iotsploit-cli

IoTSploit interactive CLI shell for IoT security testing.

Overview

This package provides the iotsploit command-line shell built on top of cmd2. It bundles the core console loop (console.py) and all command modules (commands/) that implement device management, plugin execution, target management, network operations, and more.

Installation

pip install iotsploit-cli

Usage

iotsploit

Or with the Django server started immediately:

iotsploit --runserver

Custom plugins

IOTSPLOIT_EXPLOIT_PLUGINS_DIR can be used for user custom exploit plugins. IOTSPLOIT_DEVICE_PLUGINS_DIR can be used for user custom device plugins.

Command Palette

The IoTSploit shell includes a live command palette for all commands. When you type any character at the top-level interactive prompt, a menu appears immediately showing every eligible command matching that prefix with a short description beside each entry.

How it works

1. Start typing any character at the empty prompt.
2. The menu lists all visible commands matching the typed prefix (e.g. e shows edit, exploit, exit, execute_plugin; h shows help, history).
3. Additional characters filter the list in real time (e.g. ex narrows to exit, execute_plugin, exploit).
4. Navigate the list, insert a selection, or dismiss the menu.

Keyboard controls

Behaviour notes

• The palette is TTY-only. Non-interactive use (piped input, startup scripts, non-TTY stdin) bypasses the palette entirely and uses the normal cmd2 input path.
• The command list is derived dynamically from the runtime command registry, so newly loaded command modules appear without editing the palette.
• Tab completion for arguments (after a space) still uses cmd2's existing completion engine, including argument-specific completers and argparse completers.
• Selecting a command from the palette does not execute it; it inserts the command name so you can type arguments before pressing Enter.

License

GPL-3.0-or-later. See LICENSE for details. For commercial use, contact wang3919379@gmail.com.