Hardware Pentest Requirement

🔴  Required (Must Provide)

• Detailed summary of the device architecture and its components 
• Detailed summary of the technologies used in the device 
• Enumeration of physical inputs and outputs for interacting with the device
• Indicate whether testers are allowed to cause harm physically to the device during testing (ex., if the device is welded shut, are we allowed to break it open?) 
• If testing is to be performed on-site, indicate any security or access restrictions or instructions to be followed
• Indicate whether the device can be virtualized and provided in that fashion for firmware analysis

⭐  Optional but highly recommended

• Indicate whether the device is connected to a network, how it is connected, and how data is handled or stored on the device | Optional but highly recommended to ensure efficiency and usefulness of results 
  • Include protocols used for connectivity - Such as Bluetooth, HTTP, https, MQTT, etc | Required