Updated 4mo ago
by BrownFineSecurity
iothackbot
IoT HackBot: A collection of Claude Skills and custom tooling for hybrid IoT pentesting
864 GitHub stars (864)
+12 in 20 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | 0 |
| Sep 29 | 0 |
| Sep 30 | 0 |
| Oct 1 | +1 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | +1 |
| Oct 5 | 0 |
| Oct 6 | +3 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | +1 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | −1 |
| Oct 13 | +1 |
| Oct 14 | +2 |
| Oct 15 | +1 |
| Oct 16 | +2 |
- 13 skills (13 skills found in its SKILL.md files)
- 135 forks (135 forks)
- 4mo ago last update (Last updated 4mo ago)
Install
Skills CLI
npx skills add BrownFineSecurity/iothackbot
Asks which skills and agents to install. Just one: npx skills add BrownFineSecurity/iothackbot --skill apktool — add -g for every project.
Claude Code
git clone https://github.com/BrownFineSecurity/iothackbotcp -r "iothackbot/skills/apktool" ~/.claude/skills/
Copies the apktool skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add BrownFineSecurity/iothackbot
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
apktool
Android APK unpacking and resource extraction tool for reverse engineering. Use when you need to decode APK files, extract resources, examine AndroidManifest.xml, analyze smali code, or repackage modified APKs.
skills/apktool/SKILL.md on GitHub (opens in a new tab) -
chipsec
Static analysis of UEFI/BIOS firmware dumps using Intel's chipsec framework. Decode firmware structure, detect known malware and rootkits (LoJax, ThinkPwn, HackingTeam, MosaicRegressor), generate EFI executable inventories with hashes, extract NVRAM variables, and parse SPI flash descriptors. Use when analyzing firmware .bin/.rom/.fd/.cap files offline without requiring hardware access.
skills/chipsec/SKILL.md on GitHub (opens in a new tab) -
ffind
Advanced file finder with type detection and filesystem extraction for analyzing firmware and extracting embedded filesystems. Use when you need to analyze firmware files, identify file types, or extract ext2/3/4 or F2FS filesystems.
skills/ffind/SKILL.md on GitHub (opens in a new tab) -
iotnet
IoT network traffic analyzer for detecting IoT protocols and identifying security vulnerabilities in network communications. Use when you need to analyze network traffic, identify IoT protocols, or assess network security of IoT devices.
skills/iotnet/SKILL.md on GitHub (opens in a new tab) -
jadx
Android APK decompiler that converts DEX bytecode to readable Java source code. Use when you need to decompile APK files, analyze app logic, search for vulnerabilities, find hardcoded credentials, or understand app behavior through readable source code.
skills/jadx/SKILL.md on GitHub (opens in a new tab) -
jtagprobe
Probe IoT/embedded targets for exposed SWD/JTAG debug interfaces using a SEGGER J-Link. Detects whether debug is OPEN, LOCKED (readout-protected), or DEAD (fused off). Use when assessing whether a target's on-chip debug port can be reached, identifying the silicon vendor from DPIDR/IDCODE, and confirming halt+memory access for full debugger control.
skills/jtagprobe/SKILL.md on GitHub (opens in a new tab) -
logicmso
Analyze digital and analog captures from Saleae Logic MSO devices. Decode protocols like UART, SPI, I2C from exported binary files. Use when analyzing logic analyzer captures for CTF challenges, hardware reverse engineering, or protocol decoding.
skills/logicmso/SKILL.md on GitHub (opens in a new tab) -
netflows
Network flow extractor that analyzes pcap/pcapng files to identify outbound connections with automatic DNS hostname resolution. Use when you need to enumerate network destinations, identify what hosts a device communicates with, or map IP addresses to hostnames from packet captures.
skills/netflows/SKILL.md on GitHub (opens in a new tab) -
nmap
Professional network reconnaissance and port scanning using nmap. Supports various scan types (quick, full, UDP, stealth), service detection, vulnerability scanning, and NSE scripts. Use when you need to enumerate network services, detect versions, or perform network reconnaissance.
skills/nmap/SKILL.md on GitHub (opens in a new tab) -
onvifscan
ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.
skills/onvifscan/SKILL.md on GitHub (opens in a new tab) -
picocom
Use picocom to interact with IoT device UART consoles for pentesting operations including device enumeration, vulnerability discovery, bootloader manipulation, and gaining root shells. Use when the user needs to interact with embedded devices, IoT hardware, or serial consoles.
skills/picocom/SKILL.md on GitHub (opens in a new tab) -
telnetshell
Use telnet to interact with IoT device shells for pentesting operations including device enumeration, vulnerability discovery, credential testing, and post-exploitation. Use when the user needs to interact with network-accessible shells, IoT devices, or telnet services.
skills/telnetshell/SKILL.md on GitHub (opens in a new tab) -
wsdiscovery
WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.
skills/wsdiscovery/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.