355 matches found
dronesploit
DroneSploit Easily pentest drones...
SymaX5SW-Rx-Tx
SymaX5SW Rx e Tx Ricerca condotta su un drone SYMA X5SW con tre obiettivi definiti. 1. Intercettare la telemetria del drone e visualizzarla in un'interfaccia grafica in tempo reale. 2. Creare un trasmettitore controllo comandi, utilizzando RF, moduli Arduino e codice C. 3. Intercettare lo stream...
skyjack
SkyJack SkyJack è un drone progettato per cercare autonomamente, hackerare e prendere il pieno controllo in modalità wireless di qualsiasi altro drone nel raggio d'azione wireless o di volo, creando un esercito di droni zombie sotto il tuo controllo. Aggiornamento: Proof of Concept di SkyJack per...
PX4-Autopilot
Der Autopilot-Stack, auf den die Branche baut. Über PX4 ist ein Open-Source-Autopilot-Stack für Drohnen und unbemannte Fahrzeuge. Er unterstützt Multikopter, Starrflügler, VTOL, Rover und viele weitere experimentelle Plattformen – von Rennquads bis zu industriellen Vermessungsflugzeugen. Er läuft...
Damn-Vulnerable-Drone
Damn Vulnerable Drone Il Damn Vulnerable Drone è un simulatore di hacking per droni intenzionalmente vulnerabile, basato sull'architettura popolare ArduPilot/MAVLink, che fornisce un ambiente realistico per l'hacking pratico dei droni. Indice Informazioni sul Damn Vulnerable Drone Cos'è il Damn...
sparrow-wifi
Sparrow-WiFi Sparrow-WiFi è uno strumento di consapevolezza spettrale WiFi e Bluetooth a 2.4 GHz e 5 GHz per Linux. Integra scansione WiFi, scoperta Bluetooth Low Energy e Classic, analisi spettrale tramite software-defined radio HackRF, Ubertooth, tracciamento GPS, rilevamento remoto FAA RemoteI...
DroneCamera
DroneCamera Um aplicativo Android para visualizar o fluxo de vídeo ao vivo de drones HASAKEE FPV. Construído por engenharia reversa do protocolo UDP proprietário usado pela câmera WiFi do drone. Drone Suportado Drone HASAKEE FPV SSID WiFi: HASAKEE-WiFi-XXXXX Câmera VGA usando o protocolo UDP 0x63...
CVE-2026-78321 DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion
The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...
EUVD-2026-64756
The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...
CVE-2026-78306 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution
DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...
CVE-2026-78255 DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media
The HTTP media server running on DJI drones serves stored photos and videos through the /v2 endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumerate valid filenames and exfiltrate stored...
CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory
DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...
CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory
DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...
CVE-2026-78251
DJI drones (15 models including Mavic 4 Pro, Air 3S, Mini 5 Pro, and others) expose an FTP service with hardcoded credentials shared across affected firmware versions. An attacker with access to the drone's internal network or USB RNDIS interface can upload unlimited files to /blackbox/upgrade/, ...
sparrow-wifi
Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...
skyjack
SkyJack SkyJack is a drone engineered to autonomously seek out, hack, and wirelessly take full control over any other drones within wireless or flying distance, creating an army of zombie drones under your control. Update: Proof of Concept of SkyJack for 3D Robotics drones using the TI CC1111...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: kubescape-operator-fips, argo-cd, kgateway, envoy-gateway, helm-push, zarf-fips, gatekeeper, headlamp, xeol, conftest-fips, helm-operator, linkerd2-fips, crossplane, ocm-kubernetes-controller-fips, kubescape-operator, redpanda-operator, kyverno-notation-aws, cloudbea...
Social media platforms crack down on drone factory recruiting game
A video game about drone warfare may look like an unusual cybersecurity story. But cybersecurity isn't only about malware or stolen passwords. Sometimes it's about understanding how online platforms are used to influence decisions, build trust, and persuade people to share personal information or...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: argo-cd, nemo, nerdctl, coder, prometheus-mongodb-exporter, flux, kubevela-fips, gitlab-workhorse-ce-fips, kube-conformance, omnictl-multiarch, zarf-fips, knative-kafka-broker-fips, skaffold, frankenphp-8.5, gatekeeper, etcd, prometheus-elasticsearch-exporter, traefi...
