Exploitation Tools
routersploit tutorial
NOTICE: All the tutorials on this website are meant to help you find security vulnerabilties on your own network and devices to understand your security posture before black hats do. Penetration testing without a written consent is illegal and you can be prosecuted. Use these tutorials to secure your own networks or those whose permission you have been granted. Keep it ethical and keep it professional.
Table of Contents
routersploit introduction
RouterSploit is an open-source exploitation framework dedicated to embedded devices. It focuses on the security of routers and other embedded devices commonly found in networks. The primary purpose of RouterSploit is to identify and exploit vulnerabilities in these devices for security testing and penetration testing. It has a number of modules that can help your penetration testing operations.
- Exploits - These are modules that take advantage of identified vulnerabilities.
- Creds - These are modules that test credentials against network services.
- Scanners - These modules check if the target is vulnerable to some exploit.
- Generic - These are modules for more generic things.
- Payloads - These modules are responsible for generating payloads for various architectures and injection points.
installation of routersploit on Linux
The tool is available in Kali Linux sources so we can use the normal installation command as shown.
apt install routersploit -y
using routersploit
routersploit
Start routersploit using the command shown above.
searching using routersploit
As mentioned, routersploit has exploirts, creds, scanners and payloads. You can search for them generically. In this case I search "huawei".
search huawei
You can try searching for some device brand that has some embedded products, particularly routers and switches. For a more specific search, you can use some arguments as shown below.
search type=exploits device=routers vendor=cisco