SigDigger

SigDigger - The free digital signal analyzer SigDigger is a free digital signal analyzer for GNU/Linux and macOS, designed to extract information of unknown radio signals. It supports a variety of SDR devices through SoapySDR, and allows adjustable demodulation of FSK, PSK and ASK signals, decode...

CVE-2025-63353

CVE-2025-63353 A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID...

dtls

Pion DTLS A Go implementation of DTLS Native DTLS 1.2 and DTLS 1.3 implementation in the Go programming language. A long term goal is a professional security review, and maybe an inclusion in stdlib. RFCs Implemented RFC 6347 : Datagram Transport Layer Security Version 1.2 RFC 9146 : Connection...

Pyrit

Please Read Pyrit is old, is outdated and it's still Python2 I am currently attempting to rewrite it from scratch, so thanks for all the stars but remember to keep an eye for Python3 version. Pyrit Pyrit allows you to create massive databases of pre-computed WPA/WPA2-PSK authentication phase in a...

airbash

airba.sh Airbash is a POSIX-compliant, fully automated WPA PSK PMKID and handshake capture script aimed at penetration testing. It is compatible with Bash and Android Shell tested on Kali Linux and Cyanogenmod 10.2 and uses aircrack-ng to scan for clients that are currently connected to access...

aircrack-ng

Aircrack-ng Badges GitHub CI Others !Codespellhttps://github.com/a...

wifi-pentesting-guide

WiFi Penetration Testing Guide Index 1. Basic commands 2. Open networks 2.1. Captive portals 2.2. Man in the Middle attack 3. WEP cracking 3.1. No clients 4. WPA2-PSK cracking 4.1. Cracking the 4-way-handshake 4.2. PMKID attack 4.3. AP-less attack 5. WPA2-Enterprise 5.1. Fake Access Points 5.2...

h4rpy

h4rpy h4rpy is an automated WPA/WPA2 PSK attack tool, wrapper of aircrack-ng framework. h4rpy provides clean interface for automated cracking of WPA/WPA2 PSK networks. h4rpy enables monitor mode on selected wireless interface, scans the wireless space for access points, tries to capture WPA/WPA2...

CVE-2025-63353

CVE-2025-63353 PoC - FiberHome HG6145F1 Predictable Default Wi-Fi PSK Educational research toolkit and multi-language PoC for CVE-2025-63353 , a critical predictable-default-PSK vulnerability affecting FiberHome HG6145F1 RP4423 GPON ONT devices. Summary The factory default Wi-Fi pre-shared key on...

CVE-2017-9476

CVE-2017-9476 Hidden AP with Deterministic Credentials. Compiling cc xhscmmac2psk.c -o xhscmmac2psk Usage ./xhscmmac2psk The algorithm has been also added to PSKracker. References CVE-2017-9476 Bastille-18.home-security-wifi-network.txt DEFCON 25 whitepaper DEFCON 25 slides...

CVE-2019-14339

CVE-2019-14339 Content Provider URI Injection on Canon PRINT 2.5.5 CVE-2019-14339. Proof of concept by @0x48piraj The ContentProvider in the Canon PRINT 2.5.5 application for Android does not properly restrict data access. This allows an attacker's malicious application to obtain sensitive...

IkeAbuser

IkeAbuser A simple tool wrapper to automate the enumeration, fingerprinting, and PSK extraction of an IPSec VPN gateway. Nothing fancy here, just a script I put together to save time during CTFs and while studying for the CPENT. It chains together ike-scan, nmap and hashcat so I don't have to typ...

CVE-2026-77812

CVE-2026-77812 — DJI Drone Cleartext BLE Transmission of Wi-Fi PSK and Session UUID POC CVE record: https://vulners.com/cve/CVE-2026-77812 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77812 Description DJI Drone expose a DUML control channel over Bluetooth. Every message on that channel — in bo...

CVE-2026-122118

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic...

CVE-2026-122118

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic...

CVE-2026-122118

Certain Yealink products released before 2026-04-15 are vulnerable when the Wi-Fi AP function is enabled. The root cause is the use of a default 8-digit numeric PSK with insufficient strength, which allows attackers to perform brute-force attacks . This vulnerability can lead to unauthorized netw...

CVE-2026-122118

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic...

EUVD-2026-117012

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic...

StyleSmuggler Exploitation Deploys PSK Agent RAT Against Magento Stores

TL;DR: Between September 9 and September 13, 2026, we detected a coordinated campaign exploiting Magento and Adobe Commerce stores across Western Europe, North America, and the Asia-Pacific region. The activity used /paypal/transparent/response/, an endpoint tied directly to StyleSmuggler...

CLEANSTART-2026-VD81536 vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1

Security vulnerability affects the gnutls package. A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS1 v1...