iot-security-testing

IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.

DNS Rebinding Exploitation Framework

The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, and Information Security professionals with conducting firmware security assessments.

GUI Framework on top of Killerbee

GhostBLE is a BLE privacy scanner for the M5Stack Cardputer. It discovers nearby devices, analyzes their privacy posture, and visualizes BLE activity with the interactive mascot Nibbles.

📚 IoT 🔒 Mobile 📚

Web Client Security Camera

IoT Security for Industries

Official Python API client for ONEKEY

Portable 2.4 GHz wireless security analyser — ESP32 + nRF24L01. Jammer detection, BLE tracker ID, WiFi scanning, live spectrum IDS. v3.1

Hands-on cybersecurity & IoT security labs, network security, firmware analysis, threat reports, wireshark analysis.

IoT Firmware Security PoC: Firmware extraction, SquashFS analysis, embedded web application review, emulation, and blind command execution validation.

A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing (mostly Iot devices)

This programm is used to auto discover vulnerabilities from extracted IoT device firmware

🛡️ Automate penetration testing with PentestGPT, an AI-driven agent designed to enhance security assessments efficiently and effectively.

Security research PoC for analyzing unauthenticated initialization and SSH authentication behavior on GL.iNet GL-BE10000 routers running affected GL.iNet 4.x firmware. Designed for authorized laboratory testing and vulnerability research.