https://www.exploit-db.com/google-hacking-database](https://www.exploit-db.com/google-hacking-database) | Google Hacking Database
{% endhint %}

## Lab 2: Capture and Analyze IoT Device Traffic <a href="#lab-2-capture-and-analyze-iot-device-traffic" id="lab-2-capture-and-analyze-iot-device-traffic"></a>

```
## Tools used in this section : 
MQTT Broker
MQTT Simulator
```

## Lab 3: Perform IoT Attacks <a href="#lab-3-perform-iot-attacks" id="lab-3-perform-iot-attacks"></a>

```
## Installing CAN Utils & Adding CAN Interface
sudo apt-get install can-utils
sudo modprobe can
sudo modprobe vcan
## Setting up the CAN Interface
sudo ip link add dev vcan0 type vcan
sudo ip link set up vcan0

## Using Tool ICSim
chmod -R 777 ICSim
./icsim vcan0
./controls vcan0
cansniffer -c vcan0
candump -l vcan0

## CAN Replay Attack
canplayer -I candump-2024-05-07_063502.log
```
