esp8266_deauther

ESP8266 Deauther 扫描WiFi设备、阻止选定的连接、创建数十个网络并迷惑WiFi扫描器。 新文档 你好 👋 请访问 Deauther.com 了解此项目的更多信息。 以下是一些快速链接： 购买 下载 DIY 教程 使用说明 常见问题 密码 pwned 的密码是 deauther 关于本项目 此固件可让您轻松执行各种操作，以使用 ESP8266 测试 802.11 网络。它也是一个学习 WiFi、微控制器、Arduino、黑客技术以及电子/编程等知识的绝佳项目。 去认证攻击是主要功能，可用于将设备从其 WiFi 网络中断开。...

esp32_esp8266_attacks

ESP32/ESP8266 Wi-Fi 攻击 本仓库是ASSET 研究组 的研究成果的一部分。 本仓库演示了针对流行的 ESP32/8266 IoT 设备的 3 种 Wi-Fi 攻击： Zero PMK 安装 CVE-2019-12587 - 劫持连接到企业网络的 ESP32/ESP8266 客户端； ESP32/ESP8266 EAP 客户端崩溃 CVE-2019-12586 - 使连接到企业网络的 ESP 设备崩溃； ESP8266 信标帧崩溃 CVE-2019-12588 - 使 ESP8266 Wi-Fi 设备崩溃。...

esp_wifi_repeater

espwifirepeater 一个功能完整的 WiFi NAT 路由器（现在也成为了 WiFi 中继器，即 L2 桥接） 2026 年新特性： 在首次发布 10 年后，它终于成为了它一直想要成为的东西：一个真正的 WiFi 中继器 。为了不破坏现有的文档和链接，标准版仍然保留众所周知的 NAT 路由器版本，并包含所有高级功能。但如果你感兴趣的是一个精简的真正 L2 桥接，请看下面的 ESP8266 WiFi Repeater - L2 bridge 章节。 这是在 esp8266 和 esp8285 上实现的 WiFi NAT 路由器。它还包含对带有 ACL...

skylift

SkyLift V0.4 将于 6 月 15 日发布 python3 click 更易用的 CLI 解析器工作流程 修复时间戳 SkyLift V0.3 SkyLift 是一款低成本的地理位置欺骗设备。它目前使用 ESP8266 广播 WiFi 信标帧，以利用 WiFi 地理位置服务中一个存在已久（2008 年）的漏洞。 这是 SkyLift 的第三个原型版本，在与 Akademie Schloss Solitude 和 ZKM 合作的网络驻留项目期间进一步开发。阅读关于该项目的访谈。或者按照下面的说明，用不到 5 美元自己制作一个。 更新 2017年5月13日：新增来自 John...

EUVD-2020-3404

Malware in sbrugna...

EUVD-2019-4182

Malware in sbrugna...

EUVD-2024-0877

Malicious code in bioql PyPI...

CVE-2019-12588

The client 802.11 mac implementation in Espressif ESP8266NONOSSDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service crash via a crafted...

CVE-2020-11015

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

CVE-2024-27287 ESPHome vulnerable to stored Cross-site Scripting in edit configuration file API

ESPHome is a system to control your ESP8266/ESP32 for Home Automation systems. Starting in version 2023.12.9 and prior to version 2024.2.2, editing the configuration file API in dashboard component of ESPHome version 2023.12.9 command line installation and Home Assistant add-on serves unsanitized...

CVE-2024-27287

ESPHome’s CVE-2024-27287 affects the dashboard’s edit API in ESPHome 2023.12.9 up to 2024.2.1 (prior to 2024.2.2). A remote, authenticated user can inject arbitrary JavaScript via the /edit endpoint by posting to /edit?configuration=[file], storing unsanitized data in a page served with Content-T...

CVE-2024-27081

CVE-2024-27081 concerns ESPHome, where a security misconfiguration in the dashboard’s edit-configuration API (affecting the 2023.12.9 CLI installation) allowed authenticated remote attackers to read and write arbitrary files under the configuration directory, potentially yielding remote code exec...

CVE-2020-11015

CVE-2020-11015 affects the thinx-device-api IoT Device Management Server prior to firmware 2.5.0. The root issue allows a spoofed MAC address to bypass UDID checks during initial registration, potentially enabling creation of a new UDID with the same MAC address (noted to apply to ESP8266/ESP32 d...

CVE-2020-11015 Device Authentication Vulnerability in thinx-device-api IoT Device Management Server

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

PYSEC-2021-351

ESPHome is a system to control the ESP8266/ESP32. Anyone with webserver enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which webserver allows over-the-air OTA updates without checking user defined basic auth username & password. This issue is...

Default credentials

ESPHome is a system to control the ESP8266/ESP32. Anyone with webserver enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which webserver allows over-the-air OTA updates without checking user defined basic auth username & password. This issue is...

CVE-2020-12638

The CVE affects Espressif IoT SDKs: ESP-IDF up to 4.2, ESP8266_NONOS_SDK up to 3.0.3, and ESP8266_RTOS_SDK up to 3.3. A forged-beacon-frame exploit forces a device to switch its authentication mode to OPEN, effectively disabling 802.11 encryption. The underlying issue is an encryption bypass trig...

CVE-2020-11015

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

Design/Logic Flaw

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

Xmas Light Security Improves… a bit

We've looked at smart Xmas lights before; whilst they were vulnerable, there was no consequence to the hack other than making them flash in a different order! In 2018 we looked at the all-new Twinkly smart festive lights. We found a number of security issues, reported them to the vendor and to a...