A Python framework and toolkit for security testing and auditing of ZigBee and IEEE 802.15.4 networks.
KillerBee is a Python-based framework and toolkit for security testing and auditing of ZigBee and IEEE 802.15.4 wireless networks. It enables researchers and analysts to capture, analyze, inject, and manipulate packets to assess the security of low-power wireless devices and networks. The toolkit includes various attack tools for network discovery, replay attacks, key sniffing, and denial-of-service testing.
Security researchers, penetration testers, and advanced analysts focused on IoT and wireless network security, particularly those assessing ZigBee and IEEE 802.15.4 implementations. It requires familiarity with Python and an understanding of ZigBee protocols.
KillerBee provides a unified, open-source framework with extensive hardware support and a rich toolset specifically tailored for ZigBee and 802.15.4 security assessment, eliminating the need for proprietary or fragmented solutions. Its library-first design and integration with tools like Scapy and Wireshark offer flexibility for custom research and testing scenarios.
IEEE 802.15.4/ZigBee Security Research Toolkit
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Includes over 15 specialized tools like zbstumbler for network discovery and zbdsniff for key sniffing, covering a wide range of security testing scenarios as detailed in the TOOLS section.
Compatible with multiple devices such as ApiMote, RZ RAVEN, and CC2531, with firmware utilities provided, allowing flexibility in hardware choice for researchers.
Offers real-time packet streaming to Wireshark via zbwireshark and an interactive Scapy shell (zbscapy) for advanced packet manipulation, enhancing analysis capabilities.
Built as a Python library with a clear API, emphasizing extensibility for developing custom tools, as noted in the Philosophy and FRAMEWORK sections.
The current version 3.0.0 is in beta, deprecating features like usb0.x and Apimote v1 support, which can lead to instability and require code adjustments for users.
Developed and tested primarily on Linux, with MacOS usage possible but not supported, and no mention of Windows, restricting its usability across different platforms.
Requires specific ZigBee-compatible hardware devices and firmware management, along with dependencies like libgcrypt and Python modules, making initial setup non-trivial.