A Curated list of Security Resources for all connected things
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
Firmware security research platform combining binary analysis, taint tracing, and emulation across IoT, edge AI, mobile devices, and robotics.
The open-source wireless research platform for ESP32.
IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.
Autonomous AI pentesting engine across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes, IoT firmware and AI/LLM endpoints (OWASP LLM Top 10). Real exploits with proof for every finding. Privacy gateway: the LLM never sees your real IPs, hosts or creds; nothing leaves your perimeter.
wolfMQTT is a small, fast, portable MQTT client implementation, including support for TLS 1.3.
A front-end JavaScript toolkit for creating DNS rebinding attacks.
[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.
DNS Rebinding Exploitation Framework
wolfSSH is a small, fast, portable SSH implementation, including support for SCP and SFTP.
TinyPKI is a lightweight C11/OpenSSL PKI core for constrained IoT and edge networks, combining ECQV implicit certificates, sparse Merkle revocation proofs, MMR issuance transparency, CA-signed checkpoints, t-of-n edge witnesses, and SM2/SM3/SM4 sessions.
Hardware hacker’s flying probe automation stack for agent-driven target discovery, microscope mapping, safety-monitored CNC motion, probe review, and controlled pin probing.
Collect some iot-related security articles, including vulnerability analysis, security conferences and papers, etc.
A ZigBee hacking toolkit by Bishop Fox
Independent research white paper by Jon “GainSec” Gaines examining the security posture of a connected public safety technology ecosystem.
A FREE comprehensive step-by-step embedded hacking course covering Embedded Software Development to Reverse Engineering.
The IoT security toolkit to help identify IoT related dashboards and scan them for default passwords and vulnerabilities.
Network Intrusion Detection based on various machine learning and deep learning algorithms using UNSW-NB15 Dataset
To associate your repository with the iot-security topic, visit your repo's landing page and select "manage topics."