https://github.com/IoT-PTv/IoT-PT
https://github.com/V33RU/IoTSecurity101
Resources for Learning Embedded Systems
https://www.youtube.com/watch?v=3Z7qXcwrY9A
No Leak, No Problem - Bypassing ASLR with a ROP Chain to Gain RCE
Really good walkthrough of IoT exploit work on a crappy IP camera, from figuring out how to physically extract the firmware through a UART bus, mapping the webapp and its backend, discovering a buffer overflow, figuring out a ROP chain, and constructing a full RCE exploit.