Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-15 01:17:36 +00:00
Code Issues Projects Releases Packages Wiki Activity

GitBook: [master] one page modified

Browse source
This commit is contained in:
CPol 2020-09-24 18:58:31 +00:00 committed by gitbook-bot
parent 876326cbbb
commit a0cbaec30b
No known key found for this signature in database
GPG key ID: 07D2180C7B12D0FF
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
pentesting/1883-pentesting-mqtt-mosquitto.md
View file

@ -6,6 +6,11 @@ MQTT stands for MQ Telemetry Transport. It is a publish/subscribe, extremely sim
**Default port:** 1883
```text
PORT STATE SERVICE REASON
1883/tcp open mosquitto version 1.4.8 syn-ack
```
## Pentesting MQTT
**Authentication is totally optional** and even if authentication is being performed, **encryption is not used by default** \(credentials are sent in clear text\). MITM attacks can still be executed to steal passwords.