IoT-Security-Verification-Standard-ISVS

IoT Security Verification Standard ISVS ⚠️ Release Candidate —1.0.0-RC2. This is a release candidate under community review and may change before the final release. It is not yet a finalized standard. Please review and share feedback via GitHub Discussions. The OWASP Internet of Things Security...

thc-tips-tricks-hacks-cheat-sheet

THC's favourite Tips, Tricks & Hacks Cheat Sheet https://thc.org/tips A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. G...

expliot

EXPLIoT Sustantivo: /ɛkˈsplʌɪəti:/ Un framework para pruebas de seguridad y explotación de productos IoT e infraestructura IoT. Proporciona un conjunto de plugins casos de prueba que se utilizan para realizar la evaluación y se pueden ampliar fácilmente con otros nuevos. El nombre EXPLIoT...

owasp-istg

OWASP IoT Security Testing Guide The OWASP IoT Security Testing Guide provides a comprehensive methodology for penetration tests in the IoT field offering flexibility to adapt innovations and developments on the IoT market while still ensuring comparability of test results. The guide provides an...

CVE-2017-7921-Research-Toolkit

CVE-2017-7921 Research Toolkit Security Statement: This tool is intended for authorized security research and vulnerability verification only. Table of Contents Legal and Ethical Statement Project Description Features Installation Usage Output Defense and Remediation Recommendations Technical...

iotmap

IoTMap IoTMap es una herramienta que modela redes IoT utilizando uno o múltiples protocolos simultáneamente. Este es un trabajo en progreso, como parte de una tesis doctoral sobre seguridad de Internet de las Cosas. Este repositorio se actualiza regularmente a medida que se obtienen nuevos...

CatSniffer

CatSniffer También disponible en distribuidores: CatSniffer 😼 es una placa multiprotocolo y multibanda original diseñada para esnifar, comunicarse y atacar dispositivos IoT Internet de las Cosas. Fue diseñada como un stick USB altamente portátil que integra los nuevos chips TI CC1352, Semtech...

expliot

EXPLIoT Noun: /ɛkˈsplʌɪəti:/ A Framework for security testing and exploiting IoT products and IoT infrastructure. It provides a set of plugins test cases which are used to perform the assessment and can be extended easily with new ones. The name EXPLIoT pronounced expl-aa-yo-tee is a pun on the...

IoTGoat

Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP as a platform to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices. The vulnerability challenges are based on the OWASP IoT...

firmware-analysis-toolkit

FAT — Kit de Análisis de Firmware Firmware Analysis Toolkit es un kit de investigación de seguridad para investigar la seguridad del firmware en IoT, IA Física, Dispositivos Móviles y Robótica. Está construido principalmente para el entrenamiento "Offensive IoT Exploitation" impartido por Attify...

st

ST Smart Things ST Smart Things Sentinel es una herramienta de seguridad avanzada diseñada específicamente para examinar y detectar amenazas dentro de los intrincados protocolos utilizados por los dispositivos IoT Internet de las cosas. En el panorama en constante expansión de los dispositivos...

attifyos

AttifyOS v3.0 AttifyOS es una distribución diseñada para ayudarte a realizar evaluaciones de seguridad y pruebas de penetración en dispositivos de Internet de las Cosas IoT. Te ahorra mucho tiempo al proporcionar un entorno preconfigurado con todas las herramientas necesarias cargadas. La nueva...

Genzai

Genzai El Kit de Seguridad para IoT Descripción • Características • Configuración y Uso • Reconocimientos • Contáctame Descripción Genzai te ayuda a identificar paneles de control relacionados con IoT o Internet de las Cosas en un objetivo único o un conjunto de objetivos proporcionados como...

CVE-2025-45512

U-Boot 1.1.3 Exploit PoC Usage Guide Introduction This Proof of Concept PoC was created to verify vulnerabilities in the U-Boot bootloader version 1.1.3 compiled on August 27, 2019. The code implements five different vulnerabilities relevant to the OWASP IoT Security Testing Guide ISTG categories...

pocs_slides

Sharing my advisory, poc, slides and scripts to IoT / protocol security. You can find me at: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Slides OffByOne2025: Patch Diffing, You Are My Sword! A Deep Dive into Two...

apparatus

ASTo - Herramienta de Software para Aparatos Aviso de archivo - Tras la finalización de mi grado de investigación, el repositorio ha sido archivado. ASTo ha tenido un impacto significativo en mi investigación. Quiero expresar mi gratitud a todos los que ayudaron a mejorarlo. Sin embargo, esto no...

thingernet-graph

thingernet-graph Python script to generate neo4j Cypher representation of a collection of IoT devices for visualisation and query. The script reads a directory of JSON files describing 'things' and creates the relevant neo4j cypher text for import to neo4j in order to produce a graph database...

IIITA-IoT-Security-Research

IIIT Allahabad – IoT Security Research Internship Overview This repository showcases the work carried out during my Research Internship at the Indian Institute of Information Technology, Allahabad IIIT Allahabad under the Cryptography and Network Security CNS Lab. During this internship, I worked...

awesome-connected-things-sec — Updated!

🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. Contents Hardware Attacks Fundamentals Interface Attacks Memory Extraction Side-Channel and Fault Injection PCIe and DMA Attacks Wireless Protocols RF...

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer P2P relay technique. The activity, codenamed Operatio...