The reference open Z-Wave assessment suite (GNU Radio + Scapy-radio): ezstumbler does passive discovery and active network enumeration, ezrecon interrogates a device (manufacturer/model, firmware version, supported command classes, configuration), and ezfingerprint identifies the Z-Wave module generation via a PHY preamble-length manipulation. Default config drives two HackRF One SDRs. Python 2.7 / GNU Radio 3.7 era, dated but still the canonical exploitation toolkit.
The original AFITWiSec/EZ-Wave GitHub repository now returns 404; what remains is a copy under another account whose last commit is dated 2016-01-17. Its README requires Python 2.7 and GNU Radio 3.7+ and says it was tested on Ubuntu 14.04 only. Source · checked 2026-09-28