HomePWN

HomePwn - Swiss Army Knife for Pentesting of IoT Devices root@kitploit: . | | \ \ | | \ / \ / / | /\ / / / \ | Y Y Y \ /| | \ / | \ || //||| /\ | //|| / / / / / ☠ HomePwn - IoT Pentesting & Ethical Hacking ☠ Created with ♥ by: 'Ideas Locas CDO Telefonica' HomePwn is a framework that...

core

Secluso Private DIY home security for Raspberry Pi, with encrypted remote access and a 5-minute software setup. Download Secluso Deploy • Build Your Own Guide • Security Model • Website Secluso is a private home security camera system for Raspberry Pi. Watch live video, get alerts, and open...

Pingpon-Exploit

PINGPON EXPLOIT Author: @037 Pingpon is a tool used to obtain thousands of vulnerable GPON home routers using Shodan.io to then execute any Linux command on using a remote code execution flaw CVE-2018-10562. DISCLAIMER I am NOT responsible for any damages caused or any crimes committed by using...

NoLongerEvil-Thermostat

Nest Thermostat Firmware Setup 🏆 FULU Bounty Winner 🏆 Hack House and this project are the official winners of the FULU Bounty for Nest Learning Thermostat Gen 1/2 Hardware Alternative: If you're interested in the hardware side of things, check out https://sett.homes for a drop-in PCB replacement...

FreeMDU

FreeMDU The FreeMDU project provides open hardware and software tools for communicating with Miele appliances via their optical diagnostic interface. It serves as a free and open alternative to the proprietary Miele Diagnostic Utility MDU software, which is only available to registered service...

espectre

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

CVE-2023-41898_Lab

CVE-2023-41898 未经验证的 Deep Link 实验室 这是一个基于 Home Assistant Companion for Android 的公开漏洞报告（GHSL-2023-142）以及漏洞版本 2023.8.2 的开源结构制作的教育性精简复现实验环境。 不会使用真实的 Home Assistant 服务器、账户或令牌，仅暴露名为 LABTOKENCVE202341898NOTREAL 的固定虚拟令牌。 漏洞概述 目标：Home Assistant Companion for Android 受影响版本：低于 2023.9.2（依据官方公告） 修复版本：2023.9....

IoT-Home-Guard

The first version of the hardware tool uses the Raspberry Pi as a development platform. Users need to log in to the Raspberry Pi to launch the software tool through ssh, and then connect the IoT device to be tested to the Raspberry Pi wifi. I am designing a second version, the user only needs to...

yolobox

root@kitploit: ██╗ ██╗ ██████╗ ██╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ╚██╗ ██╔╝██╔═══██╗██║ ██╔═══██╗██╔══██╗██╔═══██╗╚██╗██╔╝ ╚████╔╝ ██║ ██║██║ ██║ ██║██████╔╝██║ ██║ ╚███╔╝ ╚██╔╝ ██║ ██║██║ ██║ ██║██╔══██╗██║ ██║ ██╔██╗ ██║ ╚██████╔╝███████╗╚██████╔╝██████╔╝╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═════╝ ╚══════╝...

CVE-2026-64824-PoC

CVE-2026-64824 — Home Assistant Core 备份-恢复 符号链接路径遍历 → RCE CVSS 8.4（严重） · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 TL;DR 经过身份验证的（管理员）攻击者上传精心构造的备份 tar 包。恢复路径使用 filter="fullytrusted" 解压内部的 homeassistant.tar.gz，并且只校验成员的 名称 — 从不校验 SYMTYPE 的 链接名 。指向绝对路径（例如 Python 的 site-packages/）的符号链接会被保留，因此随后写入的...

AdGuardHome

为您和您的设备提供隐私保护中心 免费且开源，功能强大的全网广告与跟踪器拦截 DNS 服务器。 AdGuard.com | Wiki | Reddit | Twitter | Telegram AdGuard Home 是一款网络级广告拦截与跟踪防护软件。设置完成后，它将覆盖您家中所有设备，并且无需在设备上安装任何客户端软件。 它的运作方式是作为一个 DNS 服务器，将跟踪域名重新路由到“黑洞”，从而阻止您的设备连接到那些服务器。它基于我们用于公共 AdGuard DNS 服务器的软件，两者共享大量代码。 开始使用 自动安装（Linux/Unix/MacOS/FreeBSD/OpenBSD...

FalconGate

Falcongate An advanced cybersecurity platform to stop Malware, Ransomware, detect cyber attacks and more... Motivation Cyber attacks are on the raise and the cyber criminals are continuously improving their tactics and developing new tools and Malware to achieve their goals of breaching their...

ios11-cookie-set-expire-issue

Problema de Establecer/Caducar Cookies en iOS 11 Parece haber un problema intermitente con el establecimiento y la caducidad de cookies en las aplicaciones web de la pantalla de inicio de iOS 11. Se pueden observar dos comportamientos erróneos: Cuando se establece una cookie y luego se cierra y...

frigate

Frigate NVR™ - 一个具有实时目标检测的本地 NVR English | 简体中文 一个完整的本地网络视频录像机（NVR），专为Home Assistant设计，具备 AI 目标/物体检测功能。使用 OpenCV 和 TensorFlow 在本地为 IP 摄像头执行实时物体检测。 强烈推荐使用 GPU 或者 AI 加速器（例如Google Coral 加速器 或者 Hailo等）。它们的运行效率远远高于现在的顶级 CPU，并且功耗也极低。 通过自定义组件与 Home Assistant 紧密集成 设计上通过仅在必要时和必要地点寻找目标，最大限度地减少资源使用并最大化性能...

gardyn-hack

Summary In February 2025 I conducted security research on a Gardyn Home 4.0 device. During my research, I discovered multiple vulnerabilities and poor security practices. By leveraging these vulnerabilities an attacker may be able to gain system level access to a Gardyn device and use it to stage...

GPON-LOADER

GPON-LOADER Exploit loader for Remote Code Execution w/ Payload on GPON Home Gateway devices CVE-2018-10562 written in Python. Dependencies requests Usage root@kitploit: python gpon-loader.py...

publications

出版物 这是一个存放各类发布内容的家园，包括幻灯片/论文、概念验证、视频和工具。 如需博客文章，请参阅 elttam 博客；如需了解我们的服务，请访问我们的网站。 日期| 类型| 活动| 标题| 资源 ---|---|---|---|--- 2026| 安全公告| -| Home Assistant 经 FFmpeg 的认证后任意文件读取| ffmpeg-arbitrary-file-read-advisory.md 2026| 演讲| ACISP| 论进攻性安全的进攻性| slides 2026| 安全公告| -| Jupyter Enterprise Gateway 中的多个漏洞|...

Home Assistant HACS - Local File Inclusion

Home Assistant before 2021.1.3 lacks a protection layer against directory-traversal attacks in custom integrations, letting attackers access arbitrary files, exploit requires attacker to deploy malicious custom integration. id: CVE-2021-3152 info: name: Home Assistant HACS - Local File Inclusion...

ECT Home Page Products - Reflected XSS

ECT Home Page Products WordPress plugin through 1.9 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such as admin, exploit...