IoT Pentesting Services
Brown Fine Security builds skills that help an AI agent carry out IoT penetration testing, covering firmware analysis with chipsec and filesystem extraction from images, network traffic and packet capture analysis for IoT protocols and destinations, logic analyzer decoding of UART, SPI and I2C captures, and security assessment of telnet device shells and ONVIF-enabled IP cameras. The skills stand out for spanning the full hardware-to-network attack surface of connected devices, from BIOS and firmware internals to the traffic those devices produce on the wire.
Iothackbot
13 skills · 880 stars · MIT
Apktool Android APK unpacking and resource extraction tool for reverse engineering.
Chipsec Static analysis of UEFI/BIOS firmware dumps using Intel's chipsec framework.
Ffind Advanced file finder with type detection and filesystem extraction for analyzing firmware and ext…
Iotnet IoT network traffic analyzer for detecting IoT protocols and identifying security vulnerabilities…
Jadx Android APK decompiler that converts DEX bytecode to readable Java source code.
Jtagprobe Probe IoT/embedded targets for exposed SWD/JTAG debug interfaces using a SEGGER J-Link.
Logicmso Analyze digital and analog captures from Saleae Logic MSO devices.
Netflows Network flow extractor that analyzes pcap/pcapng files to identify outbound connections with auto…
Nmap Professional network reconnaissance and port scanning using nmap.
Onvifscan ONVIF device security scanner for testing authentication and brute-forcing credentials.
Picocom Use picocom to interact with IoT device UART consoles for pentesting operations including device…
Telnetshell Use telnet to interact with IoT device shells for pentesting operations including device enumerat…
Wsdiscovery WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on th…