pico-usb-wifi

= pico-usb-wifi :toc: macro :toclevels: 3 :idprefix: :idseparator: - pico-usb-wifi is firmware for the Raspberry Pi Pico W that turns it into a driverless USB Wi-Fi adapter, enumerating as a USB CDC-NCM device. :figure-caption: AI Slop .pico-usb-wifi Diagram...

arduino-pico

Arduino-Pico Raspberry Pi Pico Arduino 核心，适用于所有 RP2040 和 RP2350 开发板 这是 Arduino 向 RP2040（Raspberry Pi Pico 处理器）和 RP2350（Raspberry Pi Pico 2 处理器）的移植。它使用裸机 Raspberry Pi Pico SDK 和自定义 GCC 14.3/Newlib 4.5 工具链，并支持 ARM 和 RISC-V 核心。 文档 更多详细使用信息，请参阅 https://arduino-pico.readthedocs.io/en/latest/ 以及示例。 贡献...

arduino-pico

Arduino-Pico Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards This is a port of Arduino to the RP2040 Raspberry Pi Pico processor and RP2350 Raspberry Pi Pico 2 processor. It uses the bare Raspberry Pi Pico SDK and a custom GCC 14.3/Newlib 4.5 toolchain and supports ARM and RISC-V...

tgt-monitor-bof

Kerberos TGT Monitoring & Auto-Renewal This repository contains two Async Beacon Object Files BOF. The first, tgt-monitor, monitors the system for Kerberos logon events and wakes up the agent whenever a new Kerberos TGT is captured. Similar to Rubeus' monitor command, this BOF is running...

Maverick

Maverick Un agente de C2 de Adaptix construido con Crystal Palace: un enlazador PIC Código Independiente de Posición personalizado y un sistema de módulos PICO. Demuestra cómo construir agentes de shellcode modulares donde cada componente transporte, tareas, ofuscación es un blob PICO separado qu...

Crystal-Kit

Crystal Kit Este repositorio es un experimento técnico y social para explorar si reemplazar las primitivas de evasión de Cobalt Strike Sleepmask/BeaconGate con un PICO de Crystal Palace es factible o incluso deseable para escenarios avanzados de evasión. Uso 1. Deshabilite las ofuscaciones de...

CrystalSliver

crystal-kit-sliver Crystal Palace evasion kit ported to Sliver C2. This is the first public port of rasta-mouse's Crystal-Kit Cobalt Strike to Sliver. It follows the same cross-C2 pattern proven by Crystal-Kit-Xenon Mythic. License: MIT — Copyright c 2026 Simone Licitra Target: Windows x64 only...

execute-assembly-pico

Ejecutar ensamblado PICO Un PICO para Crystal Palace que implementa hosting CLR nativo para ejecutar un ensamblado .NET adjunto en memoria, usando la misma técnica que el generador de shellcode donut. Esto te permite cargar herramientas .NET como Rubeus o Seatbelt desde código independiente de...

USBvalve

!NOTE USBvalve Versión 1.0.0 Se ha realizado una reescritura completa de la aplicación: se ha abandonado el entorno Arduino IDE, ahora el código está escrito para el Pi Pico SDK las dependencias de librerías externas se han reducido mucho el soporte de USB host para dispositivos de baja velocidad...

picohaxx

ahora con un 100% más de código fuente ™ picohaxx Exploit de kernel de código abierto para dispositivos Pico 4 basado en cve-2023-33107 Optimizado para una tasa de éxito sólida del 100% y velocidad 7s en todos los dispositivos Pico 4 vulnerables. Versiones de Pico 4 OS compatibles: 5.2.0 hasta...

SliverMirage

SliverMirage Un fork de CrystalSliver, que extiende el cargador PICO de Crystal Palace con bypass de AMSI de doble capa, silenciamiento de ETW y seis variantes de entrega para Sliver C2. Qué hace SliverMirage envuelve un DLL de implante de Sliver mediante la virtualización PICO de Crystal Palace,...

chipicopwn

chipicopwn Exploit de bootloader para Google Nest Hub 2.ª generación elaine requisitos Google Nest Hub 2.ª generación Raspberry Pi Pico Concentrador USB con alimentación o cable Y USB pico-sdk consulta la guía de inicio para obtener instrucciones de instalación versiones compatibles firmware de...

arduino-pico v6.1.0

Arduino-Pico Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards This is a port of Arduino to the RP2040 Raspberry Pi Pico processor and RP2350 Raspberry Pi Pico 2 processor. It uses the bare Raspberry Pi Pico SDK and a custom GCC 14.3/Newlib 4.5 toolchain and supports ARM and RISC-V...

USBvalve v1.0.1

!NOTE USBvalve Version 1.0.0 A complete rewrite of the application has been done: moved away from Arduino IDE environment, now the code is written for the Pi Pico SDK dependencies on external libraries have been reduced a lot USB host support for Low Speed devices is now more robust ATTiny85,...

CVE-2026-80648

CVE-2026-80648 affects the pinctrl: spacemit driver in the Linux kernel. In spacemit_pin_set_config(), the code checks the wrong variable after calling spacemit_get_pin(): it tests !pin (an unsigned int) instead of !spin (the pointer). Because pin 0 is a valid ID, the check erroneously returns -E...

CVE-2026-80648: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: pinctrl: spacemit: fix NULL check in spacemitpinsetconfig spacemitpinsetconfig looks up the per-pin descriptor with spacemitgetpin then checks the wrong variable for failure: const struct spacemitpin spin = spacemitgetpinpctrl,...

CVE-2026-72574

A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the default theme. When baseurl is unset the default, Pico::getBaseUrl in lib/Pico.php builds the base URL from unvalidated...

CVE-2026-72574

The CVE-2026-72574 entry describes a host header injection in Pico CMS (Pico, up to version 2.1.4) where Pico::getBaseUrl() builds the base URL from unvalidated request headers (Host, X-Forwarded-Host, X-Forwarded-Proto, X-Forwarded-Port) when base_url is unset. This allows an unauthenticated rem...

EUVD-2026-55232

A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the default theme. When baseurl is unset the default, Pico::getBaseUrl in lib/Pico.php builds the base URL from unvalidated...

CVE-2026-72574 picocms Pico - Host Header Injection Enables Script Source Hijacking

A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the default theme. When baseurl is unset the default, Pico::getBaseUrl in lib/Pico.php builds the base URL from unvalidated...