---
title: "IoT & Embedded - Offensive Testing Methodology - Air Market"
description: "You have a physical device to test - a smart home gadget, an industrial controller, something embedded - and the interesting parts are inside it. This covers getting at the hardware, obtaining and un…"
canonical: "https://airmarket.ai/app/offensive-iot"
---

[Air Market](/) / [Security](/category/security) / IoT & Embedded - Offensive Testing Methodology

Skill by [SnailSploit | Kai Aizen](/@snailsploit)

# IoT & Embedded - Offensive Testing Methodology

Open the device, read its firmware, find what the vendor left behind

## What this does

You have a physical device to test - a smart home gadget, an industrial controller, something embedded - and the interesting parts are inside it. This covers getting at the hardware, obtaining and unpacking its firmware, reading what is in there, attacking the boot process, and going after the radios, the phone app and the cloud service it talks to.

### Top 3 things it does for you

- Get at a board's debug ports and dump its flash
- Pull firmware apart and look for hardcoded secrets
- Attack the bootloader or get a console on it

## Information

**IoT & Embedded - Offensive Testing Methodology at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [SnailSploit \| Kai Aizen](/@snailsploit) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 13 KB |
| Licence | MIT |
| Repository | [SnailSploit/Claude-Red](https://github.com/SnailSploit/Claude-Red/tree/d03eb08f94d28695fdb83c209fa8c10b564ce758/Skills/iot/offensive-iot) |
| GitHub stars | 2,956 (as of Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of IoT & Embedded - Offensive Testing Methodology and flagged nothing. AIR's verdict: **safe**.

**What IoT & Embedded - Offensive Testing Methodology's check was run against**

|  |  |
| --- | --- |
| Commit | d03eb08f94d28695fdb83c209fa8c10b564ce758 |
| Content hash | e60f7721fc09b85e0f8eec8e41427ef4cd87f1d5187234cac47e52564ae7dd42 |
| Files read | [Browse the files at this exact commit](https://github.com/SnailSploit/Claude-Red/blob/d03eb08f94d28695fdb83c209fa8c10b564ce758/Skills/iot/offensive-iot/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for IoT & Embedded - Offensive Testing Methodology](/security/offensive-iot)

## About IoT & Embedded - Offensive Testing Methodology

An IoT and embedded device security testing methodology that starts at the hardware: reconnaissance over UART, JTAG, SWD, SPI flash, I2C EEPROM and eMMC chip-off, then firmware acquisition from vendor portals, OTA capture, flash dumps and binwalk extraction.

From there it covers firmware analysis - mounting filesystems, triaging binaries, hunting hardcoded secrets and default credentials - bootloader attacks including the U-Boot console, secure-boot bypass and fault injection, and runtime attacks on embedded Linux and RTOS through busybox CVEs, MTD writes and /dev/mem.

It reaches outward too: wireless protocol attacks across Zigbee, BLE, Z-Wave, LoRaWAN, Thread and Matter and sub-GHz, exploitation of MQTT, CoAP, Modbus, BACnet and OPC-UA, mobile companion app analysis, cloud-IoT API abuse, and the basics of side-channel and glitching work.

Use it for an IoT pentest, a smart-home assessment, ICS and OT testing, or embedded vulnerability research.

## What's inside

- SKILL.md - instructions

## Questions

### Is IoT & Embedded - Offensive Testing Methodology safe to install?

AIR scanned this exact version of IoT & Embedded - Offensive Testing Methodology and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit d03eb08f94d2, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/offensive-iot.

### How do I install IoT & Embedded - Offensive Testing Methodology?

Open https://airmarket.ai/app/offensive-iot on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/SnailSploit/Claude-Red/tree/d03eb08f94d28695fdb83c209fa8c10b564ce758/Skills/iot/offensive-iot. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by SnailSploit | Kai Aizen](/@snailsploit)

---

Canonical URL: <https://airmarket.ai/app/offensive-iot>