| Protocol | KNXnet/IP |
|---|---|
| Name | KNXnet/IP |
| Aliases | KNX, KNX/IP, Konnex |
| Description | Protocol for home and building automation systems |
| Keywords | BMS, BAS, Building |
| Port(s) | 3671/udp |
| Access to specs | Free |
| Specifications | KNXnet/IP Specifications |
| Security features | Optional, Security extensions available |
| Nmap script(s) | knx-gateway-discover.nse, knx-gateway-info.nse |
| Wireshark dissector | packet-knxip.c |
| Scapy layer | knx.py |
| Related CVE | CVE-2015-8299, CVE-2021-37740, CVE-2023-4346, CVE-2024-4009, CVE-2024-4008 |
| Multicast address | 224.0.23.12 |
| Discovery | Search Request: Send on KNXnet/IP's multicast address to discover devices |
- knx.org - KNX official website
- (in)Security in Building Automation: How to Create Dark Buildings with Light Speed - Thomas Brandstetter @ Black Hat USA (2017)
- InSecurity in Building Automation - Thomas Brandsetter @ DEF CON 25 ICS Village (2017)
- Learn how to control every room at a luxury hotel remotely - Jesus Molina @ DEF CON 22 (2015)
- Learn How to Control Every Room at a Luxury Hotel Remotely - Jesus Nomeames @ Black Hat USA (2014)
- Pwning KNX & ZigBee Networks - HuiYu Wu, YuXiang Li & Yong Yang @ Hack In The Box (2018)
- Sneak into buildings with KNXnet/IP - Claire Vacherot @ DEF CON 29 (2021)
- An Overview of Wireless IoT Protocol Security in the Smart Home Domain - Stefan Marksteiner, Víctor Juan Expósito Jiménez, Heribert Vallant, Herwig Zeiner (2018)
- BOF - Testing framework for industrial protocols
- calimero - Lightweight KNX/IP framework in Java
- ETS - Engineering Tool Software for KNXnet/IP (ETS Demo is free)
- KNX Virtual - Windows-based application simulating a KNX installation
- knxd - KNXd service
- KNXmap - KNXnet/IP scanning and auditing tool
- Unpwning A Building - Peter Panholzer @ S4x22 (2022)
- XKNX - A KNX library written in Python