AttifyOS is a penetration testing distro for security professionals to assess the security of Internet of Things (IoT) devices. The latest version - AttifyOS 4.0 is based on Ubuntu 22.04 and contains pre-configured tools to help you with your next IoT pentest.
Login credentials
attify
attify
You can download AttifyOS 4 from GitHub releases.
Note
As the files are quite large in size they are distributed in a multi-part zip/7z format. While other archival tools may work but for best results use 7zip to extract.
AttifyOS v4 is distributed both in the form of a OVA and an ISO. The OVA can be imported in VirtualBox and VMware Player/Workstation.
AttifyOS v4 can also be installed from the ISO. In such case ensure that the VM has atleast 2GiB of RAM and 60 GiB of disk space available.
AttifyOS comes with a set of tools included so that you don't have to waste time in installation and setup, and fixing potential issues that may come in the way. The current list of tools along with the version can be found on the GitHub repository https://github.com/AttifyOS/package-index and also shown below. The tools are located in /home/attify/attifyos-package-manager/ and also available on the system PATH.
AttifyOS 4 also comes with a package manager tool unsurprisingly named attifyos-package-manager (or apm) in short. Using apm it's possible to upgrade a package when a newer version is published on the index.
The packages have been built with portability in mind such that it is possible to install/uninstall packages without breaking the system. Thus some packages are built with snap, some are appimages while the other are simple .tar.gz archives capable to be run from any location after extraction. Firmware analysis toolkit is built as a LXD container and not listed in the above table.
Unfortunately, not all packages could be built this way and had to be left out, like Wireshark. However wireshark can always be installed using apt.
If there is no network in AttifyOS, manually request an IP address as shown
sudo dhclient -v ens33
Vmware tools & VirtualBox guest additions are not preinstalled.
VirtualBox guest addition can be installed as
sudo add-apt-repository multiverse
sudo apt update
sudo apt install virtualbox-guest-utils virtualbox-guest-x11
sudo reboot
For VMware users, VMware tools can be installed as
sudo apt install open-vm-tools-desktop
In case the guest window doesn't scale even after installing the extensions, ensure that the screen size is not set to a fixed value in Monitor settings in the guest OS (AttifyOS).
For VMware follow these steps
For VirtualBox follow these: 1, 2
AttifyOS 4 comes with the snap packaged version of bluez. If hciconfig and related tools fails to work, remove the snap package of bluez by running apm remove bluez (which internally runs snap remove bluez) and then install the deb packaged bluez as sudo apt install bluez
