Skip to content
Tech News
← Back to articles

Show HN: Mezz, a curl-able WiFi sandbox for IoT pentesting

read original get WiFi Penetration Testing Kit → more articles
Why This Matters

Mezz offers a secure, isolated WiFi sandbox environment for testing and inspecting IoT devices, empowering users to identify vulnerabilities and monitor device communications. Its design facilitates educational and authorized security assessments, enhancing overall IoT security awareness in the tech industry and among consumers.

Key Takeaways

Mezz

Mezz is a self-contained wifi sandbox for inspecting your own IoT devices. The name comes from mezzanine, the half-floor between two main floors of a building. This network sits in the same place: between your devices and the rest of your home network.

Caution Mezz is provided for educational purposes and authorized penetration testing only. Use it on networks and devices you own, or on which you have explicit written permission to test. The author accepts no responsibility for any misuse or for damage caused by use of this software.

What it does

Turns a Linux host with two NICs (one wifi, one wired uplink) into a small isolated network:

a wifi access point on its own subnet

DHCP and DNS for any client that connects (wifi or wired)

NAT out through your wired uplink

a local domain, so clients resolve as kitchen-pi.lan etc.

etc. per-query DNS logging, so you can see exactly what your fridge is talking to

... continue reading