aulwardana / mqtt-pentest

Putting MQTT Attack scenarios into practice

MQTT Pentest

The goal of this repo is to put some attack scenarios into practice. The repo is split in 4 parts for now, such as :

• Setup
• Bruteforce
• Denial of Service
• TLS

All this work was done on a Kali VM up to date. We will use Docker for our MQTT Broker.

Some of these exercises are done using a RaspBerry Pi as an IoT device, but using localhost is also possible.

You should follow first the Setup subfolder to get a grasp of the MQTT protocol, then follow a guide if needed.

Each subfolder of this repo has its Readme, follow the instructions if you want to replicate the lab work.