Command Injection 1 Black-Box MQTT Pentesting: Attacking a Real-World Agricultural IoT Deployment Apr 5, 2026