v33ru/awesome-connected-things-secقائمة منسقة من الموارد الأمنية لجميع الأشياء المتصلة
أبحاث الأمان وتقنيات الاستغلال لأنظمة إنترنت الأشياء والأنظمة المدمجة والصناعية والسيارات.
| الأداة | الاستخدام | الرابط | | ───────────────────────── | ─────────────────────────────────────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────────────────────────────────────────────── | | mtls-intercept | Reverse proxy that dynamically signs client certs to MITM full mTLS sessions | github.com/fungaren/mtls-intercept | | mitmproxy | Configure client_certs with extracted IoT device cert to impersonate device in mTLS handshake | mitmproxy.org | | SSLsplit | Transparent mTLS proxy - forward extracted device cert to complete mutual handshake with cloud | github.com/droe/sslsplit | | eCapture (eBPF) | Hook OpenSSL/BoringSSL on Linux IoT gateways pre-encrypt - decrypts mTLS + TLS 1.3 + PFS | ecapture.cc | | Wireshark + SSLKEYLOGFILE | Decrypt captured mTLS sessions from IoT gateways using NSS pre-master secret logs | wiki.wireshark.org/TLS | | Frida | Runtime hook SSLContext, TrustManager, KeyManager in Android IoT companion apps | frida.re | | Objection | Android sslpinning disable - strips mTLS pinning in companion apps | github.com/sensepost/objection | | apk-mitm | Statically patches IoT companion APK to disable mTLS cert pinning | github.com/shroudedcode/apk-mitm | | MagiskTrustUserCerts | Moves custom CA to system store on rooted Android POS/kiosk to complete mTLS MITM | github.com/NVISOsecurity/MagiskTrustUserCerts | | frida-multiple-unpinning | Universal Frida script targeting 20+ mTLS/pinning patterns in hardened IoT apps | | | NEU-SNS/IoTLS | IMC'21 research repo - SSLKEYLOGFILE files to decrypt MITM'd mTLS connections across 32 devices | | | mitmrouter | Linux-based IoT traffic interception router - intercepts device TLS at network level | |
المساهمات مرحب بها. أرسل PR مع موارد جديدة تتبع البنية الموجودة.
