NOTE:- This script only made for MQTT Service Port on 1883(Insecured). I will be not responsible if any user performs malicious activities using this script. Use it for Learning purpose only.
sudo apt-get install mosquitto-client
git clone https://github.com/souravbaghz/MQTTack
cd MQTTack && chmod +X src/MqttExploit
bash mqttack.sh host_IP
bash mqttack.sh 127.0.0.1
- [1] Scan for MQTT Service
- [2] Subscribe to All Topics
- [3] Subscribe to a Single Topic
- [4] Publish a Message
- [5] DOS Attack - CVE-2017-7651(Mosquitto Ver 1.4.14)
- [6] DOS Attack - CVE-2018-12543(Mosquitto Ver 1.5 to 1.5.2)
- [7] Password Bruteforce Attack
- [8] Login and Subscribe to Topics
- [0] Exit
For Password Bruteforce Attack, You will need to keep your username and password list separately into user.txt & pass.txt inside 'src' directory.
