IoTGoat
IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices. (by OWASP)
diodb
Open-source vulnerability disclosure and bug bounty program database (by disclose)
Our great sponsors
| IoTGoat | diodb | |
|---|---|---|
| 4 | 10 | |
| 624 | 955 | |
| 4.2% | 1.2% | |
| 1.8 | 7.6 | |
| over 3 years ago | 3 days ago | |
| C | Python | |
| MIT License | Creative Commons Zero v1.0 Universal |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
IoTGoat
Posts with mentions or reviews of IoTGoat.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-03-27.
-
Concepts and subjects to focus on
On a related note, check out IoTGoat - it's a deliberately insecure IoT firmware image based on OpenWRT that you can use to explore a lot of common design flaws in embedded Linux devices: https://github.com/OWASP/IoTGoat
-
We are cybersecurity researchers who wrote a book teaching people how to hack the Internet of Things, called Practical IoT Hacking. Ask us anything!
We have a chapter on methodologies in the book and go into a lot of detail on how we test. We also created the free OWASP IoT Goat project - a deliberately insecure IoT firmware that you can use for a testbed.
diodb
Posts with mentions or reviews of diodb.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-03-27.
-
How to find issues with bounties on github?
Perhaps: https://disclose.io/programs/
-
Are bug bounties programs safe for hackers?
Hi, I want to make some experience with web pentesting and I wanted to take some small bug bounty programs from disclose.io/programs/ . But to be honest I am scared that maybe I will do something wrong and I will face legal consequences 😱 . I am scared that by making the report they will see that I exploited the bug too much and put them in danger or something like that. I heard about white hat hackers reporting vulnerabilities and facing legal action but they discovered them without a bug bounty program like in this case https://www.bleepingcomputer.com/news/security/ethical-hacker-exposes-magyar-telekom-vulnerabilities-faces-8-years-in-jail/ What is your opinion about this ?
-
When to Report Vulnerability
2) https://disclose.io
-
We are cybersecurity researchers who wrote a book teaching people how to hack the Internet of Things, called Practical IoT Hacking. Ask us anything!
Helped develop coordinated vulnerability disclosure frameworks to allow security researchers to report security issues in good faith
- Hacking the Law: Are Bug Bounties a True Safe Harbor?
-
My disclosure mails doesn't get answered and sound like spam
I would also suggest contacting https://disclose.io/ and your National CSIRT team and ask for help. Good luck :)
-
GitHub repo of ALL known bug bounty platforms (45) and Halls of Fame (497)
Yeh, these are the different orgs that run programs on behalf of companies. For a list of the orgs running programs there’s about 2,300 of those here (also open-source and a contact work in progress): https://github.com/disclose/diodb
- diodb: Open-source vulnerability disclosure and bug bounty program database by disclose.io
- diodb: Open-source vulnerability disclosure and bug bounty program database.
- Open-source vulnerability disclosure and bug bounty program database
What are some alternatives?
When comparing IoTGoat and diodb you can also consider the following projects:
OpenWrt-NanoPi-R2S-R4S-Builds - OpenWRT Builds for NanoPi R2S & R4S from official Openwrt source code with minimal set of patches
Resources-for-Beginner-Bug-Bounty-Hunters - A list of resources for those interested in getting started in bug bounties
elks - Embeddable Linux Kernel Subset - Linux for 8086
awesome-safety-critical - List of resources about programming practices for writing safety-critical software.
openwrt-passwall - A commonly used proxy toolchain for Openwrt LuCI Application.
ncrack - Ncrack network authentication tool
Shocker
resources - Tools, data, and contact lists relevant to The disclose.io Project.
genext2fs - genext2fs - ext2 filesystem generator for embedded systems
legal-bug-bounty - #legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs. Authored by Amit Elazari.
IoTGoat vs OpenWrt-NanoPi-R2S-R4S-Builds
diodb vs Resources-for-Beginner-Bug-Bounty-Hunters
IoTGoat vs elks
diodb vs awesome-safety-critical
IoTGoat vs openwrt-passwall
diodb vs ncrack
IoTGoat vs Shocker
diodb vs resources
IoTGoat vs genext2fs
diodb vs Shocker
IoTGoat vs ncrack
diodb vs legal-bug-bounty