embark

EMBArk - The firmware security scanning environment About EMBArk is a tool for centralized firmware analyzing. Scan, Identify, Track, Report. Built to be simple but powerful. It's the web-based enterprise interface for the firmware security scanner EMBA. It is developed to provide the firmware...

renode

Renode Copyright c 2010-2026 Antmicro What is Renode? Renode was created by Antmicro as a virtual development tool for multi-node embedded networks both wired and wireless and is intended to enable a scalable workflow for creating effective, tested and secure IoT systems. With Renode, developing,...

openqore

openqore an open-source toolkit to patch, modify, and enhance the firmware of soundcore q-series headphones, with future support for other models planned. note: this project is my personal journey into the world of hardware reverse-engineering and embedded systems. it was created by a teenager an...

vmlinux-to-elf

vmlinux-to-elf 该工具可以从 vmlinux/vmlinuz/bzImage/zImage 内核映像（无论是原始二进制数据块，还是已存在但剥离了符号的 .ELF 文件）生成一个完全可分析的 .ELF 文件，并恢复其中的函数与变量符号。 为此，它会扫描内核中的内核符号表（kallsyms）——这是一种几乎存在于每个内核中、且基本保持原样的压缩符号表。 由于该符号表原本经过压缩，它应当能够恢复原始二进制文件中不可见的字符串。 它会生成一个 .ELF 文件，你可以使用 IDA Pro 和 Ghidra 对其进行分析。因此，该工具对嵌入式系统的逆向工程非常有用。 用法：...

vulns-2026-fatfs-chance

ELM FatFs Vulnerability Research This repository documents six confirmed security vulnerabilities in FatFs along with a test harness, fuzzer, and standalone exploit disk-image generator. The original FatFs source code can be found in the FatFs-R0.16 directory. This project is a return to a securi...

wolfssl

MQX向けビルド方法 概要 このMakefileはwolfSSLライブラリーとサンプルプログラムをMQX向けにビルドするためのものです。 以下のターゲットを含んでいます。 wolfssllib: wolfSSL静的ライブラリー test: 暗号アルゴリズムのテスト benchmark: 暗号アルゴリズムのベンチマーク client: TLS クライアントサンプルプログラム server: TLS サーバサンプルプログラム 準備 事前にGCCをインストールしておいてください。 GNU Arm Embedded Toolchain, https://developer.arm.com...

tinyos-rtos

TinyOS — Ultra-Lightweight RTOS for IoT An ultra-lightweight real-time operating system for resource-constrained IoT and embedded devices. Kernel footprint under 10 KB, 2 KB minimum RAM, preemptive priority-based scheduling. Features Category| Details ---|--- Kernel| Preemptive priority-based...

renode

Renode Copyright c 2010-2026 Antmicro Renodeとは？ Renodeは、マルチノード組み込みネットワーク（有線・無線両方）向けの仮想開発ツールとしてAntmicroによって作成され、効果的でテスト済みかつセキュアなIoTシステムを構築するためのスケーラブルなワークフローを実現することを目的としています。 Renodeを使用すれば、IoTデバイス向けの未改変ソフトウェアの開発、テスト、デバッグ、シミュレーションを、高速でコスト効率が高く信頼性のある方法で行えます。 サポートされているアーキテクチャは以下の通りです。 ARMv7およびARMv8...

zephyr

ElasticSearch index map examples This directory contains ElasticSearch data store index map examples for use by uploadtestresultses.py script for Twister JSON reports upload. An index map file allows to create destination index files on ElasticSearch server with explicit scheme having all require...

CVE-2021-21401_nanopb-c_AOSP10_R33

Nanopb - Protocol Buffers for Embedded Systems Nanopb is a small code-size Protocol Buffers implementation in ansi C. It is especially suitable for use in microcontrollers, but fits any memory restricted system. Homepage: https://jpa.kapsi.fi/nanopb/ Documentation: https://jpa.kapsi.fi/nanopb/doc...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

gdbfuzz

GDBFuzz: Fuzzing Guiado por Depurador Este es el código complementario del artículo: 'Fuzzing de Sistemas Embebidos usando Interfaces de Depurador'. Una preimpresión del artículo se puede encontrar aquí https://publications.cispa.saarland/3950/. El código permite a los usuarios reproducir y...

IoT-PT-v1

🛠️ IoT-PT OS v1 Sistema Operativo de Pruebas de Penetración en Internet de las Cosas - Versión 1 📦 ¿Qué es IoT-PT OS v1? IoT-PT OS v1 es una máquina virtual de pruebas de penetración diseñada específicamente para evaluaciones de seguridad en IoT. Incluye herramientas, scripts y entornos...

ufuzz

UFuzz, or Universal Plug and Fuzz, is an automatic UPnP fuzzing tool. It will enumerate all UPnP endpoints on the network, find the available services and fuzz them. It also has the capability to fuzz HTTP using Burp proxy logs. It is designed to fuzz embedded systems, and as such, is only single...

CVE-2026-38752 vulnerabilities

Vulnerabilities for packages: busybox...

MINI-P4WM-4RC2-VQ56

Bulletin has no description...

EulerOS 2.0 SP12 : busybox (EulerOS-SA-2026-2581)

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BusyBox wget thru 1.3.7 accepted raw CR 0x0D/LF 0x0A and other C0 control bytes in the HTTP request- target path/query, allowing the request line...

BusyBox: BusyBox: Arbitrary Code Execution via DHCPv6 Client Heap Buffer Overflow

A flaw was found in BusyBox. A heap buffer overflow vulnerability exists in the Dynamic Host Configuration Protocol version 6 DHCPv6 client, specifically within the optiontoenv function. Network-adjacent attackers can exploit this by sending a crafted DHCPv6 response containing a malformed...

Exploit for CVE-2026-8836

CVE-2026-8836 — lwIP SNMPv3 Stack Overflow PoC Proof of conce...

Key Encapsulation Mechanism-Based Integrated Encryption Scheme (KEM-IES)

The Elliptic Curve Integrated Encryption Scheme ECIES is widely regarded as a practical method and has been adopted by multiple standards. However, the advancement of quantum computing technologies poses potential security risks to ECIES. Therefore, this study proposes a Key Encapsulation...