iotsploit-exploits
Official IoTSploit exploit plugin package. Contains all built-in exploit/security testing plugins.
Included Plugins
Every plugin is registered as an iotsploit.exploit_plugins entry point in
pyproject.toml; a plugin that is not registered cannot be run.
The demo_* plugins are the reference gallery — one per framework capability,
small enough to read, safe to run anywhere. Start there when writing a plugin,
and see docs/writing-plugins.md for which file teaches what.
| Plugin | Module | Description |
|---|---|---|
| Observations Demo | iotsploit_exploits.demo.observations |
Reference: parameters, target reading, recording observations |
| Interactive Demo | iotsploit_exploits.demo.interactive |
Reference: operator prompts |
| Async Demo | iotsploit_exploits.demo.async_run |
Reference: long-running work, progress, cooperative stop |
| Stream Demo | iotsploit_exploits.demo.stream |
Reference: streaming live data to the UI |
| Privileged Helper Check | iotsploit_exploits.demo.privileged |
Reference: the bounded privileged helper |
| UDS Probe | iotsploit_exploits.uds.probe |
Generic UDS probing over DoIP |
| DoIP Configuration DIDs | iotsploit_exploits.doip.configuration_dids |
Read ZXD configuration data identifiers |
| DoIP UDS 0x27 Authentication | iotsploit_exploits.doip.authentication |
SecurityAccess with the local FastSA profile |
| SOME/IP Discovery | iotsploit_exploits.someip.someip_discover |
Record the service instances a segment announces |
| SOME/IP Call | iotsploit_exploits.someip.someip_call |
Call one SOME/IP method and decode the reply |
| CAN Frame Composer | iotsploit_exploits.canbus.frame_composer |
Compose and send CAN frames |
| CAN Live Capture | iotsploit_exploits.canbus.live_capture |
Bounded capture decoded against the target's definitions |
| IP Scan | iotsploit_exploits.ip_scan.ip_scan |
IP network scanner |
| Nmap Scan | iotsploit_exploits.nmap_scan.nmap_scan |
Nmap-based port scanner |
| WiFi Scan | iotsploit_exploits.wifi_scan.wifi_scan |
WiFi network scanner |
| Flood Attack | iotsploit_exploits.flood_attack.flood_attack |
ICMP/UDP/TCP/MAC flood against an ECU |
| SYN Flood | iotsploit_exploits.flood_attack.syn_flood_attack |
TCP SYN flood |
| ADB Check | iotsploit_exploits.adb_check.adb_check |
Android Debug Bridge security check |
| Hydra SSH | iotsploit_exploits.hydra_ssh_attack |
Hydra SSH credential attack |
| SSH Plugin | iotsploit_exploits.plugin_ssh |
SSH connection plugin |
| Serial Reader | iotsploit_exploits.serial.picocom_serial_reader |
Picocom serial reader |
| GreatFET Echo | iotsploit_exploits.greatfet_echo |
FTDI echo emulation |
| Rubber Duck | iotsploit_exploits.greatfet_rubber_duck |
USB rubber duck (GreatFET) |
| Simple Rubber Duck | iotsploit_exploits.simple_rubber_duck |
Simplified USB rubber duck |
System Tool Dependencies
Some plugins require system-level tools (not installable via pip):
- nmap_scan: Requires
nmap(apt install nmap) - hydra_ssh_attack: Requires
hydra(apt install hydra) - adb_check: Requires
adb(apt install android-tools-adb)
Installation
pip install iotsploit-exploits
For development:
pip install -e ./iotsploit-exploits
1 maintainer
Metadata
1 maintainer
Release files for iotsploit-exploits 0.0.10
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| iotsploit_exploits-0.0.10.tar.gz | 95.1 kB | Without provenance | Details for iotsploit_exploits-0.0.10.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| iotsploit_exploits-0.0.10-py3-none-any.whl | Python 3 | none | any | Details for iotsploit_exploits-0.0.10-py3-none-any.whl |
Total release size: 217.3 kB
Release files / iotsploit_exploits-0.0.10.tar.gz
| Download URL | iotsploit_exploits-0.0.10.tar.gz |
|---|---|
| Size | 95.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
818bf1f6c1fbe8ef21efab7dfb6391088bd5a25592a5af261158091accd5b6dd
|
|
BLAKE2b-256 checksum How to use checksums |
9a56e7158f62f8025bbf1fbf30a0ebebc68a4bf0e6f77d553fbba6d984165a64
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.15
|
Release files / iotsploit_exploits-0.0.10-py3-none-any.whl
| Download URL | iotsploit_exploits-0.0.10-py3-none-any.whl |
|---|---|
| Size | 122.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
9f729fd3bd9030e6ca9d582f1cc836e5ab73328d42bff72dde4d143cd0053768
|
|
BLAKE2b-256 checksum How to use checksums |
b27ccde86da416986e01df5576c92b33484a4ba6106246d6b5362ae83d2c89d3
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.15
|
Security for iotsploit-exploits 0.0.10
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
