skylift

SkyLift V0.4 Sera publié le 15 juin python3 click flux d'analyse CLI plus facile à utiliser correction de l'horodatage SkyLift V0.3 SkyLift est un dispositif de spoofing de géolocalisation à faible coût. Il utilise actuellement l'ESP8266 pour diffuser des trames de balise WiFi afin d'exploiter un...

esp_wifi_repeater

espwifirepeater एक पूर्ण कार्यशील WiFi NAT राउटर और अब एक WiFi रिपीटर यानी L2 ब्रिज भी NEW 2026: पहले रिलीज़ के 10 साल बाद यह आखिरकार वही बन गया है, जो इसे हमेशा होना था:एक सच्चा WiFi रिपीटर । मौजूदा डॉक्स और लिंक्स को तोड़ने से बचने के लिए, मानक संस्करण अभी भी सभी उन्नत सुविधाओं के साथ प्रसिद्ध...

esp32_esp8266_attacks

ESP32/ESP8266 वाई-फाई हमले यह रिपॉजिटरीASSET Research Group के शोध परिणाम का हिस्सा है। यह रिपॉजिटरी लोकप्रिय ESP32/8266 IoT उपकरणों के विरुद्ध 3 वाई-फाई हमलों का प्रदर्शन करती है: ज़ीरो PMK इंस्टॉलेशन CVE-2019-12587 - एंटरप्राइज नेटवर्क से जुड़े ESP32/ESP8266 क्लाइंट्स का अपहरण; ESP32/ESP8266 EA...

esp8266_deauther

ESP8266 Deauther WiFi उपकरणों को स्कैन करें, चयनित कनेक्शनों को ब्लॉक करें, दर्जनों नेटवर्क बनाएँ और WiFi स्कैनर्स को भ्रमित करें। नया दस्तावेज़ीकरण नमस्ते 👋 कृपया इस प्रोजेक्ट के बारे में जानकारी के लिए Deauther.com पर जाएँ। यहाँ कुछ त्वरित लिंक दिए गए हैं: खरीदें डाउनलोड DIY ट्यूटोरियल उपयोग FA...

EUVD-2020-3404

Malware in sbrugna...

EUVD-2019-4182

Malware in sbrugna...

EUVD-2024-0877

Malicious code in bioql PyPI...

CVE-2019-12588

The client 802.11 mac implementation in Espressif ESP8266NONOSSDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service crash via a crafted...

CVE-2020-11015

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

CVE-2024-27287 ESPHome vulnerable to stored Cross-site Scripting in edit configuration file API

ESPHome is a system to control your ESP8266/ESP32 for Home Automation systems. Starting in version 2023.12.9 and prior to version 2024.2.2, editing the configuration file API in dashboard component of ESPHome version 2023.12.9 command line installation and Home Assistant add-on serves unsanitized...

CVE-2024-27287

ESPHome’s CVE-2024-27287 affects the dashboard’s edit API in ESPHome 2023.12.9 up to 2024.2.1 (prior to 2024.2.2). A remote, authenticated user can inject arbitrary JavaScript via the /edit endpoint by posting to /edit?configuration=[file], storing unsanitized data in a page served with Content-T...

CVE-2024-27081

CVE-2024-27081 concerns ESPHome, where a security misconfiguration in the dashboard’s edit-configuration API (affecting the 2023.12.9 CLI installation) allowed authenticated remote attackers to read and write arbitrary files under the configuration directory, potentially yielding remote code exec...

CVE-2020-11015

CVE-2020-11015 affects the thinx-device-api IoT Device Management Server prior to firmware 2.5.0. The root issue allows a spoofed MAC address to bypass UDID checks during initial registration, potentially enabling creation of a new UDID with the same MAC address (noted to apply to ESP8266/ESP32 d...

CVE-2020-11015 Device Authentication Vulnerability in thinx-device-api IoT Device Management Server

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

PYSEC-2021-351

ESPHome is a system to control the ESP8266/ESP32. Anyone with webserver enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which webserver allows over-the-air OTA updates without checking user defined basic auth username & password. This issue is...

Default credentials

ESPHome is a system to control the ESP8266/ESP32. Anyone with webserver enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which webserver allows over-the-air OTA updates without checking user defined basic auth username & password. This issue is...

CVE-2020-12638

The CVE affects Espressif IoT SDKs: ESP-IDF up to 4.2, ESP8266_NONOS_SDK up to 3.0.3, and ESP8266_RTOS_SDK up to 3.3. A forged-beacon-frame exploit forces a device to switch its authentication mode to OPEN, effectively disabling 802.11 encryption. The underlying issue is an encryption bypass trig...

CVE-2020-11015

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

Design/Logic Flaw

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

Xmas Light Security Improves… a bit

We've looked at smart Xmas lights before; whilst they were vulnerable, there was no consequence to the hack other than making them flash in a different order! In 2018 we looked at the all-new Twinkly smart festive lights. We found a number of security issues, reported them to the vendor and to a...