# RouterSploit — Exploitation Framework for Embedded Devices

> Open-source security testing framework written in Python that targets embedded devices such as routers, cameras, and IoT hardware. Provides modules for exploit testing, credential checks, and payload generation.

## Install

Save as a script file and run:

# RouterSploit — Exploitation Framework for Embedded Devices

## Quick Use
```bash
pip install routersploit
rsf
# Inside the console:
use exploits/routers/dlink/dir_300_600_rce
set target 192.168.1.1
run
```

## Introduction
RouterSploit is an open-source exploitation framework written in Python, designed specifically for security testing of embedded devices. It follows a modular architecture similar to Metasploit but focuses on routers, access points, IP cameras, and other network-connected hardware.

## What RouterSploit Does
- Provides exploit modules targeting known vulnerabilities in consumer and enterprise routers
- Runs credential-testing scanners to detect default or weak login passwords on network devices
- Generates payloads for reverse shells and bind shells on embedded Linux targets
- Includes generic exploit modules for common vulnerability classes like command injection and buffer overflows
- Supports a Metasploit-style interactive console for intuitive module selection and parameter configuration

## Architecture Overview
RouterSploit is built as a Python package with a plugin-based module system. The core engine loads exploit, scanner, credential, and payload modules from a directory tree. Each module is a Python class inheriting from a base exploit class, exposing standardised ``run`` and ``check`` methods. The interactive console (rsf) wraps readline for tab completion and session management.

## Self-Hosting & Configuration
- Install via pip: ``pip install routersploit`` or clone the GitHub repository
- Requires Python 3.6+ with dependencies like requests and paramiko
- No server component needed; runs entirely from the command line
- Module database updates ship with new releases or can be added manually
- Extend by dropping custom Python exploit modules into the modules directory

## Key Features
- Purpose-built for embedded and IoT device security testing
- Modular design lets researchers add new exploits without modifying core code
- Credential scanner tests default passwords across dozens of device vendors
- Scanner modules detect remotely exploitable services on target networks
- Lightweight and portable, runs on any system with Python installed

## Comparison with Similar Tools
- **Metasploit** — general-purpose exploitation framework; RouterSploit focuses on embedded targets
- **Nmap** — network scanner for discovery; RouterSploit goes further with active exploitation
- **Shodan** — passive search engine for internet-connected devices; RouterSploit performs active testing
- **Medusa / Hydra** — brute-force login tools; RouterSploit bundles credential testing with exploits

## FAQ
**Q: Is RouterSploit legal to use?**
A: It is designed for authorised security testing. Use it only on networks and devices you own or have explicit permission to test.

**Q: Does it support custom exploits?**
A: Yes. Create a Python module following the base exploit class interface and place it in the modules directory.

**Q: Which device vendors are covered?**
A: Modules exist for D-Link, Netgear, TP-Link, Cisco, Huawei, ZTE, and many others.

**Q: How is it different from Metasploit?**
A: RouterSploit is Python-based, lightweight, and specifically targets embedded device firmware vulnerabilities rather than general-purpose OS exploits.

## Sources
- https://github.com/threat9/routersploit
- https://github.com/threat9/routersploit/wiki

---
Source: https://tokrepo.com/en/workflows/asset-c4668ada
Author: Script Depot