mqattack provides ten subcommands grouped by purpose:
| Command | Description |
|---|
subscribe | Listen to one or more topic filters |
fingerprint | Identify broker software and version via $SYS |
sys-info | Collect all $SYS broker metadata |
| Command | Description |
|---|
publish | Send a payload to a topic |
| Command | Description |
|---|
check-acl | Probe subscribe/publish permissions per topic |
enum-topics | Discover active topics via wordlist or brute-force |
enum-perms | Build a user × topic permission matrix |
| Command | Description |
|---|
brute-auth | Brute-force or spray MQTT credentials |
will-inject | Register a crafted Last Will to inject messages on disconnect |
payload-inject | Publish built-in or custom injection payloads |
All commands accept the common connection and authentication flags.