
SirepRAT
Remote Command Execution as SYSTEM on Windows IoT Core (releases available for Python2.7 & Python3)
command-and-controlexploitationiot-security+4
388

Remote Command Execution as SYSTEM on Windows IoT Core (releases available for Python2.7 & Python3)

Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit.

🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras (<= v1.1.16 Build 211209)" 🔓

D-Link NAS Command Execution Exploit

CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03)

TP-Link Tapo c200 ver <1.1.15 - Remote Code Execution (RCE)

This script exploits a remote command execution vulnerability in the TPLink WR840N router, using the configure function IPv6 protocol.