Skip to main content

Posts

Showing posts from August, 2018

Message Queuing Telemetry Transport (MQTT) Hacking

Introduction      IOT devices need a way to communicate with each other and there are several protocols that allow them to do this. The most popular IOT communication protocols that run over wifi are HTTP, MQTT, XMPP, and AMQP. All of these protocols have their own weaknesses but I will be covering the MQTT protocol.    Message Queuing Telemetry Transport (MQTT) is a publish subscribe based message passing protocol. This protocol was invented in 1999 and they didn't really have security in mind when they were developing it. The MQTT has several design flaws that could allow hackers to completely take over your devices and perform other unwanted attacks. MQTT Message Queuing  Telemetry Transport (MQTT) is a protocol that runs at the application layer. MQTT was designed to run on IOT devices because of its many benefits such as: Efficient Information Distribution Increased Scalability Reduced Network Bandwidth MQTT is a publish subscribe based mess