Individual skill

embedded-router-firmware-audit

Comprehensive security auditing methodology for embedded routers, CPE gateways, and IoT firmware images. Aligned with OWASP IoT Security Testing Guide (ISTG) and the 9-stage Firmware Security Testing Methodology (FSTM). Covers filesystem extraction, hardcoded secret mining, dangerous daemon checks, and web management console assessment.

skills/security/embedded-router-firmware-audit/SKILL.md

Read pinned source

Source commit 961a0dd3d2d2f66a07a416ade3b1d4473b64802e

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: Yes
Repository scan complete: No
Skill scan complete: No
Observed behavior: Network or broad shell
Last checked: Nov 10, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 1,013
Repository last updated: Nov 5, 2026
License: Apache-2.0

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

ai-agent Repository topic
appsec Repository topic
bug-bounty Repository topic
cybersecurity Repository topic
devsecops Repository topic
exploit-validation Repository topic
hermes-agent Repository topic
infosec Repository topic
llm-security Repository topic
nuclei Repository topic
security Derived category
testing Derived category
security-application Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 4,492 bytes
SKILL.mdcore · 4,492 bytes
SKILL.mdcore · 4,492 bytes
references/fstm-checklist.mddoc · 2,620 bytes

Read excerpt


# Embedded Router & Firmware Security Auditing Playbook

## 1. Overview & Framework Alignment
Embedded network equipment (SOHO routers, wireless access points, fiber CPE gateways) often run embedded Linux environments with legacy busybox utilities, customized CGI web servers, and third-party vendor SDKs.

This playbook synthesizes the **OWASP IoT Security Testing Guide (ISTG)** and the industry-standard **Firmware Security Testing Methodology (FSTM)** into a systematic, repeatable audit lifecycle.

---

## 2. The 9-Stage FSTM Audit Process

```text
[Stage 1: Info Gathering] ──> [Stage 2: Firmware Acquisition] ──> [Stage 3: Binary Inspection]
                                                                        │