#1Tools for testing and securing Internet of Things (IoT) devices, protocols, and platforms.
Kitploit recommended
rosembergpro/cve-2024-48644Reolink Duo 2 WiFi v1.0.280 - Account Enumeration Vulnerability
aminetitrofine/cve-2022-4096This experiment is destinated to demonstrate how the DNS rebinding attack works on an emulated IoT. In the setup, we have a simulated IoT device,…
louisabricot/writeup-cve-2019-19194A writeup and theoretical Proof-of-Concept for CVE-2019-19194
shoucheng3/eclipse__hawkbit_cve-2020-27219_0-3-0m6Domain-independent back end for rolling out software updates to constrained edge devices, controllers, and gateways over IP-based infrastructure,…
dudux/routerfirmwaresA bunch of routers firmware images. Principally those that are not available and they do need to be extracted via JTAG, UART, desoldering flash or…
cappricio-securities/cve-2024-5947Deep Sea Electronics DSE855 - Authentication Bypass
dkstar11q/cve-2024-29269Exploit for CVE-2024-29269 enabling unauthenticated OS command execution on TLR-2005KSH routers, with ZoomEye and Leakix dork queries for target…
gabrielavls/cve-2017-7921CVE-2017-7921 exploit. Allows admin password retrieval and automatic snapshot download.
weedl/cve-2025-45620Disclosure of client-side authentication bypass in AVer camera web interface exposing unencrypted credentials via network traffic monitoring.
veereshgadige/aziot-cctv-cve-2025-50777CVE-2025-50777: Root Access and Plaintext Credential Exposure in AZIOT Smart CCTV
kristof-mattei/gardyn-hackCVE-2025-29628, CVE-2025-29629, CVE-2025-29630, CVE-2025-29631
corelight/boa-detectorA vulnerable Boa web server detector.
scorpion-security-labs/cve-2020-12124Proof-of-concept exploit for CVE-2020-12124 targeting Wavlink AC1200 router, demonstrating unauthenticated command injection and stack buffer…
nap3xd/cve-2023-33869-rce-pocRemote Code Execution (RCE) proof of concept on a enphase solar inverter
kaisersource/cve-2021-3166Proof-of-concept exploit for CVE-2021-3166 targeting ASUS DSL-N14U routers via malicious firmware upload, triggering a denial-of-service condition.
christopher-pace/cve-2023-51073Firmware Update Server Verification Vulnerability on Buffalo LS210D Version 1.78-0.03
skylightcyber/cve-2023-28810Exploit code for CVE-2023-28810
dopheide-esnet/zeek-jetdirectZeek package to detect exploitation attempts of CVE-2017-2741 targeting HP JetDirect printers via network traffic analysis.
