Awesome Connected Things Security
Section: Fuzzing Tools
Entry
Appears in 6 awesome lists
Python framework for describing a protocol's message fields and sending mutated messages to a target, useful for testing a reconstructed protocol against a live service; crash detection needs a process monitor or restart callback.
Section: Fuzzing Tools
Section: Web and protocols · Python framework for describing a protocol's message fields and sending mutated messages to a target, useful for testing a reconstructed protocol against a live service; crash detection needs a process monitor or restart callback.
Section: Scanning / Pentesting · Fuzzing engine and fuzz testing framework.
Section: Tools and Projects · A fork and successor of Sulley framework
Section: IoT & Embedded Security · Network protocol fuzzing framework for discovering memory corruption vulnerabilities in embedded services and daemons.
Section: Network Protocol Fuzzers · A fork and successor of Sulley framework.
Wireshark is a free and open-source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education. Wireshark is very similar to tcpdump, but has a graphical front-end, plus some integrated sorting and filtering options.
An interactive HTTPS proxy that allows inspection, modification, and debugging of network traffic, useful for video streaming analysis.
A free, open-source network scanner used for discovering hosts, services, and vulnerabilities on computer networks through advanced port scanning and OS detection techniques.
Python-based interactive packet manipulation program & library. Supports CAN/ISOTP/UDS/GMLAN plus many other protocols.
Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. Kali Linux is preinstalled with numerous penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker), and Aircrack-ng (a…
A tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.
Sublist3r is a multi-threaded sub-domain enumeration tool for penetration testers by @aboul3la.
Vulnerability Scanner and Risk Evaluation for containers, serverless and hosts at runtime. ThreatMapper generates runtime BOMs from dependencies and operating system packages, matches against multiple threat feeds, scans for unprotected secrets, and scores issues based on severity and…