Router-Exploit-Shovel

Router Exploit Shovel Automated Application Generation for Stack Overflow Types on Wireless Routers Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the...

CVE-2022-30075

CVE-2022-30075 Authenticated Remote Code Execution in Tp-Link Routers Affected Devices If your Tp-Link router has backup and restore functionality and firmware is older than june 2022, it is probably vulnerable Tested With Tp-Link Archer AX50, other tplink routers may use different format of...

cve-2022-27255

CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow This repository contains the materials for the talk "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.", which was presented at DEFCON30. The contents of...

netgear-telenetenable

telnetenable.py by Paul Gebheim Modified to work with newer Netgear routers R7000, R7500 by insanid Translated from the C source available from http://wiki.openwrt.org/toh/netgear/telnet.console Running: python telnetenable.py IP - The IP of your Netgear device, usually 192.168.1.1 MAC - The mac...

LB-LINK Routers - Unauthenticated Command Injection

LB-LINK X-PRO 1.0.22-20231206 contains a hardcoded credentials vulnerability caused by manipulation of an unknown function in /etc/shadow, letting remote attackers use hardcoded credentials, exploit requires high complexity id: CVE-2026-19900 info: name: LB-LINK Routers - Unauthenticated Command...

WAVLINK WN579X3 - Remote Command Execution

Remote Command Execution vulnerability in WAVLINK WN579X3 routers via pingIp parameter in /cgi-bin/adm.cgi. id: CVE-2023-3380 info: name: WAVLINK WN579X3 - Remote Command Execution author: pussycat0x severity: critical description: | Remote Command Execution vulnerability in WAVLINK WN579X3 route...

Milesight Routers - Information Disclosure

A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...

NETGEAR - Authentication Bypass

NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers are vulnerable to authentication bypass vulnerabilities which could allow network-adjacent attackers to bypass authentication on affected installations. id:...

TOTOLINK Realtek SD Routers - Remote Command Injection

TOTOLINK Realtek SDK based routers may allow an authenticated attacker to execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI syscmd.htm is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0,...

CVE-2014-0160

CVE-2014-0160 Links https://github.com/DisK0nn3cT/MaltegoHeartbleed https://github.com/a0726h77/heartbleed-test https://github.com/musalbas/heartbleed-masstest https://github.com/decal/ssltest-stls https://github.com/isgroup-srl/openmagic https://github.com/offensive-python/HeartLeak Nmap nmap -s...

xmir-patcher

XMiR-Patcher Firmware patcher for Xiaomi routers Usage Windows Run run.bat Linux / Mac OS Install python 3.8+ and openssl Run run.sh Donations...

RomBuster

RomBuster RomBuster is a router exploitation tool that allows to disclosure network router admin password. Features Exploits vulnerabilities in most popular routers such as D-Link, Zyxel, TP-Link, Cisco and Huawei. Optimized to exploit multiple routers at one time from list. Simple CLI and API...

CVE-2025-34037

CVE-2025-34037 Python port of the Linksys tmUnblock.cgi RCE exploit For educational use only. Run against your own devices. Vulnerability The tmUnblock.cgi endpoint on several Linksys router models accept POST requests without validating the Authorization header. the ttcpip parameter is passed...

rpef

Router Post-Exploitation Framework Currently, the framework includes a number of firmware image modules: 'Verified' - This module is confirmed to work and is stable. 'Unverified' - This module is believed to work or should work with little additional effort, but awaits being tested on a physical...

ez-iRZ

ez-iRZ Exploit for CVE-2022-27226 Cross Site Request Forgery to Remote Code Execution in iRZ Mobile Routers Credits John Jackson Chris Mack --- https://github.com/0xHalcyon Stephen Chavez --- https://github.com/redragonx/ Robert Willis Description A CSRF issue on iRZ Mobile Routers through...

CVE-2019-16920-MassPwn3r

0day exploit for Multiple D-Link Routers Vulnerability was found in latest firmware of the following D-Link products: DIR-655 DIR-866L DIR-652 DHP-1565 Current Description Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue...

CVE-2023-48849

CVE-2023-48849 Ruijie EG Series Routers firmware =EG3.01B11P216 allows unauthenticated attackers to remotely execute arbitrary code due to incorrect filtering. $ python3 poc.py 192.168.1.1 'id' uid=0root gid=0root $ python3 poc.py 192.168.1.1 'grep TARGET /etc/openwrtrelease'...

Pingpon-Exploit

PINGPON EXPLOIT Author: @037 Pingpon is a tool used to obtain thousands of vulnerable GPON home routers using Shodan.io to then execute any Linux command on using a remote code execution flaw CVE-2018-10562. DISCLAIMER I am NOT responsible for any damages caused or any crimes committed by using...

TCP-32764

I WILL NOT MANUALLY UPDATE THIS REPOSITORY ANYMORE If you want to add a router in the list, please make a pull-request, also remember to USE THE POC and paste the result in your pull-request. Telnet clients and other solutions may not be relevant some false negative / positive reported. Some rand...

cve-2022-31898

cve-2022-31898 Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215 Usage ./cve-2022-31898.py -h usage: cve-2022-31898.py -h -R RHOST -P RPORT -L LHOST -l LPORT -p PWD -t options: -h, --help show this help message and exit -R RHOST, --rhost RHOST...