Fuzz MQTT 3.1.1 brokers with boofuzz to detect protocol violations.
npx skills add https://github.com/lawless-m/mtqq-fuzzer --skill mqtt-fuzzer
Please help me install this Agent Skill. Skill: MQTT Fuzzer Source: https://github.com/lawless-m/mtqq-fuzzer/tree/main/.claude/skills/Creating%20Skills Command: npx skills add https://github.com/lawless-m/mtqq-fuzzer --skill mqtt-fuzzer
This Skill helps identify vulnerabilities in MQTT broker implementations by fuzzing them against the MQTT 3.1.1 specification, ensuring robust security and protocol compliance.
Run the MQTT fuzzer against a broker running on localhost at port 1883, including malformed and edge-case packets.
High-intent search queries and answers about installing and using this skill.
Fuzzing an MQTT broker involves sending mutated packets and malformed data to detect protocol violations. This Skill targets MQTT 3.1.1 implementations to validate standard packet types and identify security weaknesses like buffer overflows.
Boofuzz identifies MQTT vulnerabilities like buffer overflows and denial-of-service conditions by testing edge cases. It sends malformed UTF-8 strings, invalid remaining lengths, and incorrect wildcard usage to expose implementation flaws.
Yes, this MQTT fuzzer supports testing all QoS handshake levels. It provides comprehensive protocol coverage across all MQTT 3.1.1 packet types including CONNECT, PUBLISH, SUBSCRIBE, UNSUBSCRIBE, PING, and DISCONNECT.
Yes, you can test a local MQTT implementation running on localhost at port 1883. The fuzzer executes deterministic tasks against the specified broker endpoint to validate protocol compliance and detect edge case vulnerabilities.
Using boofuzz for protocol testing provides deterministic task execution and protocol validation specifically for MQTT 3.1.1. It systematically generates malformed packets and edge cases to ensure robust security and specification compliance.
When securing MQTT brokers, look for edge cases like malformed data and invalid lengths. This fuzzer specifically tests incorrect remaining lengths, malformed UTF-8 strings, and invalid wildcard usage to uncover potential security vulnerabilities.
SensorsIotStart, stop, and check status of a mosquitto MQTT broker on the ESP32 workbench.
erenisiklarDetect memory errors in C/C++ fuzzing with AddressSanitizer.
as4584Capture, dissect, and analyze network traffic to reverse engineer protocols.
OneWave-AIReview code for security vulnerabilities, performance bottlenecks, and maintainability issues.
