Duo Labs does a lot of odd research now and again. The whole IoT world can offer up a lot of ups and downs to a researcher, but since we are trying to not only get through this ourselves, we are also trying to encourage others to research.
Therefore, it makes sense to come up with some steps to try and get through the research as quickly and painlessly as possible. It also made sense to “try it out” on a live target. The process we developed, while software-focused, yielded results fairly quickly on our target IoT device, the Milwaukee Tool M18 FUEL with ONE-KEY ½” Drill/Driver.
As usual, instead of filing a short and sweet blog, we ended up with a much larger document better suited for a PDF. This is the plight of the researcher - we find one thing leads to another and another to properly tell the tale. Somehow, we reached a stopping point. We hope you find it both useful and somewhat entertaining, as only a security nerd can be entertained.