The vulnerability of the Aquarius L311 device driver for the Autora operating system, related to access control errors, allows a perpetrator to gain access to protected information and affect the system.

The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...

CVE-2025-1242

CVE-2025-1242: Exposure of Administrative IoT Hub Credentials Advisory Field| Value ---|--- CVE| CVE-2025-1242 ICSA| ICSA-26-055-03 CVSS 3.1| 9.1 Critical Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-798 Use of Hard-coded Credentials Researcher| Michael Groberman — Gr0m Published...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

seeker

Disponible en El concepto detrás de Seeker es simple: así como alojamos páginas de phishing para obtener credenciales, ¿por qué no alojar una página falsa que solicite tu ubicación como muchos sitios web populares basados en ubicación? Lee más en el blog de thewhiteh4t .Seeker aloja un sitio web...

internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

whoishere.py

whoishere.py WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request...

incriminator

Incriminator Incriminator es un proyecto de código abierto con fines educativos que te permite incriminar otros dispositivos durante un ciberdelito. El proyecto está ahora en la versión 1.0 Si encuentras un error, por favor, repórtalo. Gracias por descargar... SOLO CON FINES EDUCATIVOS!!!!!!! ¡No...

CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure

CVE-2020-35575-password-disclosure-issue-in-the-web-interface A password-disclosure issue in the web interface on certain TP-Link devices allows a remote malicious user to get full administrative access to the web panel. This affects WA901ND devices prior to 3.16.9201211 beta, and Archer C5, Arch...

BLESuite

BLESuite README Overview BLESuite is a python package to make Bluetooth Low Energy BLE device communication more user friendly and enables rapid BLE device testing. Version 2 of BLESuite removes the dependency on PyGattlib and BlueZ and instead uses a modified version of PyBT...

PQC-Scanner

The PQC Network Scanner is a purpose‑built assessment tool designed to help organisations understand their cryptographic exposure as they transition toward a post‑quantum security posture. Unlike traditional TLS scanners that focus solely on certificate validity or classical cryptographic strengt...

EUVD-2026-93109

In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously incrementing numproperties inside the loop. At iteration i, numproperties ha...

no-gdid

no-gdid Read, understand, and silence the Windows Global Device Identifier GDID — the hidden per-account device ID that helped the FBI locate a suspect who was using a VPN. ⚠️ Honest disclaimer up front: this tool does not erase your GDID and does not make you anonymous. The GDID lives on...

Pi-Zero-2W-Bad-USB

Raspberry Pi Zero 2 W BadUSB HID Toolkit A programmable BadUSB / HID attack platform built on a Raspberry Pi Zero 2 W. The Pi enumerates as a USB composite device keyboard plus an optional read-only mass-storage volume and executes Ducky-Script-style payloads against the host it's plugged into...

USBArmyKnife

🚀 USB Army Knife v2 is steeping — and its going to be a beast After two years of active development on v1, v2 is planned to turn the USB Army Knife into a full red-team platform in your pocket. A big announcement is coming this autumn but I still wanted to tease: Brand-new web UI — smaller, faste...

iPwn

iPwn Un framework diseñado para la explotación de dispositivos iOS. RECUERDA: EL IPHONE AL QUE INTENTAS ACCEDER CON ESTA HERRAMIENTA DEBE ESTAR HACKEADO JAILBROKEN Estado - ❌ Este proyecto aún está en desarrollo. Estoy agregando más extensiones y opciones para post-explotación con el fin de...

TokenTacticsV2

/ / / / / / / / | \ / / / / /// / \ / / / / / / / / | | / / / / / / / // / , / / / / / / // // / // // / / | |/ / / / // //||// // /,////// |/ TokenTactics v2 This is an updated version of TokenTactics originally written by Stephan Borosh @rvrsh3ll & Bobby Cooke @0xBoku. Azure JSON Web...

prey-android-client

Here you will find all the source code for the current and in development releases of the Prey client for Android devices. Prey is a SaaS platform for device tracking, monitoring, data protection, and device management. Its open-source agent runs on endpoints and connects to a centralized control...

TP-Link-WDR-Router-Command-injection_POC

This repository does not have a README...

Digital-Signature-Hijack

Secuestro de Firma Digital El secuestro de firmas digitales legítimas es una técnica que puede ser utilizada durante evaluaciones de red team para firmar código PowerShell y binarios. Esto podría ayudar a eludir las restricciones de Device Guard y mantenerse sigiloso en un compromiso...

FDD-book

Spanish Edition esES This directory contains the Spanish translation of the book FreeBSD Device Drivers: From First Steps to Kernel Mastery. The disclaimer below is provided first in English and then in Spanish so that readers coming from either language can evaluate the status of this translatio...