Snout: An Extensible IoT Pen-Testing Tool
Snout: An Extensible IoT Pen-Testing Tool
复制标题
Snout：可扩展的物联网渗透测试工具
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
D. Starobinski
中科院分区：
文献类型：
--
作者：
John Mikulskis;Johannes K. Becker;Stefan Gvozdenovic;D. Starobinski
为基于IP的网络设计的网络映射工具通常不提供对物联网(IoT)设备使用的非基于IP的无线协议的访问，例如Zigbee和蓝牙LE。我们介绍了Snout，这是一个基于无线电的通用且可扩展的软件定义工具，用于物联网网络映射和渗透测试。SNUT面向各种物联网协议，这些协议无法使用传统的网络枚举工具(如Nmap)访问。该工具允许设备枚举、漏洞评估，以及更具攻击性的技术，如数据包重放和欺骗，我们为Zigbee协议演示了这些技术。Snout构建在开放源码堆栈之上，旨在针对其他物联网协议和功能进行扩展。
Network mapping tools designed for IP-based networks generally do not provide access to non-IP based wireless protocols used by Internet of Things (IoT) devices, such as Zigbee and Bluetooth LE. We present Snout, a versatile and extensible software defined radio-based tool for IoT network mapping and penetration testing. Snout is geared towards the various IoT protocols that are not accessible with traditional network enumeration tools, such as Nmap. The tool allows for device enumeration, vulnerability assessment, as well as more offensive techniques such as packet replay and spoofing, which we demonstrate for the Zigbee protocol. Snout is built on an open-source stack, and is designed for extensibility towards other IoT protocols and capabilities.