Member-only story
Inside the Invisible: What Pentesting Wireless IoT Devices Taught Me About Modern Security
Exploring how the radio spectrum hides some of the biggest attack surfaces in tech.
1. Why the Air Matters More Than You Think
Most security assessments start at layer 3 — IP addresses, ports, and services. That’s obvious and necessary. But in 2025, an equal (and often larger) attack surface lives above and below the IP stack: the radio spectrum.
IoT devices, industrial sensors, smart locks, wearables, and asset trackers all communicate wirelessly. Those communications often bypass the enterprise network, use proprietary protocols, or rely on weak/default configurations. From a defender’s perspective, that’s terrifying. From a pentester’s perspective, it’s a goldmine of findings you won’t discover with a port scan.
The air is ephemeral, messy, and poorly instrumented. That makes it easy for vulnerabilities to hide and easy for attackers to exploit if they know where to look.
2. Start With Authorisation and Ethics — Always
Before any RF work, get explicit written permission. Wireless research often crosses legal boundaries: spectrum transmission…
![[1991] I tried using a shortwave radio again after 30 years. I wasn’t expecting this …](https://webproxy.poorya-velaei-d67.workers.dev/https://miro.medium.com/v2/resize:fit:1358/format:webp/1*jN-w1o1fNujm8t0UognI9A.jpeg)
