USB Spy

USB SPY usb-spy 는 WiFi 또는 Ethernet 지원 마이크로컨트롤러를 기반으로 구축된 USB 대용량 저장소 트래픽 분석기입니다. 이 보드는 디스크 이미지FAT 또는 모든 파일시스템를 대상 시스템에 가짜 USB 대용량 저장소 장치로 노출하며, 실제 저장 데이터는 WiFi 또는 Ethernet을 통해 원격 서버에서 제공됩니다. 이러한 구성 덕분에 usb-spy는 대상 시스템이 수행하는 모든 블록 접근을 가로채고 분석할 수 있습니다. 단순한 원시 블록 수준 추적 외에도 usb-spy는 파일시스템을 이해하고 각 접근된...

AutoGadgetFS

이더리움 기부 : 0xA919e40ddB0563918dDc174320D91992e0048477 목차 1. AutoGadgetFS란 무엇인가? 2. 요구사항 3. 설정 a. 기기 테스트 전용 b. 중간에 최소 agfs 설정 c. 디버깅 지원을 포함한 완전한 중간 agfs 설정 4. USB 기기 클래스 지원 5. 기능 6. 로드맵 7. 설치 a. Linux b. Raspberry Pi Zero with WIFI 8. AutogadgetFS 튜토리얼 9. 스크린샷 10. Youtube 재생목록 11. Slack 12. 지원 13. ...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: HID: bigbenff: prevent null pointer dereference When emulating the device through UHID, there is a possibility that we do not have output reports, and as a result, reportfield is set to null...

umap2

Umap2 Umap2는 NCC Group의 Python 기반 USB 호스트 보안 평가 도구의 두 번째 개정판입니다. 이 개정판에는 첫 번째 개정판에서 지원되었던 모든 기능이 포함됩니다: umap2emulate - USB 디바이스 에뮬레이션 umap2scan - 디바이스 지원을 위한 USB 호스트 스캔 umap2detect - USB 호스트 OS 감지 아직 구현되지 않음 umap2fuzz - USB 호스트 퍼징 이 개정판에는 몇 가지 추가 기능이 포함됩니다: USB 호스트 퍼징은 퍼징 엔진으로 kitty를 사용합니다...

CVE-2026-82563

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

CVE-2026-82563

CVE-2026-82563 affects the Softish C6 Ear Camera and the EarVision Android Application . The vulnerability is an authentication bypass by spoofing : an attacker can impersonate the camera device, placing themselves in a man-in-the-middle or device-emulation position. This enables manipulation of ...

EUVD-2026-75053

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

PT-2026-89077

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

CVE-2026-82563: Authentication Bypass by Spoofing

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

UBUNTU-CVE-2025-40265

In the Linux kernel, the following vulnerability has been resolved: vfat: fix missing sbminblocksize return value checks When emulating an nvme device on qemu with both logicalblocksize and physicalblocksize set to 8 KiB, but without format, a kernel panic was triggered during the early boot stag...

PT-2025-42546

Name of the Vulnerable Software and Affected Versions BitVisor versions commit 108df6 2020-05-20 through commit 480907 2025-07-06 Description A flaw exists in the VirtIO network device emulation within the software. This issue allows a local attacker to trigger a denial of service, potentially...

advisories

Security Advisories - CVE-2025-61553./CVE-202...

EUVD-2019-15184

Malware in sbrugna...

EUVD-2021-27146

Malware in sbrugna...

EUVD-2021-9213

Malicious code in bioql PyPI...

Introducing DataTrap: A Smarter, More Adaptive Honeypot Framework

Today, we're excited to release DataTrap, a powerful, extensible honeypot system built to simulate realistic web applications, IoT devices, and database behavior across HTTP, HTTPS, SSH, and database protocols e.g., MySQL. What sets DataTrap apart? It goes beyond static honeypots by combining...

Vasion Print 安全漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. Vasion Print has a security vulnerability that stems from a device emulation issue...

Azure Linux 3.0 Security Update: qemu / qemu-kvm (CVE-2022-2962)

The version of qemu / qemu-kvm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2962 advisory. - A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes t...

CVE-2024-3447

A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both "s-datacount" and the size of "s-fifobuffer" are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in ...

CVE-2024-3447: Heap-based Buffer Overflow

A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both s-datacount and the size of s-fifobuffer are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a...