EmbedXPL-Forge Documentation Hub (en-US)

Version: 3.1.0 | Default documentation language: en-US

Portuguese version available at ../pt-BR/README.md.

Framework Architecture (v3.1.0)

Component Architecture

Audit and Exploitation Flow

What is new in v3.1.0

• 54 new modules across printers, embedded OS, ICS/OT, smart home, maritime IoT, and 2026 Pwn2Own chains
• Printer domain enabled (185+ printer modules now active)
• 7 automated quality gates via tools/phase_gate.py
• New CVEs: wolfSSL CVE-2026-5194 (CVSS 9.3), PAN-OS CVE-2026-0300 (CVSS 9.8), CUPS CVE-2026-34477/78/79/80 (CVSS 9.9), UR PolyScope5 CVE-2026-8153 (CVSS 9.8), Cisco IOS XE CVE-2025-20188 (CVSS 10.0), and 30+ more
• New vendors: EnGenius, Universal Robots, Metis Maritime, eNet SMART HOME, OpenRemote

Scope

This documentation set covers:

• installation and execution flows;
• interactive and non-interactive usage;
• expected inputs and outputs for common commands;
• module and protocol references;
• hardware and architecture guidance for audits.

Primary repository guides:

• Root README.md (en-US default);
• Root README.pt-BR.md (Portuguese translation);
• Wiki ../wiki/en-US/README.md and ../wiki/pt-BR/README.md.

Installation

PyPI

pip install embedxpl
embedxpl

Expected output:

EmbedXPL-Forge vX.Y.Z
exf >

Source

git clone https://github.com/mrhenrike/EmbedXPL-Forge.git
cd EmbedXPL-Forge
pip install -r requirements.txt
python exf.py

Expected output:

[*] Loading modules...
[+] Modules loaded: <count>
exf >

Interactive Usage

1) Discover modules

exf > search huawei

Expected output:

[+] Found <n> module(s)
...

2) Select module

exf > use exploits/routers/huawei/eg8145x6_info_disclosure

Expected output:

exf (EG8145X6 Info Disclosure) >

3) Show required options

exf (EG8145X6 Info Disclosure) > show options

Expected output:

Name    Current Value  Required  Description
target                 yes       Target IPv4/IPv6
port    80             no        HTTP port

4) Set inputs

exf (EG8145X6 Info Disclosure) > set target 192.168.18.1
exf (EG8145X6 Info Disclosure) > set port 80

5) Validate and execute

exf (EG8145X6 Info Disclosure) > check
exf (EG8145X6 Info Disclosure) > run

Expected output:

[+] Target appears vulnerable
[*] Collecting metadata...
[+] ProductName: ...

Non-Interactive Usage

Direct module execution

python -m embedxpl -m exploits/routers/huawei/eg8145x6_info_disclosure -s target 192.168.18.1 -s port 80

Expected output:

[*] Running module: exploits/routers/huawei/eg8145x6_info_disclosure
[+] ...

Discovery command

embedxpl -c "discover 192.168.1.0/24 --timing T3"

Expected output:

[*] Discovery started
[+] Hosts discovered: <n>
[+] Suggested modules: <n>

Input/Output Conventions

• Input values are configured using module options (set <name> <value>) or -s key value.
• check returns a pre-exploitation status:
  • positive: target likely matches exploit conditions;
  • negative: target not applicable, patched, or unreachable.
• run executes exploitation or scanner logic and prints findings.

Status markers:

• [*] runtime status;
• [+] positive finding or success;
• [-] negative result, blocked exploit path, or missing condition.

Documentation Map

Security and Legal Notes

• Use only in authorized environments.
• Validate legal authorization before scanning or exploitation.
• Follow disclosure and incident response procedures for findings.

License

See repository LICENSE file.