ledger-app-monero-1.42-vuln

CVE-2020-6861: استخراج مفتاح الإنفاق من تطبيق Ledger Monero مستودع إثبات المفهوم PoC للمقال: https://deadcode.me/blog/2020/04/25/Ledger-Monero-app-spend-key-extraction.html...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Variante 2 de Spectre CVE-2017-5715 — Recherche sur les vulnérabilités matérielles Un document de recherche approfondi et une preuve de concept PoC pratique explorant les attaques par exécution spéculative sur les CPU modernes. 📖 Aperçu Ce projet est une exploration de recherche et en...

cryptohackfirm

Cryptohack A semi-secure, hacker-friendly hardware crypto wallet on the hip-badge ESP32-C3 platform with the onboard ATECC608B secure element. Signs transactions for BTC , ETH + 8 EVM chains, SOL , and XMR with an on-device SIGN screen the user has to approve before any private key touches the...

CVE-2021-31630

CVE-2021-31630 CVE encountered while hacking HTB machines; the exploit-db exploit had some errors, so here are manual exploitation methods and an exploit. Script Usage Command execution with no output root@kitploit: python exp.py -u http://127.0.0.1:8080 -l openplc -p openplc -c "whoami" Manual...

chipsec v2.0.8

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – Débordement de tampon du descripteur USB du portefeuille matériel Code du programme simulation de firmware C root@kitploit: // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 //...

OpenPLC-CVE-2021-31630-RCE

OpenPLC v3 Authenticated RCE CVE-2021-31630 هذا هو استغلال Proof-of-Concept حديث ومتوافق مع بايثون 3.13+ لثغرة CVE-2021-31630، وهي ثغرة في OpenPLC v3 تسمح لمستخدم مُصادَق عليه برفع طبقة عتاد مخصصة تحتوي على كود خبيث، مما يؤدي إلى تنفيذ أوامر عن بُعد RCE على المضيف. الاكتشاف الأصلي للثغرة والنشرة...

CVE-2022-42475

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

Node.JS System Information Library <5.3.1 - Remote Command Injection

Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...

awesome-connected-things-sec — Updated!

🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS...

x86-JTAG-Information

معلومات x86 JTAG نظرة عامة عتاد التصحيح Intel Applied Microsystems CodeTAP ASSET InterTech American Arium ECM-6 ECM-S2 ECM-20 TRC-20 ECM-50 ECM-700 revA5 ECM-XDP ECM-XDP3 revB2 ECM-XDP3e ECM-CCC ASSET InterTech International Test Technologies µMaster MicroMaster ASSET InterTech PCT اختبار يتم...

Linux Distros Unpatched Vulnerability : CVE-2026-80641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 wifi: wlcore: Add support for IGTK ke...

hardware-compliance-handbook

Base de connaissances sur la conformité matérielle Une référence ouverte et vérifiée sur les lois de l'UE qui régissent la cybersécurité du matériel et de l'IoT — CRA, RED, NIS2 et la loi sur la cybersécurité/EUCC, réunis en un seul endroit plutôt que quatre. Préparé par Platanor Technologies...

TamperingSyscalls

TamperingSyscalls TamperingSyscalls هو مشروع جديد من جزأين يتكون من انتحال الوسائط argument spoofing واسترجاع استدعاءات النظام syscall retrieval، وكلاهما يسيء استخدام معالج الاستثناءات EH من أجل خداع حلول EDRs. يجمع هذا المشروع بين هذين المشروعين لتوفير حل بديل لاستدعاءات النظام المباشرة. العبث...

Bus_Pirate

لا يحتوي هذا المستودع على ملف README...

fil-c

Fil-C 0.684 Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil-C panics. Fil-C achieves this using a combination of concurrent garbage collection and...

awesome-connected-things-sec

🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS...

USBvalve

!NOTE USBvalve Version 1.0.0 A complete rewrite of the application has been done: moved away from Arduino IDE environment, now the code is written for the Pi Pico SDK dependencies on external libraries have been reduced a lot USB host support for Low Speed devices is now more robust ATTiny85,...

CVE-2021-31630-OpenPLC-3-Authenticated-RCE

CVE-2021-31630 OpenPLC 3 WebServer Authentifizierte Remotecodeausführung. Beschreibung Das Vorhandensein von Command Injection im Open PLC Webserver v3 ermöglicht es entfernten Angreifern, beliebigen Code auszuführen, indem sie die Komponente „Hardware Layer Code Box" ausnutzen, die auf der Seite...

swsim

swSIM Il progetto deve essere clonato in modo ricorsivo. Scaricare il file ZIP non è sufficiente. swSIM è una scheda SIM completamente software. È il primo simulatore di scheda SIM disponibile pubblicamente per quanto ne so che non dipende da alcun hardware SIM per funzionare. Ambito Un simulator...