#1Tools for testing and securing Internet of Things (IoT) devices, protocols, and platforms.
Kitploit recommended
9lyph/cve-2022-29593Proof-of-concept exploit for authentication bypass via capture-replay in Dingtian DT-R002 relay, allowing unauthorized control of relays through HTTP…
0xbinder/cve-2021-4045🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras (<= v1.1.16 Build 211209)" 🔓
veygax/horizonstackCVE-2026-43499 for the Meta Quest
fans0n-fan/treck20-relatedPoC for CVE-2020-11896 Treck TCP/IP stack and device asset investigation
haniwa0x01/cve-2022-30023Authenticated command injection exploit for Tenda HG9 routers. Provides interactive remote shell access via Python script for penetration testing and…
thegaminggallifreyan/liberationplay-cve-2025-24132-airbourne-pocPOC for CVE-2025-24132 (AirBourne). Currently just triggers the overflow and causes a crash
nonamecoder/cve-2023-22906Proof of Concept for CVE-2023-22906
itres-labs/cve-2025-31702Repository with tools, exploits, and material associated with the analysis and discovery process of CVE-2025-31702 and other related security issues.
spy0x7/cve-2021-33044Dahua IPC/VTH/VTO devices auth bypass exploit
nccgroup/thingernet-graphPython script to generate neo4j Cypher representation of a collection of IoT devices for visualisation and query.
istaarkk/cve-2025-65817Here is the CVE-2025-65817
wyl-cmd/cve-2017-7921-research-toolkit用于借助FOFA快速测试海康威视的CVE-2017-7921漏洞，并且给出登陆账号和密码，并输出json文件。
cplusplus17/deco-filepush-disclosureDisclosure and PoC for a root file read/write flaw in the TP-Link Deco XE75 Pro V3 debug channel (tmpsvr opcodes 0xC456/0xF0), with CVSS analysis and…
0alex1010/freekoMake the miko robot a free one
interceptsuite/interceptsuiteMITM proxy for TCP/TLS/DTLS/UDP traffic, with STARTTLS, IoT, Thick Client and more.
feedbeef/dji_ble_vulnDJI Drone DUML Command Injection over Bluetooth — Proof of Concept for CVE-2026-78306
seifallahhomrani1/cve-2023-0861-pocAnalyzing and Reproducing the Command Injection Vulnerability (CVE-2023-0861) in NetModule Routers
zzz66686/cve-2017-14263Proof-of-concept exploit for CVE-2017-14263 in Honeywell NVR devices. Demonstrates session hijacking and privilege escalation from guest to admin via…
