Exploring the Programming Model, Security Vulnerabilities, and Usability of ESP8266 and ESP32 Platforms for IoT Development

This paper delves into the programming model of the ESP8266 and ESP32 platforms, examining their compatibility with diverse programming languages and development environments. It also investigates the potential exploitation of these SoCs in malicious cyberattacks using freely available software projects. To highlight the security risks, a proof of concept is presented, demonstrating how malicious features can be integrated into IoT systems based on these platforms. Furthermore, the paper provides a critical discussion on security enhancement decisions that can be employed when adopting IoT devices.By thoroughly exploring the programming models, compatibility, and security vulnerabilities of ESP8266 and ESP32, this research contributes to a deeper understanding of the capabilities and limitations of these platforms in IoT development. The findings serve as a valuable resource for developers and stakeholders involved in IoT projects, informing them about the potential security challenges and aiding in the implementation of effective security measures to mitigate risks and ensure the secure deployment of IoT devices based on ESP8266 and ESP32 platforms.