routersploit README

The project's README from github.com/threat9/routersploit. As one markdown file: README.md.

RouterSploit - Exploitation Framework for Embedded Devices

Python 3.6 Build Status

Community

Join community on Embedded Exploitation Discord.

Description

The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices.

asciicast

It consists of various modules that aid penetration testing operations:

Installation

Requirements

Required:

Optional:

Installation on Kali Linux

apt-get install python3-pip
git clone https://www.github.com/threat9/routersploit
cd routersploit
python3 -m pip install -r requirements.txt
python3 rsf.py

Bluetooth Low Energy support:

apt-get install libglib2.0-dev
python3 -m pip install bluepy
python3 rsf.py

Installation on Ubuntu 20.04

sudo apt-get install git python3-pip
git clone https://github.com/threat9/routersploit
cd routersploit
python3 -m pip install -r requirements.txt
python3 rsf.py

Bluetooth Low Energy support:

sudo apt-get install libglib2.0-dev
python3 -m pip install bluepy
python3 rsf.py

Installation on Ubuntu 18.04 & 17.10

sudo add-apt-repository universe
sudo apt-get install git python3-pip
git clone https://www.github.com/threat9/routersploit
cd routersploit
python3 -m pip install setuptools
python3 -m pip install -r requirements.txt
python3 rsf.py

Bluetooth Low Energy support:

apt-get install libglib2.0-dev
python3 -m pip install bluepy
python3 rsf.py

Installation on OSX

git clone https://www.github.com/threat9/routersploit
cd routersploit
sudo python3 -m pip install -r requirements.txt
python3 rsf.py

Running on Docker

git clone https://www.github.com/threat9/routersploit
cd routersploit
docker compose up --build -d
docker attach routersploit

To run again without rebuild

docker start routersploit
docker attach routersploit

Update

Update RouterSploit Framework often. The project is under heavy development and new modules are shipped almost every day.

cd routersploit
git pull

Build your own

To our surprise, people started to fork routersploit not because they were interested in the security of embedded devices but simply because they want to leverage our interactive shell logic and build their tools using similar concept. All these years they must have said: "There must be a better way!" and they were completely right, the better way is called Riposte.

Riposte allows you to easily wrap your application inside a tailored interactive shell. Common chores regarding building REPLs was factored out and being taken care of so you can focus on specific domain logic of your application.

License

The RouterSploit Framework is under a BSD license. Please see LICENSE for more details.

Acknowledgments

routersploit (threat9/routersploit)

Searching Database…

13.3K ·GitHub
Routersploit
这是什么？RouterSploit 是一个开源的漏洞利用框架，专门用于测试路由器等嵌入式设备的安全性。
这是单一的漏洞利用工具，还是模块化框架？它是一个模块化框架，按模块类型组织：exploits 用于已知漏洞的利用，creds 用于测试凭据，scanners 用于检测漏洞是否存在，payloads 用于生成针对特定架构的载荷，此外还有通用攻击模块。
我该如何安装和运行 RouterSploit？按照 README 中针对 Kali Linux、Ubuntu 20.04、Ubuntu 18.04/17.10 或 OSX 的系统步骤操作，或者直接运行提供的 Docker 镜像，无需手动构建。
运行前需要先安装什么？它需要 Python 以及 requests、paramiko、pysnmp 和 pycrypto 库；可选的 bluepy 包可以为相关模块增加低功耗蓝牙支持。
它能在 Windows 上运行吗？README 只记录了在 Kali Linux、Ubuntu 和 OSX 上的安装方法，或通过 Docker 运行；文档中没有描述原生 Windows 的安装方式。
为什么有人要 fork routersploit，而不自己写一个工具？很多分支项目对路由器安全根本不感兴趣，他们想要的是 RouterSploit 的交互式命令行逻辑，这促使作者把这部分逻辑提取成一个独立的库。
Riposte 是什么？Riposte 是从 RouterSploit 中拆分出来的配套库，可以把任意应用包装成定制的交互式命令行界面，并处理常见的底层交互循环等基础工作，让你专注于自己的业务逻辑。
RouterSploit 能测试低功耗蓝牙设备吗？可以，安装可选的 bluepy 依赖后，相关模块即可支持低功耗蓝牙。
What are similar projects?masscan, fscan, bbot, nikto, thc-hydra, Claude-Red, evilginx2, ProxyBridge
Which topics is it in?bruteforce, credentials, scanner, router, infosec, exploit, network-security, iot, penetration-testing, embedded, bsd, security-tools
Creator
threat9
Size
1.9 MB
Stars
13.3K
Updated
CommitMay 05Releasev3.4.0Oct 17
Age
10y
Commits · 90 Days