How find open devices on the internet

SHODAN

s a search engine that lets the user find specific types of computers (routers, servers, etc.) connected to the internet using a variety of filters. Some have also described it as a search engine of service banners, which are meta-data the server sends back to the client.^[1] This can be information about the server software, what options the service supports, a welcome message or anything else that the client can find out before interacting with the server.

Shodan collects data mostly on web servers (HTTP, port 80), as well as FTP (port 21), SSH (port 22) Telnet (port 23), SNMP (port 161), SIP (port 5060),^[2] and Real Time Streaming Protocol (RTSP, port 554). The latter can be used to access webcams and their video stream.^[3]

https://www.shodan.io/

Zelf een IoT maken met Arduino ESP8266

Wat je moet weten over de ESP8266

• WIFI module netwerk 
• Programmeerbare Micro controller 

-Voor geprogrammeert met een AT commando set

• SOC programmeerbaar in C, python 
• Werkt op 3.3 V
• 1MB Flash Memory

De Module kan gebruikt worden als server, Access Point, en Client

Stap 1:Arduino

Install Arduino van de Arduino website.

Stap 2:

Arduino –> Tools –> Port –> kies /dev/cu.usbserial-XXX
[[]]

Stap 1:Arduino 

• Install Arduino  van de Arduino website.

Stap 2: De ESP6288 aan Arduino toevoegen.

Standaard kent de programmeer omgeving niet het ESP6288 board.

Zet de volgende link http://arduino.esp8266.com/stable/package_esp8266com_index.json into Additional Board Manager URLsfield. 

• Open Boards Manager from Tools > Board menu and install esp8266 platform (and don't forget to select your ESP8266 board from Tools > Board menu after installation).

Ga naar board manager en selecteer het ESP6288 board in klik op de "install" knop

Ga naar tools-> boards en kies "generic ESP8266"

Pen testing IoT

OWASP IoT
I1 – Insecure Web Interface
I2 – Insufficient Authentication/Authorization
I3 – Insecure Network Services
I4 – Lack of Transport Encryption
I5 – Privacy Concerns
I6 – Insecure Cloud Interface
I7 – Insecure Mobile Interface
I8 – Insufficient Security Configurability
I9 – Insecure Software/Firmware
I10 – Poor Physical Security


I1 – Testing Insecure Web Interfes

The Thing: ESP8266 a 3 euro Iot

A 3

http://rancidbacon.com/files/kiwicon8/ESP8266_WiFi_Module_Quick_Start_Guide_v_1.0.4.pdf