iothackbot

Why we included this project

This toolkit pairs standalone Python command-line tools with Claude Code skills, so a security tester can run the same reconnaissance and exploitation steps either by hand or through an AI assistant. The command-line side covers network discovery with a WS-Discovery scanner for ONVIF cameras, traffic analysis, and firmware file extraction, while the skills add guided workflows for the same jobs. The hardware angle is where it stands out: the JTAG/SWD probe classifies debug ports as open, locked, or dead and decodes the vendor ID, and the UART and telnet skills automate console and shell enumeration. Android app analysis is covered too, through apktool and jadx for unpacking and decompiling. Teams doing sanctioned IoT pentests will find the most value here, since the tools are built to be scripted or handed to the assistant for a guided assessment.