doggie_workshop

EvilDoggie 工作坊汽车模拟器 项目介绍 欢迎来到 EvilDoggie 工作坊汽车模拟器仓库！该工具模拟了 Black Hat Arsenal 2025 会议上使用的汽车 CAN 总线环境。该模拟器由 Faraday Security 开发，可模拟车辆中的多个电子控制单元（ECU），使研究人员能够在受控环境中使用 EvilDoggie 练习攻击性 CAN 总线攻击。 该模拟器支持串口和 SocketCAN 接口，能够与 Doggie 硬件无缝集成，用于嗅探、注入和操纵 CAN 消息。它专为汽车安全领域的教育目的而设计，重点关注 VIN...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: 简要概述 ::. Evilgrade 是一个模块化框架，允许用户利用糟糕的升级实现，通过注入虚假更新来获利。 它附带预构建的二进制文件（代理）、用于快速渗透测试的默认配置，并拥有自己的 WebServer 和 DNSServer 模块。 易于设置新配置，并且在设置新二进制代理时具有自动配置功能。 什么时候应该使用 evilgrade？ 当攻击者能够进行主机名重定向（操纵受害者的 DNS...

ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

OESA-2026-2802 rubygem-faraday security update

HTTP/REST API client library Security Fixes: Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Prior to 2.14.1, Faraday's buildexclusiveurl method in lib/faraday/connection.rb uses Ruby's URImerge to combine the connection's base URL with a...

CVE-2026-33637

creationtimestamp| type| source ---|---|--- 2026-05-18 12:45:09+00:00| published-proof-of-concept| https://github.com/lostisland/faraday/security/advisories/GHSA-5rv5-xj5j-3484...

EmploLeaks - Finding Leaked Employees Info for the Win

Developed by Faraday security researchers, this cutting-edge tool utilizes the power of OpenSource Intelligence techniques. EmploLeaks extracts valuable insights by scouring various platforms, to compile a comprehensive list of employees associated with a given company and cross-reference these...