IOT-ZIGBEE-KEYCredential Access

Zigbee Network Key Extraction

Sniff the initial network-key broadcast (kept in plaintext on first join) — gain full network access to the smart-home estate.

§ Where this technique fits

IOT-ZIGBEE-KEY is catalogued under the Credential Access tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 3 on average.

§ Dossiers chaining this technique

Zigbee network key sniff → smart-home control
Sniff a fresh device-join with an Atmel RZRAVEN — Zigbee broadcasts the network key in plaintext during pairing. Decrypt all subsequent traffic + send commands.
step 3 / 5

§ What commonly comes next

01
Network Sniffing
T1040 · Credential Access
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Zigbee network key sniff → smart-home control

§ What commonly comes next