A curated list of hacks in IoT space so that researchers and industrial products can address the security vulnerabilities (hopefully).

The table of content is generated with doctoc. Make sure you run it and update the table of content before making pull requests.

• Analysis, Reports and Slides
• Communities
• IoT Hacks
  • Thingbots
  • RFID
  • Home Automation
  • Hub
  • Wearable
  • Smart Plug
  • Cameras
  • Traffic Lights
  • Automobiles
  • Light Bulbs
  • Smart Scale
  • Pacemaker
  • Thermostats
  • Fridge
  • Media Player & TV
  • Toilet
  • Toys

• Internet of Things Research Study (HP 2014 Report)
• The Internet of Fails, (video)
• Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices
• Hack All The Things: 20 Devices in 45 Minutes - (wiki, video)
• Careful Connections: Building Security in the Internet of Things (FTC)

• IoT VillageTM
• BuildItSecure.ly
• Secure Internet of Things Project (Stanford)
• The Open Web Application Security Project (OWASP)

• Proofpoint Uncovers Internet of Things (IoT) Cyberattack

• Vulnerabilities in First-Generation RFID-enabled Credit Cards
• MIT Subway Hack Paper Published on the Web
• Tampered Card Readers Steal Data via Bluetooth

• IOActive identifies vulnerabilities in Belkin WeMo's Home Automation
• Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices
• Popular Home Automation System Backdoored Via Unpatched Flaw

• TWSL2013-023: Lack of Web and API AuthenticationVulnerability in INSTEON Hub

• How I hacked my smart bracelet

• Hacking the D-Link DSP-W215 Smart Plug
• Reverse Engineering the TP-Link HS110
• Hacking Kankun Smart Wifi Plug
• Smart Socket Hack Tutorial

• Trendnet Cameras - I always feel like somebody's watching me
• Hacker Hotshots: Eyes on IZON Surveilling IP Camera Security
• Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices
• Hacker 'shouts abuse' via Foscam baby monitoring camera
• Urban surveillance camera systems lacking security
• TWSL2014-007: Multiple Vulnerabilities in Y-Cam IP Cameras
• Say Cheese: a snapshot of the massive DDoS attacks coming from IoT cameras

• Green Lights Forever: Analyzing The Security of Traffic Infrastructure
• Hacking US (and UK, Australia, France, etc.) Traffic Control Systems

• Hackers Remotely Attack a Jeep on the Highway
• Comprehensive Experimental Analyses of Automotive Attack Surfaces

• Hacking into Internet Connected Light Bulbs
• Hacking Lightbulbs: Security Evaluation Of The Philips Hue Personal Wireless Lighting System

• Fitbit Aria Wi-Fi Smart Scale

• Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and Zero-Power Defenses

• Cameras, Thermostats, and Home Automation Controllers, Hacking 14 IoT Devices
• Google Nest: Exploiting DFU For Root
• Smart Nest Thermostat, A Smart Spy in Your Home
• TWSL2013-022: No Authentication Vulnerability in Radio Thermostat

• Proofpoint Uncovers Internet of Things (IoT) Cyberattack - Spam emails from fridges.
• Hacking Defcon 23'S IoT Village Samsung Fridge

• Breaking Secure-Boot on the Roku
• Google TV Or: How I Learned to Stop Worrying and Exploit Secure Boot
• Chromecast: Exploiting the Newest Device By Google

• TWSL2013-020: Hard-Coded Bluetooth PIN Vulnerability in LIXIL Satis Toilet

• TWSL2013-021: Multiple Vulnerabilities in Karotz Smart Rabbit