iothackbot
AI-assisted security testing toolkit for IoT devices and firmware
All Skills in This Repository (16)
Pure Emerald Level Indicatorsjtagprobe
Probe IoT targets for exposed SWD and JTAG debug interfaces using a SEGGER J-Link.
logicmso
Analyze Saleae Logic MSO binary captures and decode UART, SPI, I2C, and 1-Wire protocols.
netflows
Extract TCP and UDP flows from pcap files with DNS hostname resolution.
jadx
Decompile Android APK DEX bytecode into readable Java source code.
nmap
Identify open ports and enumerate network services with Nmap.
picocom
Interact with UART serial consoles using picocom with session logging.
chipsec
Analyze offline UEFI firmware dumps to detect malware and vulnerabilities.
apktool
Decode Android APK resources and disassemble smali code for analysis.
onvifscan
Test ONVIF devices for authentication vulnerabilities and weak credentials.
telnetshell
Execute Telnet commands and enumerate IoT devices with session logging.
IoT UART Console (picocom)
Automate serial console interaction with IoT devices via picocom.
Nmap Scan
Automates two-phase Nmap scanning for ports, services, versions, and NSE vulnerabilities.
Frequently Asked Questions
FAQPage SchemaHow to install IoTHackBot?▼
Run `npx skills add BrownFineSecurity/iothackbot --all -g -y` in your terminal to install all skills in this suite globally.
What does IoTHackBot do?▼
It is an open-source toolkit for authorized security testing of IoT devices, IP cameras, and embedded systems. It covers network discovery, credential testing, firmware analysis, and hardware debug port probing.
Can IoTHackBot test IP cameras for weak passwords?▼
Yes. The onvifscan skill tests ONVIF cameras for authentication bypasses and brute-forces credentials using built-in username and password wordlists.
Does IoTHackBot work with Claude Code?▼
Yes. All skills follow the universal SKILL.md standard and run directly in Claude Code and other compatible AI agents.
Is IoTHackBot legal to use?▼
Only on devices you own or have explicit written permission to test. The toolkit is designed for authorized security assessments and requires responsible disclosure of any findings.
Related Repositories in Software Engineering
View All in Software Engineering→openclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core