Desarrollo de una herramienta de software para el análisis de vulnerabilidades en dispositivos IoT en Ecuador.

Abstract

This technical report presents the development of a software tool for the analysis of vulnerabilities in IoT devices in Ecuador. The project is developed in order to perform a vulnerability analysis about IPv4 addresses and ports in devices connected to the Internet, through the tool the search for IPv4 addresses that are within the range of the Ecuadorian territory is carried out, the ports are observed possible to be active or open on each IPv4 address.

The tool is divided into 2 parts, the first is the creation of the IPv4 address search script, which is developed entirely in Python, a multiplatform programming language with clean and versatile code that also has a number of libraries that can be used. They are continuously updating, on the other hand the development of the Web System allows to visualize, search and detail the IPv4 addresses has been developed using Flask which is a microframework developed in Python and that allows working with the MODEL, VIEW, CNTROLLER (MVC) pattern.

The results obtained during the IPv4 address search process have been satisfactory, finding information such as: webcams, Apache servers, web pages and even requesting credentials to access the configuration of a router, with these results it is reflected that the level of Computer security in Ecuador is at a low level. It is taken into account that in Pichincha and Guayas, being the two largest provinces in Ecuador, they have the highest number of IPv4 addresses with active ports.