#1Tools for testing and securing Internet of Things (IoT) devices, protocols, and platforms.
Kitploit recommended
otsmr/blackbox-fuzzingFuzzing IoT Devices Using the Router TL-WR902AC as Example
hacefresko/cve-2021-4045Exploit for command injection vulnerability found in uhttpd binary from TP-Link Tapo c200 IP camera
cisc0-gif/kitt-litePython-Based Pentesting CLI Tool
jrdw0/cve-2017-7921-expHikvision camera CVE-2017-7921-EXP
expliot_framework/expliotEXPLIoT - Internet of Things Security Testing and Exploitation framework
arthastang/router-exploit-shovelAutomated Application Generation for Stack Overflow Types on Wireless Routers
mrhenrike/embedxpl-forgeEmbedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…
himitsushell/himitsushellshell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing
0ldev/politicianModern WiFi auditing library for ESP32 using advanced 802.11 techniques. Captures WPA/WPA2/WPA3 handshakes via PMKID extraction and CSA injection…
sadfud/exploitsReal world and CTFs exploiting web/binary POCs.
ofabel/mp-flipperPython support for Flipper Zero
nishantjoshi00/flipper-templateZig development template for Flipper Zero with automated build pipeline, SDK integration, and cross-compilation for ARM Cortex-M4. Supports Sub-GHz,…
yeet-src/usbsnoopLive, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no…
electroniccats/catsniffer-firmwareFirmware repository for CatSniffer, a multi-protocol IoT security research board supporting BLE, Zigbee, Sub-1 GHz, and more, with version-specific…
netsecfish/dlinkProof-of-concept exploit and analysis for command injection and hardcoded backdoor credentials in D-Link NAS devices, enabling unauthenticated remote…
xchwarze/wifi-pineapple-cloner-buildsBuild repo from Universal Wifi pineapple hardware cloner
praetorian-inc/caeruleusSingle Go binary for Bluetooth Low Energy security testing on Linux/BlueZ: scan, enumerate GATT, read/write/notify, fuzz characteristics, and run…
