“2 is if you want to statically analyze the firmware, you can download the Raspberry Pi, use something like binwalk to extract the firmware file system, And from there analyze the file system contents for vulnerabilities, look at the configurations, check for, any web pages that let's say aren't”

Transcript evidence from Aaron Guzman — IoTGoat.