skyjack

SkyJack SkyJack is a drone engineered to autonomously seek out, hack, and wirelessly take full control over any other drones within wireless or flying distance, creating an army of zombie drones under your control. Update: Proof of Concept of SkyJack for 3D Robotics drones using the TI CC1111...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

Damn-Vulnerable-Drone

Damn Vulnerable Drone The Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking. Table of Contents About the Damn Vulnerable Drone What is the Damn Vulnerable...

dronesploit

DroneSploit Easily pentest drones...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi は、Linux 向けの 2.4 GHz および 5 GHz の WiFi および Bluetooth スペクトル認識ツールです。これは、WiFi スキャン、Bluetooth Low Energy および Classic の発見、ソフトウェア定義無線スペクトル分析 HackRF, Ubertooth、GPS 追跡、FAA RemoteID ドローン検出、ドローン/ローバー搭載のリモート操作、および Elasticsearch または OpenSearch への ECS 8.17 インデックス作成を単一のプラットフォームに統合します。完全...

SymaX5SW-Rx-Tx

SymaX5SW Rx and Tx Research carried out on a SYMA X5SW Drone with three defined objectives. 1. Intercept the telemetry of the Drone and display it in a graphical interface in real-time. 2. Create a transmitter command control, using RF, Arduino modules and C code. 3. Intercept the video stream of...

skyjack

SkyJack SkyJack 是一款自主搜寻、入侵并无线完全控制其他无人机的工程无人机，无论这些无人机在无线范围还是飞行范围内，都能将其变成受你控制的僵尸无人机大军。 更新： SkyJack for 3D Robotics 无人机 概念验证，使用 TI CC1111 芯片组 2015年8月 该更新使用 sub-GHz 射频收发器来预测 3DR 遥测模块的跳频模式与 ID，实现对附近无人机的完全远程接管，与 Parrot 攻击类似（无需 Wi-Fi）。 作者 @SamyKamkar // [email protected] // http://samy.pl //...

infected-drones

受感染的无人机 无人机到地面控制站的攻击向量、漏洞与利用 如今的无人机机群通常是由一名操作员从单一地面站操控数十或数百架无人机。这使得地面控制站成为对手的宝贵目标。飞行员通常位于此处，这里往往存储任务数据，并且是横向移动至 UxS 网络及机群中其他无人机的首要途径。 大多数无人机安全研究都聚焦于攻击无人机本身。受感染的无人机研究采取了另一种方法，重点揭示单架被攻陷的无人机如何攻击与其连接的地面站。由于大多数地面控制软件信任无人机发送的任何内容，缺乏身份验证、校验和清理，使得来自被攻陷无人机的数据可能导致操作员机器上的文件增删改查、代码执行或崩溃。 负责任的使用...

DroneCamera

DroneCamera An Android app for viewing the live video stream from HASAKEE FPV drones. Built by reverse engineering the proprietary UDP protocol used by the drone's WiFi camera. Supported Drone HASAKEE FPV Drone WiFi SSID: HASAKEE-WiFi-XXXXX VGA camera using the 0x6363 UDP protocol Drone IP:...

PX4-Autopilot

业界构建所依赖的自动驾驶仪堆栈。 关于 PX4 是一款面向无人机和无人载具的开源自动驾驶仪堆栈。它支持多旋翼、固定翼、垂直起降（VTOL）、地面车辆，以及从竞速穿越机到工业勘测飞机等众多实验性平台。它运行于 NuttX、Linux 和 macOS 之上。采用 BSD 3-Clause 许可证。 为什么选择 PX4 模块化架构。 PX4 围绕 uORB 构建，这是一种兼容 DDS 的发布/订阅中间件。各模块完全并行化且线程安全。您可以构建自定义配置，并裁剪掉不需要的部分。 广泛的硬件支持。 PX4 可在多种 自动驾驶仪板卡 上运行，并通过 Pixhawk...

CVE-2021-44320

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., video streaming and control by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding...

CVE-2026-78321 DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion

The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...

EUVD-2026-64756

The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...

CVE-2026-78306 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...

CVE-2026-78255 DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media

The HTTP media server running on DJI drones serves stored photos and videos through the /v2 endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumerate valid filenames and exfiltrate stored...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251

DJI drones (15 models including Mavic 4 Pro, Air 3S, Mini 5 Pro, and others) expose an FTP service with hardcoded credentials shared across affected firmware versions. An attacker with access to the drone's internal network or USB RNDIS interface can upload unlimited files to /blackbox/upgrade/, ...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: gatekeeper, kubescape-server-fips, cert-manager-cmctl-fips, drone, helm-operator-fips, k9s, gitness, helm-set-status, opentofu-fips, kube-mgmt, headlamp-fips, envoy-gateway-fips, helm-exporter-fips, ocm-kubernetes-controller, oras-fips, cloudbeat,...

Social media platforms crack down on drone factory recruiting game

A video game about drone warfare may look like an unusual cybersecurity story. But cybersecurity isn't only about malware or stolen passwords. Sometimes it's about understanding how online platforms are used to influence decisions, build trust, and persuade people to share personal information or...