Exploitation Tools

routersploit

routersploit is Metasploit’s shape, pointed at embedded gear. Routers, IP cameras, and other IoT devices are notorious for default credentials, unpatched firmware, and command-injection flaws, and RouterSploit collects exploits, credential checks, and scanners for exactly that world into a familiar console. Its scanners/autopwn module is the headline feature: point it at a device and it tries every applicable check to tell you what the device is vulnerable to.

Installed from the AUR; Security → Exploitation Tools → routersploit. Because it’s an interactive framework — running it is the useful action — Oniomarchy launches you straight into its console (rsf) rather than printing a help flag.

Using it

RouterSploit’s console mirrors Metasploit’s, so the muscle memory carries over:

rsf > use scanners/autopwn
rsf (AutoPwn) > set target 10.0.0.1
rsf (AutoPwn) > run

rsf > use exploits/routers/dlink/dir_300_600_rce
rsf (D-Link DIR-300 & DIR-600 RCE) > set target 10.0.0.1
rsf (...) > check
rsf (...) > run

The module tree is organized as exploits/, scanners/, creds/ (credential attacks), and payloads/. Start with scanners/autopwn to fingerprint what a device is exposed to, then load the specific exploit it points you at.