IoTSploit

IoTSploit is an IoT security testing toolkit and cybersecurity testing framework for assessing various Internet of Things devices. It modularizes testing scripts and hardware, and it is described as a way to identify vulnerabilities and help ensure the robustness of IoT systems against potential threats.

Its feature set includes built-in tools for common IoT device vulnerabilities, automation for repeatable testing, and support for multiple IoT transports such as UART, JTAG, and BLE. The framework also uses a modular design for swapping testing scripts and hardware, and it centers on a Python-based plugin system for creating custom security testing modules. New plugins can be discovered, executed, and developed through its management interface, and plugins can define parameters that IoTSploit turns into user interface controls automatically. The toolkit also renders structured plugin output as tables, charts, and status indicators for real-time result visualization.

IoTSploit provides two main interfaces. Power users can use a Cmd2-powered REPL shell for actions such as scanning devices, initializing devices, and executing plugins, while makers and managers use a Flutter-based dashboard on desktop or mobile. It also includes an IoTSploit Mobile App for remote device control, real-time analytics, monitoring test results, and push notifications. Hardware modularity is a central part of the system: it uses an M2 KEYE slot for hardware modules and documents a motherboard with three M.2 Key E slots, a 100M Ethernet switch, and a USB 2.0 hub. The hardware section also describes daughter boards for USB simulation and Bad USB attacks, WiFi and Bluetooth assessments, and FPGA-based logic analysis with protocol decoding.

The site says IoTSploit offers detailed documentation and strong community support. The page footer identifies 2024 IoTSploit authors, and a code example in the documentation shows a GPL-licensed plugin, but no overall product license or pricing is stated.