https://github.com/reverse-shell/routersploit

Exploitation Framework for Embedded Devices
https://github.com/reverse-shell/routersploit

bruteforce creds dictionary-attack embedded exploits infosec python router router-exploitation-framework routersploit routersploit-framework scanner security

Last synced: 3 months ago
JSON representation

Exploitation Framework for Embedded Devices

• Host: GitHub
• URL: https://github.com/reverse-shell/routersploit
• Owner: threat9
• License: other
• Created: 2016-03-30T11:43:12.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2024-05-23T16:00:02.000Z (6 months ago)
• Last Synced: 2024-06-12T08:25:59.843Z (5 months ago)
• Topics: bruteforce, creds, dictionary-attack, embedded, exploits, infosec, python, router, router-exploitation-framework, routersploit, routersploit-framework, scanner, security
• Language: Python
• Homepage:
• Size: 1.8 MB
• Stars: 11,948
• Watchers: 620
• Forks: 2,309
• Open Issues: 79
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# RouterSploit - Exploitation Framework for Embedded Devices

[![Python 3.6](https://img.shields.io/badge/Python-3.6-yellow.svg)](http://www.python.org/download/)

[![Build Status](https://travis-ci.org/threat9/routersploit.svg?branch=master)](https://travis-ci.org/threat9/routersploit)

The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices.

[![asciicast](https://asciinema.org/a/180370.png)](https://asciinema.org/a/180370)

It consists of various modules that aid penetration testing operations:

* exploits - modules that take advantage of identified vulnerabilities

* creds - modules designed to test credentials against network services

* scanners - modules that check if a target is vulnerable to any exploit

* payloads - modules that are responsible for generating payloads for various architectures and injection points

* generic - modules that perform generic attacks 

# Installation

## Requirements

Required:

* future

* requests

* paramiko

* pysnmp

* pycrypto

Optional:

* bluepy - Bluetooth low energy 

## Installation on Kali Linux

```

apt-get install python3-pip

git clone https://www.github.com/threat9/routersploit

cd routersploit

python3 -m pip install -r requirements.txt

python3 rsf.py

```

Bluetooth Low Energy support:

```

apt-get install libglib2.0-dev

python3 -m pip install bluepy

python3 rsf.py

```

## Installation on Ubuntu 20.04

```

sudo apt-get install git python3-pip

git clone https://github.com/threat9/routersploit

cd routersploit

python3 -m pip install -r requirements.txt

python3 rsf.py

```

Bluetooth Low Energy support:

```

sudo apt-get install libglib2.0-dev

python3 -m pip install bluepy

python3 rsf.py

```

## Installation on Ubuntu 18.04 & 17.10

```

sudo add-apt-repository universe

sudo apt-get install git python3-pip

git clone https://www.github.com/threat9/routersploit

cd routersploit

python3 -m pip install setuptools

python3 -m pip install -r requirements.txt

python3 rsf.py

```

Bluetooth Low Energy support:

```

apt-get install libglib2.0-dev

python3 -m pip install bluepy

python3 rsf.py

```

## Installation on OSX

```

git clone https://www.github.com/threat9/routersploit

cd routersploit

sudo python3 -m pip install -r requirements.txt

python3 rsf.py

```

## Running on Docker

```

git clone https://www.github.com/threat9/routersploit

cd routersploit

docker build -t routersploit .

docker run -it --rm routersploit

```

# Update

Update RouterSploit Framework often. The project is under heavy development and new modules are shipped almost every day.

```

cd routersploit

git pull

```

# Build your own

To our surprise, people started to fork 

[routersploit](https://github.com/threat9/routersploit) not because they were 

interested in the security of embedded devices but simply because they want to 

leverage our interactive shell logic and build their tools using similar 

concept. All these years they must have said: _"There must be a better way!"_ 

and they were completely right, the better way is called 

[_Riposte_](https://github.com/fwkz/riposte).

[_Riposte_](https://github.com/fwkz/riposte) allows you to easily wrap your 

application inside a tailored interactive shell. Common chores regarding 

building REPLs was factored out and being taken care of so you can 

focus on specific domain logic of your application.

# License

The RouterSploit Framework is under a BSD license.

Please see [LICENSE](LICENSE) for more details.

# Acknowledgments

* [riposte](https://github.com/fwkz/riposte)