1.6 KiB
1.6 KiB
Requires physical access to the device (but no disassembly). Device must be powered on and reachable.
| Test-ID | ISTG Reference | Name | Tools | Status | Finding |
|---|---|---|---|---|---|
| DES-01 | ISTG-DES-AUTHZ-001 | Unauthorized Access to Data Exchange Services | curl, openssl, mitmproxy, tcpdump | Open | Test not yet performed. |
| DES-04 | ISTG-DES-AUTHZ-001 | Unauthorized Access to Data Exchange Services (Cloud Connection) | Open | Test not yet performed. | |
| UI-02 | ISTG-UI-AUTHZ-001 | Unauthorized Access to User Interface (Web UI) | curl | Open | Test not yet performed. |
| UI-10 | ISTG-UI-LOGIC-001 | Circumvention of the Intended Business Logic (Factory Reset) | sha256sum, diff | Open | Test not yet performed. |
| UI-11 | ISTG-UI-INPV-001 | Insufficient Input Validation (SSID/Password Fields) | curl, python3 | Open | Test not yet performed. |
| UI-12 | ISTG-UI-INPV-002 | Code or Command Injection (UI Input Fields) | curl | Open | Test not yet performed. |
| WRLS-01 | ISTG-WRLS-AUTHZ-001 | Unauthorized Access to Wireless Interface (BLE command channel) | bleak, Frida, Python | Open | Test not yet performed. |
| WRLS-04 | ISTG-WRLS-CRYPT-001 | Usage of Weak Cryptographic Algorithms | jadx, Python | Open | Test not yet performed. |
| FWUPDT-04 | ISTG-FW[UPDT]-CRYPT-003 | Insecure Firmware Update Transmission | Wireshark, mitmproxy, tcpdump, tshark | Open | Test not yet performed. |
| ECS-02 | ISTG-ECS-CONF-003 | Absence of a Responsible Disclosure Policy | curl, wget | Open | Test not yet performed. |
Example Commands