Open-Source Security Testing Tools for IoT Protocols - MQTT and Zigbee

The Internet of Things (IoT) has become an integral part of our lives, but it also poses a major security threat. As the number of IoT devices grows and more data is collected about us, malicious actors are taking advantage and launching attacks on vulnerable systems. Offensive security testing is a proactive approach of securing computing infrastructure through adversary simulation. This involves, understanding different attack tools that are available and how they can be used to attack devices. This paper studies the state of open-source tools which are available to test IoT networks that use the Zigbee and MQTT protocols. Usage of these tools are explained with attack examples, challenges are listed and enhanced tooling capabilities are proposed.