Penetration_Testing_POC

PenetrationTestingPOC Collect and share POCs, scripts, tools, articles, and other techniques used in penetration testing, as a note. Contributions welcome. Please note that all tools may have backdoors or other anomalous behavior; it is recommended to operate in a virtual environment...

uberscan

uberscan Security program for pen-testing servers, routers and IoT devices btw my bitcoin address is 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Here's an alternative, also for BTC, as I've been getting reports of some bitcoin wallets not supporting certain addresses: 1PEDKUiUTxGNJ3XTPfXCTAjpzVzX1VZAme...

Kamerka-GUI

Kamerka GUI Kamerka GUI is a Django-based reconnaissance dashboard for discovering, reviewing, and triaging Internet-exposed Industrial Control System, Internet of Things and medical devices. It combines Shodan search data, Google Maps visualization, device screenshots, passive intelligence...

ca-clone

CA Cloning Scripts Scripts to clone CA certificates for use in HTTPS client attacks. Currently includes scripts to clone a root Comodo CA, and a Digicert CA, both of which are fairly widely trusted in IoT devices. Usage Run either script in place to automatically generate a key and certificate. I...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

uniFuzzer

uniFuzzer uniFuzzer is a fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer. Currently it supports fuzzing 32-bits LSB ELF files on ARM/MIPS, which are usually seen in IoT devices. 中文介绍 Features very little hack and easy to build can target any specified function or code snipp...

tinyos-rtos

TinyOS — Ultra-Lightweight RTOS for IoT An ultra-lightweight real-time operating system for resource-constrained IoT and embedded devices. Kernel footprint under 10 KB, 2 KB minimum RAM, preemptive priority-based scheduling. Features Category| Details ---|--- Kernel| Preemptive priority-based...

peniot

PENIOT: 物联网渗透测试工具 目录 项目描述 什么是PENIOT？ 为什么需要PENIOT？ PENIOT提供了什么？ 构建说明 文档 测试 贡献者 开发者说明 项目海报 项目描述 什么是PENIOT？ PENIOT 是一个针对物联网（IoT）设备的渗透测试工具。 它通过针对设备的互联网连接发起不同类型的安全攻击，帮助您测试/渗透设备。 换句话说，您可以让设备暴露在主动和被动安全攻击之下。在确定目标设备及其必要信息（或参数）后， 您可以执行主动安全攻击，例如篡改/消耗系统资源、重放有效的通信单元等。 同时，您还可以执行被动安全攻击，例如破坏重要信息的机密性或进行流量分析。...

dns-rebind-toolkit

DNS Rebind 工具包 演示 | 安全公告 | 包含的载荷 | 常见问题 免责声明：本软件仅用于教育目的。本软件不得用于非法活动。作者对其使用不承担任何责任。别当混蛋。 DNS Rebind 工具包是一个前端 JavaScript 框架，用于针对局域网（LAN）上的脆弱主机和服务开发 DNS 重绑定 漏洞利用。它可用于攻击 Google Home、Roku、Sonos WiFi 音箱、WiFi 路由器、“智能”恒温器及其他物联网设备。使用此工具包，远程攻击者可以绕过路由器的防火墙，直接与受害者家庭网络上的设备交互，窃取隐私信息，在某些情况下甚至可以控制脆弱的设备本身。...

IoT-Implant-Toolkit

IoT-Implant-Toolkit IoT-Implant-Toolkit is a framework of useful tools for malware implantation research of IoT devices. It is a toolkit consisted of essential software tools on firmware modification, serial port debugging, software analysis and stable spy clients. With an easy-to-use and...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS Certificate Parser Overview A popular lightweight TLS library simulated contains a stack buffer overflow when parsing X.509 certificate Subject Alternative Name extensions with a crafted length field. Severity: Critical RCE on IoT/Industria...

CVE-research

CVE-research A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing mostly Iot devices Note on working PoC exploit scripts/payloads 1. Use the exploit scripts ethically and responsibly! I will not be responsible for a...

iot-vuln-lab-cve-2017-17761

iot-vuln-lab-cve-2017-17761 Educational simulation of vulnerability exploitation in IoT devices based on CVE-2017-17761...

scan-cve-2026-24061

CVE-2026-24061 Scanner – GNU inetutils telnetd Auth Bypass ⚠️ AVISO LEGAL MUY IMPORTANTE ⚠️ Esta herramienta es exclusivamente para fines educativos, investigación de seguridad, análisis de vulnerabilidades y pruebas autorizadas. Cualquier uso no autorizado contra sistemas que no posees o para los...

CVE-2026-24061---telnetd

CVE-2026-24061 – telnetd 🔥 Descripción CVE-2026-24061 es una vulnerabilidad crítica que afecta a ciertas implementaciones de telnetd , permitiendo un bypass de autenticación y la obtención de un shell root remoto sin credenciales válidas. Este repositorio proporciona un Proof of Concept PoC que...

firmwalker

firmwalker Простой bash-скрипт для поиска в извлеченной или смонтированной файловой системе прошивки. Он будет искать в извлеченной или смонтированной файловой системе прошивки интересующие элементы, такие как: etc/shadow и etc/passwd список каталога etc/ssl поиск файлов, связанных с SSL, таких к...

PT-2026-81924

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

PT-2026-81925

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things IoT botnet that comes with significant improvements to improve its operational resilience and conduct distributed denial-of-service DDoS attacks. The new version, tracked as Kimwolf v7, wa...