The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

firmadyne

Table of Contents Table of Contents Introduction Setup Extractor Database Binaries QEMU Usage FAQ run.sh is not generated Log ends with "Kernel panic - not syncing: No working init found" A process crashed, e.g. dopagefault 2: sending SIGSEGV for invalid read access from 00000000 How do I debug t...

tamago

TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors AMD64, ARM, ARM64, RISCV64. The projects spaw...

firmware

🦈 Bruce Bruce is a versatile ESP32 firmware packed with offensive-security tools, built to make Red Team operations fast and portable. It also supports M5Stack, LILYGO , RockBase IoT and Elecrow products, and works great with the Cardputer, Sticks, M5Cores, T-Decks and T-Embeds. ⚡ Get Our Officia...

firmware-mod-kit

Disclaimer Automatically exported from code.google.com/p/firmware-mod-kit Firmware Modification Kit This kit is a collection of scripts and utilities to extract and rebuild linux based firmware images. root@kitploit: Extract a firmware image into its component parts User makes desired modificatio...

ret-sync

ret-sync ret-sync stands for Reverse-Engineering Tools SYNChronization. It is a set of plugins that help to synchronize a debugging session WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg with a disassembler IDA/Ghidra/Binary Ninja. The underlying idea is simple: take the best from both worlds static and...

openqore

openqore an open-source toolkit to patch, modify, and enhance the firmware of soundcore q-series headphones, with future support for other models planned. note: this project is my personal journey into the world of hardware reverse-engineering and embedded systems. it was created by a teenager an...

zclaw

zclaw The smallest possible AI personal assistant for ESP32. zclaw is written in C and runs on ESP32 boards with a strict all-in firmware budget target of = 888 KiB on the default build. It supports scheduled tasks, GPIO control, persistent memory, and custom tool composition through natural...

Sweet-Pineapple-Builder

Sweet WiFi Pineapple Tetra Builder Sweet Pineapple Builder is a python script that automate the whole process of creating a custom WiFi Pineapple Tetra image. As the WiFi Pineapple Tetra firmware is a custom version of OpenWrt 19.07.2, it is therefore possible to create our own custom firmware...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...

dcsgonefirm

dcsgonefirm Notes As this repo is still being worked on, some things in this Readme are marked with 'Dev:'. Feel free to change this if needed. Building this You need ESP-IDF, any modern version should work. Dev: Change this if you require a more specific version Command-line: root@kitploit: idf....

ch55x_firmware_extractor

CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...

esp8266_deauther

ESP8266 Deauther Scan for WiFi devices, block selected connections, create dozens of networks and confuse WiFi scanners. New Documentation Hi 👋 Please visit Deauther.com for information about this project. Here are some quick links: Buy Download DIY Tutorial Usage FAQ Password The password for...

CVE-2020-29669

=============== Macally WIFISD2-2A82 Writeup for CVE-2020-29669 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== This is a writeup of exploiting the Macally WIFISD2-2A82 Travel Router Firmware version: 2.000.010. The Guest user is able to reset its own password...

Galdralag-firmware

Galdr — Galdralag Firmware Open Invention Network This project is registered with theOpen Invention Network OIN. OIN is a defensive patent pool: members cross-license Linux-related patents so participants can ship and use open-source software with reduced patent exposure. Status: Waiting for:...

EmbedOS

EmbedOS EmbedOS - Embedded security testing operating system based on Ubuntu 18.04 preloaded with firmware security testing tools. The virtual machine can be downloaded and imported as an OVF file into VirtualBox or VMWare. Download Link The most recent version is 2020.2 from October 2020 and can...

binwalk

Binwalk v3 This is an updated version of the Binwalk firmware analysis tool, re-written in Rust for speed and accuracy. What does it do? Binwalk can identify, and optionally extract, files and data that have been embedded inside of other files. While its primary focus is firmware analysis, it...

efiXplorer

efiXplorer - IDA plugin and loader for UEFI firmware analysis and reverse engineering automation Documentation Plugin wiki Loader wiki Build instructions and installation Publications efiXplorer: Hunting for UEFI Firmware Vulnerabilities at Scale with Automated Static Analysis Static...

DCS932L-Emulation-CVE-2024-37606-Attack

Make Emulating Easy Again Welcome! This repository provides tools and an environment to emulate the D-Link DCS-932L firmware and demonstrate the CVE-2024-37606 vulnerability. It includes pre-patched binaries and necessary libraries, simplifying the emulation setup so you don't need to perform...

VAXD

VAXD VAXD is a lightweight Windows disassembler, PE inspection tool, MultiCPU binary inspection tool, and patch-assistance environment. It is designed for fast analysis of executable files, firmware images, binaries, Office documents, PDF files, and Windows PE EXE/DLL files. VAXD provides a...