threat9/routersploit

★ 13,109PythonAudience · ops devopsComplexity · 3/5LicenseSetup · easy

Mindmap

mindmap
  root((RouterSploit))
    Module types
      Exploit modules
      Credential modules
      Scanner modules
      Payload modules
    Target devices
      Home routers
      Network switches
      Embedded hardware
    Setup
      Python and pip
      Docker option
    Related project
      Riposte shell lib

mindmap root((RouterSploit)) Module types Exploit modules Credential modules Scanner modules Payload modules Target devices Home routers Network switches Embedded hardware Setup Python and pip Docker option Related project Riposte shell lib

Click or tap to explore — scroll the page freely

Things people build with this

USE CASE 1

Test a home or enterprise router for known vulnerabilities using built-in exploit modules.

USE CASE 2

Check whether a network device is using default or weak passwords on SSH, Telnet, or its admin panel.

USE CASE 3

Scan a target device to discover which available exploits apply to it before running them.

USE CASE 4

Reuse the interactive shell structure (Riposte) as a foundation for your own command-line tool.

Tech stack

PythonDocker

Getting it running

Difficulty · easy Time to first run · 30min

Only run against devices you own or have written permission to test, unauthorized use is illegal.

Use freely for any purpose including commercial use, with attribution. (BSD license)

In plain English

RouterSploit is a Python framework designed for testing the security of embedded devices such as home routers, network switches, and similar hardware. It works similarly to general-purpose penetration testing frameworks but focuses specifically on the kinds of vulnerabilities and attack patterns found in consumer and enterprise networking equipment. The framework is built from modules, each designed for a specific task. Exploit modules target known vulnerabilities in specific router models and firmware versions. Credential modules test whether a device is using default or weak passwords on services like SSH, Telnet, or web admin panels. Scanner modules check a target device to see which of the available exploits might apply to it. Payload modules generate code that can be sent to a compromised device for various processor architectures. Generic modules cover broader attack categories that are not specific to any one device. The tool runs as an interactive command-line shell. You load a module, point it at a target IP address, and run it. The project is also used as a foundation for other tools: the README notes that many people forked RouterSploit not for its security content but simply to reuse its interactive shell structure, which is now published separately as a library called Riposte. Installation is straightforward on Linux and macOS. You clone the repository and install a few Python dependencies with pip. There is also a Docker option for those who prefer a contained environment. Optional Bluetooth Low Energy support can be added with an extra library for testing wirelessly connected embedded devices. The framework is under active development, with new modules added frequently. It is licensed under the BSD license.

Copy-paste prompts

Prompt 1

Using RouterSploit, how do I run the scanner modules to find which exploits apply to a router at this IP: [IP address]

Prompt 2

Show me how to load and run a RouterSploit credential module to test whether a router still has its default SSH password.

Prompt 3

How do I use RouterSploit's payload modules to generate code for a MIPS router after exploiting it?

Prompt 4

List the RouterSploit modules for Netgear routers and walk me through running one against a test device.

Open on GitHub → Explain another repo

← threat9 on gitmyhub — every repo by this author, as a profile.

Verify against the repo before relying on details.