Plugins
Plugins extend iottack with individual test and enumeration capabilities.
Each plugin runs a self-contained check and reports zero or more findings with
a severity level and optional evidence string.
| Plugin | Command | Summary |
|---|---|---|
| platform | iottack platform | Report details about the host/platform environment |
| amqp - scan | iottack amqp scan | Detect an AMQP broker and test for default credentials |
| http - banner | iottack http banner | Checks HTTP banner and common settings |
| mqtt | - | Work with MQTT |
| network - mdns-scan | iottack network mdns-scan | Discover mDNS/DNS-SD services on the local network |
| network - telnet | iottack telnet | Connect to a Telnet service and detect banners, login prompts and default credentials |
| network - tcp-banner | iottack network tcp-banner | Connect to a TCP service and capture the initial banner, identifying the protocol and flagging cleartext services |
| uart - baud-scan | iottack uart baud-scan | Probe common UART baud rates to identify the active configuration |
| uart - port-scan | iottack uart port-scan | Discover serial ports available on this host |
| uart - fuzz | iottack uart fuzz | Send malformed and custom payloads to a UART interface and report anomalous responses |
| uart - shell-detect | iottack uart shell-detect | Detect interactive shell or login prompt on a UART interface |
| uart - terminal | iottack uart terminal | Open an interactive terminal session over a UART interface |
Global options
Every plugin accepts these flags in addition to its own arguments:
| Flag | Short | Description |
|---|---|---|
--verbose | -v | Increase log verbosity; repeat for more detail (-v, -vv, -vvv) |
--output <FILE> | -o | Save the result to a file |
--format <FORMAT> | -f | Output format for --output: text (default) or json |