IoTHackBot plugin
A Claude Code plugin with skills and tools for authorized IoT pentesting: network recon, firmware analysis, hardware access and mobile app analysis
- 887 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Includes offensive techniques: network probes, ONVIF credential brute-forcing and hardware access over JTAG, UART and telnet
- Runs system tools and commands with network and physical access to devices, some under sudo
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add plugins/iothackbotDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Includes offensive techniques: network probes, ONVIF credential brute-forcing and hardware access over JTAG, UART and telnet
- Runs system tools and commands with network and physical access to devices, some under sudo
This is third-party code. Review the repository files before installing.
What it does
The plugin gives Claude Code skills and command-line tools for security testing of IoT devices, IP cameras and embedded systems. It covers network recon with nmap, discovery of ONVIF cameras over WS-Discovery, traffic and network-flow analysis from pcap, ONVIF testing for weak authentication and credential brute-forcing, static analysis of UEFI and BIOS firmware through chipsec, file-type detection and filesystem extraction from firmware images, unpacking and decompiling Android apps through apktool and jadx, plus hardware work: a JTAG and SWD debug-interface probe via J-Link, UART console interaction and device telnet shell access. The tools are layered into CLI, core and binary and can be chained into pipelines. The toolkit targets authorized testing; credential brute-forcing and network probes touch third-party devices only with the owner's permission.
Who it is for. For embedded and IoT security professionals: pentesters, firmware researchers and hardware analysis engineers.
Good fit when
- You need authorized recon of an IoT network and discovery of cameras and devices
- You need to analyze firmware: identify files, extract the filesystem, check UEFI
- You need to read data off hardware over JTAG, UART or telnet on your own bench
Not a fit when
- You have no written permission from the owner to test the device or network
- You need analysis without installing tools such as nmap, chipsec, J-Link and Android utilities
Example request
Scan my test subnet for ONVIF cameras and check the found devices for weak authenticationLimitations
The toolkit is intended only for authorized testing; the legality of use is on the user. The tools need Python and external packages (colorama, pyserial, pexpect, requests) and system tools such as nmap, e2fsprogs, f2fs-tools, JLinkExe. Hardware work requires a physical connection through J-Link or a serial port. Some operations must run with sudo. The README documents the CLI tools more than the plugin install, so some setup steps have to be reconstructed from the repository layout.
How to disable. Disable the iothackbot plugin in enabledPlugins in ~/.claude/settings.json and remove the marketplace, or delete the skill folders from the .claude directory. Remove the bin directory from PATH.
FAQ
Is this a legal tool?
Yes, for authorized testing, research and work on your own benches. ONVIF brute-forcing, network probes and hardware access apply to third-party devices only with the owner's written permission.
Is a physical connection required?
Not for the network and file skills, which work over the network and with firmware files. The JTAG, UART and telnet skills need physical access to the device via J-Link or a serial port.
Discussion
No questions or reviews yet.
Related
Pluginshackingtool plugin
hackingtool - Claude Code plugin
A Claude Code plugin wrapping 183 pentest and OSINT tools from Z4nzu/hackingtool, running them locally via Bash, WSL or Docker
A pack of about fifty Claude Code subagents for authorized pentesting: planning, recon, exploit research and chaining, post-exploitation, detection and reportin
A Claude Code plugin with 15 agents and 63 attack categories for authorized penetration testing with sign-off.
A CLI agent for authorized pentesting: from a natural-language brief it runs recon, finds and verifies vulnerabilities and prepares a report
A code security plugin: finds vulnerabilities, challenges its findings, proves exploitability and fixes with a verified patch
A marketplace of 22 hook plugins for Claude Code: safety, cost control, observability and automation
README in short
The README describes IoTHackBot as an open toolkit and set of Claude Code skills for security testing of IoT, IP cameras and embedded systems. The tools are grouped into network recon, device-specific testing, firmware and file analysis, Android analysis and hardware access over JTAG, UART and telnet. Installation adds dependencies via pip and system packages and puts the bin directory on PATH; as a Claude Code plugin the repo is loaded through claude --plugin-dir or a local marketplace in settings.json. Every tool is layered into CLI, core and binary for automation and pipelines. MIT license.