MQTT未授权漏洞利用

本文转自唐小风 并作补充

1、扫描端口

2、mqtt-pwd安装

git clone https://github.com/akamai-threat-research/mqtt-pwn.git
cd mqtt-pwd
docker-compose up --build --detach
docker-compose run cli

discovery
scans
scans -i 1
topics