mrhenrike/embedxpl-forge

EmbedXPL-Forge is a security testing toolkit built for professionals who audit routers, IP cameras, printers, network storage boxes, VPN appliances, and other embedded or edge devices for weaknesses. Instead of writing custom scripts for every device brand, a security tester can point this framework at a target and run one of its many built in modules to check for known problems. The project ships with thousands of modules covering credential testing (trying default or weak logins on services like FTP, SSH, and Telnet), known vulnerability exploitation mapped to over 700 published CVEs, network scanning, and payload generation for many processor types. It also includes a dedicated engine for testing RTSP based security cameras, a large collection of printer specific checks across major printer brands, and modules for industrial control systems such as PLCs and factory equipment protocols. A separate engine lets testers replay attack patterns associated with known nation state hacking groups, mapped to the MITRE ATT&CK framework used across the security industry. The tool covers well over a hundred device vendors, from home router makers to enterprise firewall vendors to camera and printer manufacturers, and keeps per vendor lists of default passwords to speed up testing. It also keeps a history of past scans per device so a tester can resume work without starting over. Installation is straightforward through Python's package manager: pip install embedxpl, then run the embedxpl command to open an interactive shell, or run a specific module directly from the command line. An optional add on installs custom scripts for the popular Nmap scanning tool. The project can also be installed from source for those who want to inspect or modify the code directly. This is written in Python and is aimed squarely at security researchers and penetration testers rather than general developers, since using it requires permission to test the target devices and some background in how these device types work.