124 matches found
embark
EMBArk - The firmware security scanning environment About EMBArk is a tool for centralized firmware analyzing. Scan, Identify, Track, Report. Built to be simple but powerful. It's the web-based enterprise interface for the firmware security scanner EMBA. It is developed to provide the firmware...
bluffs
BLUFFS Introduction This repository contains code related to BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. Paper abstract Bluetooth is a pervasive technology for wireless communication. Billions of devices use it in sensitive applications and to exchange private data. The...
Firmware-analysis
Questo repository non contiene un README...
DSL-2750U-Full-chain
análise de firmware 1. DSL-2750U Bugs : má configuração do servidor tftp CVE-2021-3707 vulnerabilidade de injeção de comandos CVE-2021-3708...
binwalk
Binwalk Binwalk é uma ferramenta rápida e fácil de usar para analisar, fazer engenharia reversa e extrair imagens de firmware. Aviso de EOL Este fork nasceu para corrigir alguns problemas pendentes do binwalk v2 e, de modo geral, para mantê-lo em bom estado. Ele cumpriu seu propósito, ajudando...
uefi_retool
uefiretool A tool for UEFI firmware reverse engineering. UEFI firmware analysis with uefiretool script Usage: Copy idaplugin/uefianalyser.py script and idaplugin/uefianalyser directory to IDA plugins directory Edit config.json file PEDIR is a directory that contains all executable images from the...
uefi_retool
uefiretool Uno strumento per il reverse engineering del firmware UEFI. Analisi del firmware UEFI con lo script uefiretool Utilizzo: Copia lo script idaplugin/uefianalyser.py e la directory idaplugin/uefianalyser nella directory dei plugin di IDA Modifica il file config.json PEDIR è una directory...
IoT-PT-v1
🛠️ IoT-PT OS v1 Sistema Operativo per Test di Penetrazione IoT - Versione 1 📦 Cos'è IoT-PT OS v1? IoT-PT OS v1 è una macchina virtuale per test di penetrazione progettata specificamente per valutazioni di sicurezza IoT. Include strumenti, script e ambienti preconfigurati per l'analisi del firmware...
IoT-Vulnerability-Research-Public
Pesquisa em Segurança de Hardware e Vulnerabilidades Este repositório serve como um arquivo público centralizado para minha pesquisa independente de vulnerabilidades, auditorias de hardware e Divulgações Coordenadas de Vulnerabilidades CVD. Todos os scripts de prova de conceito, extrações de...
ofrak
OFRAK OFRAK Open Firmware Reverse Analysis Konsole è una piattaforma di analisi e modifica binaria. OFRAK combina la capacità di: Identificare e Decomprimere molti formati binari Analizzare binari decompressi con strumenti di reverse engineering collaudati Modificare e Ricompattare binari con...
unblob
unblob Suite di estrazione accurata, veloce e facile da usare per blob binari. unblob analizza blob binari sconosciuti per oltre 78 formati di archivi, compressione e filesystem , estrae il loro contenuto in modo ricorsivo e recupera i chunk sconosciuti. È il compagno perfetto per estrarre,...
chipsec
CHIPSEC: Framework di Valutazione della Sicurezza della Piattaforma CHIPSEC è un framework per analizzare la sicurezza delle piattaforme PC inclusi hardware, firmware di sistema BIOS/UEFI e componenti della piattaforma. Include una suite di test di sicurezza, strumenti per accedere a varie...
CVE-2026-12001
A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through...
CVE-2026-7786 Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials
Jinan USR IOT Technology Limited PUSR USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services...
USR-W610 信任管理问题漏洞
USR-W610 is an industrial-grade serial-to-Wi-Fi networking module developed by USR. The USR-W610 has a trust management vulnerability, which stems from the inclusion of plaintext management credentials in the firmware. This vulnerability could allow credentials to be extracted through firmware...
Exploit for Code Injection in Iptime N104S-R1_Firmware
CVE-2025-55423 — ipTIME UPnP Command Injection: Analysis & Rep...
CVE-2025-1242
The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicio...
CVE-2025-1242
The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicio...
PT-2026-4753
Name of the Vulnerable Software and Affected Versions Access Manager 92xx hardware revision K7 affected versions not specified Description The Access Manager 92xx hardware revision K7 utilizes a Linux-based operating system, differing from older revisions that used Windows CE. An SSH service is...