iotsploit-exploits
Official IoTSploit exploit plugin package. Contains all built-in exploit/security testing plugins.
Included Plugins
Every plugin is registered as an iotsploit.exploit_plugins entry point in
pyproject.toml; a plugin that is not registered cannot be run.
The demo_* plugins are the reference gallery — one per framework capability,
small enough to read, safe to run anywhere. Start there when writing a plugin,
and see docs/writing-plugins.md for which file teaches what.
| Plugin | Module | Description |
|---|---|---|
| Observations Demo | iotsploit_exploits.demo.observations |
Reference: parameters, target reading, recording observations |
| Interactive Demo | iotsploit_exploits.demo.interactive |
Reference: operator prompts |
| Async Demo | iotsploit_exploits.demo.async_run |
Reference: long-running work, progress, cooperative stop |
| Stream Demo | iotsploit_exploits.demo.stream |
Reference: streaming live data to the UI |
| Privileged Helper Check | iotsploit_exploits.demo.privileged |
Reference: the bounded privileged helper |
| UDS Probe | iotsploit_exploits.uds.probe |
Generic UDS probing over DoIP |
| DoIP Configuration DIDs | iotsploit_exploits.doip.configuration_dids |
Read ZXD configuration data identifiers |
| DoIP UDS 0x27 Authentication | iotsploit_exploits.doip.authentication |
SecurityAccess with the local FastSA profile |
| SOME/IP Discovery | iotsploit_exploits.someip.someip_discover |
Record the service instances a segment announces |
| SOME/IP Call | iotsploit_exploits.someip.someip_call |
Call one SOME/IP method and decode the reply |
| CAN Frame Composer | iotsploit_exploits.canbus.frame_composer |
Compose and send CAN frames |
| CAN Live Capture | iotsploit_exploits.canbus.live_capture |
Bounded capture decoded against the target's definitions |
| IP Scan | iotsploit_exploits.ip_scan.ip_scan |
IP network scanner |
| Nmap Scan | iotsploit_exploits.nmap_scan.nmap_scan |
Nmap-based port scanner |
| WiFi Scan | iotsploit_exploits.wifi_scan.wifi_scan |
WiFi network scanner |
| Flood Attack | iotsploit_exploits.flood_attack.flood_attack |
ICMP/UDP/TCP/MAC flood against an ECU |
| SYN Flood | iotsploit_exploits.flood_attack.syn_flood_attack |
TCP SYN flood |
| ADB Check | iotsploit_exploits.adb_check.adb_check |
Android Debug Bridge security check |
| Hydra SSH | iotsploit_exploits.hydra_ssh_attack |
Hydra SSH credential attack |
| SSH Plugin | iotsploit_exploits.plugin_ssh |
SSH connection plugin |
| Serial Reader | iotsploit_exploits.serial.picocom_serial_reader |
Picocom serial reader |
| GreatFET Echo | iotsploit_exploits.greatfet_echo |
FTDI echo emulation |
| Rubber Duck | iotsploit_exploits.greatfet_rubber_duck |
USB rubber duck (GreatFET) |
| Simple Rubber Duck | iotsploit_exploits.simple_rubber_duck |
Simplified USB rubber duck |
System Tool Dependencies
Some plugins require system-level tools (not installable via pip):
- nmap_scan: Requires
nmap(apt install nmap) - hydra_ssh_attack: Requires
hydra(apt install hydra) - adb_check: Requires
adb(apt install android-tools-adb)
Installation
pip install iotsploit-exploits
For development:
pip install -e ./iotsploit-exploits
1 maintainer
Release files for iotsploit-exploits 0.0.9
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| iotsploit_exploits-0.0.9.tar.gz | 95.1 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| iotsploit_exploits-0.0.9-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 217.3 kB
Release files / iotsploit_exploits-0.0.9.tar.gz
| Download URL | iotsploit_exploits-0.0.9.tar.gz |
|---|---|
| Size | 95.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
854b78d04820eaac4dc68bb01b82a7639a7a9261a9e4334e9482d45dd9b52ab9
|
|
BLAKE2b-256 checksum How to use checksums |
e4b80ff03654ccec8e73ace73131de7b9dad2b24d772f40ec53a5f03f473bdd5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.14
|
Release files / iotsploit_exploits-0.0.9-py3-none-any.whl
| Download URL | iotsploit_exploits-0.0.9-py3-none-any.whl |
|---|---|
| Size | 122.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
1fc44141a753e58342be34e8a8c389962331adb3f62d177a4cef081cbb2ce967
|
|
BLAKE2b-256 checksum How to use checksums |
0c9996b459e52da9d68d05cb88b2723228ba88070a9949e547f6613e2a73d782
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.14
|
