iotsrg/iot-pentest-devices-and-purposeCurated guide to IoT penetration testing hardware and software tools for 2025, covering Bluetooth, Zigbee, Z-Wave, WiFi, RFID, automotive, and side-channel attack vectors.
This document outlines the latest tools and hardware for IoT security testing in 2025, covering different protocols and technologies. It includes cutting-edge attacks, newly discovered vulnerabilities, and updated hardware and software tools with enhanced capabilities.
| Software Tools | Hardware Tools | Purpose | 2025 Updates |
|---|---|---|---|
| BrakTooth PoC (Enhanced) | ESP32-WROVER | Testing Bluetooth vulnerabilities (CVE-2021-28139 and variants) | Enhanced exploit capabilities, broader SoC support |
| Flipper Zero (Xtreme Firmware) | Flipper Zero | Multi-protocol RF hacking including Bluetooth attacks | Bad Keyboard attacks via BLE, iOS compatibility |
| Ubertooth Tools | Ubertooth One | Bluetooth Classic and BLE packet sniffing and injection | Improved packet injection, real-time analysis |
| BlueHydra Enhanced | CSR 4.0 or compatible | BLE device scanning with AI-enhanced detection | Machine learning-based device fingerprinting |
| Bettercap 2.x | Alfa AWUS1900 | Advanced MiTM attacks on Bluetooth and BLE | Enhanced automation, AI-powered attack scenarios |
| GATTacker Pro | ESP32 or nRF52840 | BLE GATT layer MiTM attacks and fuzzing | Improved protocol fuzzing, automated vulnerability discovery |
| Wireshark 4.x | Bluetooth Adapter | Enhanced Bluetooth packet analysis | AI-assisted traffic analysis, threat detection |
| Software Tools | Hardware Tools | Purpose | 2025 Updates |
|---|---|---|---|
| KillerBee Enhanced | ApiMote v4 or nRF52840 Dongle | Advanced Zigbee 3.0 penetration testing | Zigbee 3.0 vulnerability testing, install code bypass |
| Z-Attack Pro | USRP B210 or HackRF One | Zigbee protocol layer attacks and manipulation | Support for Zigbee 3.0 security model testing |
| ZigDiggity v2 | XBee S2C or nRF52840 | Zigbee network mapping and vulnerability assessment | Enhanced DoS attack capabilities against Zigbee 3.0 |
| Zigbee Protocol Fuzzer | ApiMote or compatible | Advanced protocol fuzzing and crash detection | AI-guided fuzzing for vulnerability discovery |
Key 2025 Vulnerability: CVE-2025-1221 affecting SiLabs EmberZNet Zigbee stack, causing message delivery failures in Radio Co-Processor implementations.
| Software Tools | Hardware Tools | Purpose | 2025 Updates |
|---|---|---|---|
| EZ-Wave Plus | HackRF One or USRP | Z-Wave Plus security analysis and exploitation | Support for Z-Wave 800 series analysis |
| Z-Attack Advanced | Yardstick One or FlipperZero | Enhanced Z-Wave packet injection and replay | Enhanced key extraction techniques |
| RFCrack Pro | USRP B200mini | Advanced Z-Wave signal analysis | Machine learning-based pattern recognition |
| OpenZWave Enhanced | Z-Wave USB Stick | Testing smart home Z-Wave networks | Enhanced security testing modules |
| Software Tools | Hardware Tools | Purpose | 2025 Updates |
|---|---|---|---|
| Aircrack-ng 1.8+ | Alfa AWUS036ACS or AWUS036ACHM | WPA3 and enhanced WPA2 security testing | WPA3-SAE attack support, DragonBlood vulnerability testing |
| FragAttacks Toolkit | Intel AX200/AX210 adapters | Exploiting fragmentation vulnerabilities | Updated for CVE-2025-27558 mesh network vulnerabilities |
| Wi-Fi Deauther v3 | ESP8266/ESP32 based devices | Advanced deauthentication attacks | AI-powered attack timing optimization |
| WiFi Pineapple Mark VII | Hak5 WiFi Pineapple | Evil twin and rogue AP attacks | Enhanced social engineering modules |
| Bettercap WiFi Module | High-gain USB adapters | Modern WiFi attacks with automation | Real-time threat intelligence integration |
| KRACK Attack Tools | Panda PAU09 | WPA2 Key Reinstallation attacks | Updated for newer WPA2/WPA3 implementations |
