Categories: Exploitation Tools

RouterSploit – Exploitation Framework for Embedded devices

The RouterSploit Framework is an open-source exploitation framework devoted to embedded devices. It includes various modules that aid penetration testing operations:

exploits – modules that take advantage of identified vulnerabilities
creds – modules designed to test credentials against network services
scanners – modules that check if a target is vulnerable to any exploit

Requirements

gnureadline (OSX only)
requests
paramiko
beautifulsoup4
pysnmp

Installation

root@kali:~# apt-get install routersploit

Usage Exploits

The routersploit is a similar tool to Metasploit, very easy to create more modules. Anyone can extend the tool easily with the help of exploit databases.

To get the code skeleton.

Also Read p0f – Passive Traffic Analysis OS Fingerprinting and Forensics Penetration Testing Tool.

It is a critical vulnerability that allows an attacker to take remote control of a router connected to the Internet and it can be fixed only by hardware vendors.

root@kali:~# routersploit rsf > use exploits/multi/misfortune_cookie rsf (Misfortune Cookie) > show options

Scanner

Scanner Quickly checks the target is vulnerable to any exploit, here we are to use autopwn scanners for all vulnerabilities.

rsf use scanner/autopwn rsf (Autopwn) > show options rsf (Autopwn) > set target IP rsf (Autopwn) > run

CREDS

RouterSploit has various creds modules that can brute force various services, including HTTP, SSH, and Telnet.

Services supported:

ftp
ssh
telnet
http basic auth
http digest auth
http form auth
snmp

As like every brute force tool you should prepare a wordlist, every service has two modules for reference (ftp_bruteforce,ftp_default)

ftp_default as the name indicates will check for default credentials and the process will be completed in minutes.

ftp_bruteforce does a dictionary account over single or multiple user accounts with credentials provided in the list.

You can find the video Tutorial on the GitHub page.

Author: Reverse Shell Security
License: BSD-3-clause

Also, Read

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Next Stealthy SMS Side-Channel Attack Exposes SMS Recipient Location »

Previous « Over 100K+ Compromised ChatGPT Accounts on Dark Web Marketplaces

View Comments

Kyle Stafford says:

May 31, 2017 at 7:00 pm

I appreciate the article as it lays out the setup guide very nicely. Is the autopwn scanner passive? I would like to attempt to passively determine if the device is prone to the vulnerability rather than exploiting it.