I'm a cybersecurity student in my third year however, the first two years were more computer science focused and this year we specialize in the cybersecurity field. I have to carry out a project, however I'm in a dilemma. I want to start off by saying I have a big interest in red teaming and was thinking of doing a pen testing project on IoT devices. My plan was as follows:
Step 1 - Decide what devices to test (between 1-3 devices).
Step 2 - Gather information on chosen IoT devices, and known vulnerabilities.
Step 3 -Obtain some INEXPENSIVE devices.
Step 4 - Figure out what tools and techniques will be required for each device.
Step 5 - Conduct experiments and analyze results
Step - 6 Report results.
I was hoping for some outsider opinions on whether this is a good idea for a project as a student in their third year. I'm also conflicted about what devices I should choose, and some recommendations would be greatly appreciated, along with how to find out common vulnerabilities for these devices.
If there's any other great project ideas that you think i should do instead please let me know, all feedback is greatly appreciated!