IoTGoat : A Deliberately Insecure Firmware Based On OpenWrt

The IoTGoat Project is a deliberately insecure firmware based on OpenWrt. The project’s goal is to teach users about the most common vulnerabilities typically found in IoT devices.

The vulnerabilities will be based on the IoT Top 10 as documented by OWASP: https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project.

To get started with developing IoTGoat challenges, review the Build Environment Guidance page. Precompiled firmware and an OVA with the latest build can be found via https://github.com/scriptingxss/IoTGoat/tree/master/build_environment.

If a crucial challenge idea is missing, please reach out to the project leaders below or add details to the project task page. Be sure to join the OWASP Slack team, then join the #iot-security for news on upcoming project meetings and updates.

Also Read – Progress Burp : Burp Suite Extension To Track Vulnerability Assessment Progress

Project leaders

  • Aaron Guzman (@scriptingxss)
  • Fotios Chantzis
  • Paulino Calderon
R K

Recent Posts

Burrow – Breaking Through Firewalls With Open Source Ingenuity

Burrow is an open source tool for burrowing through firewalls, built by teenagers at Hack Club.…

24 hours ago

Its-A-Trap : Building Secure Web Applications With A Golang Web Server For Authentication

Simple golang webserver that listens for basic auth or post requests and sends a notification…

24 hours ago

Nutek-Apple : Unleashing Power On macOS And Linux

Nutek Security Platform for macOS and Linux operating systems. Tools for hackers, bug hunters and…

1 day ago

SecureSphere Labs – A Haven For Cybersecurity Innovators And Ethical Hackers

Welcome to SecureSphere Labs, your go-to destination for a curated collection of powerful hacking tools…

1 day ago

Vulpes/VulpOS : The Docker-Powered All-in-One Workstation For Penetration Testing And Offsec Labs

All in one Docker-based workstation with hacking tools for Pentesting and offsec Labs by maintained…

1 day ago

LiCo-Extrator : Revolutionizing Icon Extraction Across Platforms

Got it! Below is the updated README.md file with instructions for downloading the project on…

2 days ago