Metadata-Version: 2.4
Name: iotsploit-exploits
Version: 0.0.9
Summary: Official IoTSploit exploit plugin package
License: GPL-3.0-or-later
Author: IoTSploit Team
Author-email: support@iotsploit.org
Requires-Python: >=3.10,<4.0
Classifier: License :: OSI Approved :: GNU General Public License v3 or later (GPLv3+)
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Classifier: Programming Language :: Python :: 3.15
Requires-Dist: facedancer (>=3.0.6,<4.0)
Requires-Dist: iotsploit-core
Requires-Dist: iotsploit-django
Requires-Dist: iotsploit-protocols
Requires-Dist: paramiko (>=3.0)
Requires-Dist: pyserial (>=3.5)
Requires-Dist: scapy (>=2.5)
Description-Content-Type: text/markdown

# iotsploit-exploits

Official IoTSploit exploit plugin package. Contains all built-in exploit/security testing plugins.

## Included Plugins

Every plugin is registered as an `iotsploit.exploit_plugins` entry point in
`pyproject.toml`; a plugin that is not registered cannot be run.

The `demo_*` plugins are the reference gallery — one per framework capability,
small enough to read, safe to run anywhere. Start there when writing a plugin,
and see `docs/writing-plugins.md` for which file teaches what.

| Plugin | Module | Description |
|--------|--------|-------------|
| Observations Demo | `iotsploit_exploits.demo.observations` | Reference: parameters, target reading, recording observations |
| Interactive Demo | `iotsploit_exploits.demo.interactive` | Reference: operator prompts |
| Async Demo | `iotsploit_exploits.demo.async_run` | Reference: long-running work, progress, cooperative stop |
| Stream Demo | `iotsploit_exploits.demo.stream` | Reference: streaming live data to the UI |
| Privileged Helper Check | `iotsploit_exploits.demo.privileged` | Reference: the bounded privileged helper |
| UDS Probe | `iotsploit_exploits.uds.probe` | Generic UDS probing over DoIP |
| DoIP Configuration DIDs | `iotsploit_exploits.doip.configuration_dids` | Read ZXD configuration data identifiers |
| DoIP UDS 0x27 Authentication | `iotsploit_exploits.doip.authentication` | SecurityAccess with the local FastSA profile |
| SOME/IP Discovery | `iotsploit_exploits.someip.someip_discover` | Record the service instances a segment announces |
| SOME/IP Call | `iotsploit_exploits.someip.someip_call` | Call one SOME/IP method and decode the reply |
| CAN Frame Composer | `iotsploit_exploits.canbus.frame_composer` | Compose and send CAN frames |
| CAN Live Capture | `iotsploit_exploits.canbus.live_capture` | Bounded capture decoded against the target's definitions |
| IP Scan | `iotsploit_exploits.ip_scan.ip_scan` | IP network scanner |
| Nmap Scan | `iotsploit_exploits.nmap_scan.nmap_scan` | Nmap-based port scanner |
| WiFi Scan | `iotsploit_exploits.wifi_scan.wifi_scan` | WiFi network scanner |
| Flood Attack | `iotsploit_exploits.flood_attack.flood_attack` | ICMP/UDP/TCP/MAC flood against an ECU |
| SYN Flood | `iotsploit_exploits.flood_attack.syn_flood_attack` | TCP SYN flood |
| ADB Check | `iotsploit_exploits.adb_check.adb_check` | Android Debug Bridge security check |
| Hydra SSH | `iotsploit_exploits.hydra_ssh_attack` | Hydra SSH credential attack |
| SSH Plugin | `iotsploit_exploits.plugin_ssh` | SSH connection plugin |
| Serial Reader | `iotsploit_exploits.serial.picocom_serial_reader` | Picocom serial reader |
| GreatFET Echo | `iotsploit_exploits.greatfet_echo` | FTDI echo emulation |
| Rubber Duck | `iotsploit_exploits.greatfet_rubber_duck` | USB rubber duck (GreatFET) |
| Simple Rubber Duck | `iotsploit_exploits.simple_rubber_duck` | Simplified USB rubber duck |

## System Tool Dependencies

Some plugins require system-level tools (not installable via pip):

- **nmap_scan**: Requires `nmap` (`apt install nmap`)
- **hydra_ssh_attack**: Requires `hydra` (`apt install hydra`)
- **adb_check**: Requires `adb` (`apt install android-tools-adb`)

## Installation

```bash
pip install iotsploit-exploits
```

For development:

```bash
pip install -e ./iotsploit-exploits
```

