IoT Mobile Applications Pentesting Methodology and Results of Research
Jan Adamski, Marek Janiszewski, Marcin Rytel · IEEE Internet of Things Journal · 2025
This article describes the methodology of pentesting mobile applications used to control Internet of Things (IoT) devices, which is part of a comprehensive methodology for testing the security of IoT solutions. This article shows the importance of mobile applications in the context of IoT security and what elements constitute the essential pillars for the security of users and their devices. The authors describe the methods of the pentesting process step by step depending on the application being tested and the complications encountered. This article also includes the most popular security flaws of this type of application, along with a description of how they pose a threat to their users. It also shows the complexity of conducting pentests of IoT solutions due to the variety of procedures and test areas that must be intertwined in order to obtain reliable and complete results. This article concludes with a description of vulnerabilities discovered and reported to the relevant authorities thanks to research conducted in accordance with the described methodology.