Tools

threat9/routersploit

Exploitation Framework for Embedded Devices

charles2gan/gda-android-reversing-tool

Native C++ Dalvik bytecode decompiler for APK/DEX/ODEX/OAT/JAR/AAR/CLASS files. Performs malicious behavior detection, privacy leak scanning,…

jtesta/ssh-audit

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

arthepsy/ssh-audit

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

matrixleons/evilwaf

Authorized WAF bypass proxy that rotates TCP/TLS/HTTP2 fingerprints, hunts origin IPs behind firewalls, and scans WAF defenses across 10 layers for…

4shadoww/hakkuframework

Modular penetration testing framework with 24 built-in modules for network attacks, information gathering, Wi-Fi auditing, password cracking, and…

4n4nk3/hikpwn

Passive and active scanner for Hikvision devices with ICSA-17-124-01 vulnerability detection and exploitation, enabling device enumeration and admin…

armissecurity/urgent11-detector

Network-based scanner that identifies devices running Interpeak IPnet TCP/IP stack to detect URGENT/11 vulnerabilities using TCP and ICMP…

fourtwizzy/cve-2019-0708-check-device-patch-status

PowerShell script to check if a remote device is patched against CVE-2019-0708 by verifying termdd.sys file version against Microsoft's May 2019…

cycraft-corp/cve-2019-7192-check

Checker for QNAP pre-auth root RCE (CVE-2019-7192 ~ CVE-2019-7195)

irgoncalves/f5-waf-enforce-sig-cve-2021-44228

This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device

m1tn1ck/mikrotik0dayscanner

Scanner for Mikrotik RouterOS 0day credential disclosure via Winbox interface. Exploits improper authentication on port 8291/TCP to download user…

anthophilee/a2sv--ssl-vul-scan

Automated SSL/TLS vulnerability scanner that detects Heartbleed, POODLE, FREAK, DROWN, and other known CVEs, with a simple command-line interface for…

cedric-martz/cve-2025-36911_scan

This script can be used to check if a Bluetooth device is vulnerable to CVE-2025-36911.

roeeh/conscryptchecker

This app verifies if your device is still vulnerable to CVE-2015-3825 / CVE-2015-3837, aka "One Class to Rule Them All", by checking if it contains…

ehabhussein/snmpvlan

SNMP scanner and brute-forcer targeting Cisco Nexus switches (5000/6000) to exploit CVE-2014-3341, enumerate VLANs, crack SNMP community strings, and…

nocoderrandom/sunsetscan

Local-network security auditing with EOL, CVE, device identity, and HTML reports

ap425q/whisper-pair

Scans Bluetooth Low Energy devices for Fast Pair vulnerabilities (CVE-2025-36911), testing if accessories accept unencrypted Key-Based Pairing…