USB Spy

USB SPY usb-spy is a USB Mass Storage traffic analyzer built around a WiFi or Ethernet-enabled microcontroller. The board exposes a disk image FAT or any filesystem as a fake USB Mass Storage device to a target system, while the actual storage data is provided by a remote server over WiFi or...

cve-2022-31705

CVE-2022-31705 Intro https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Test on windows vmware workstation 16.2.0, with guest os ubuntu server 22 At leat one usb device is be attached to guest machine change the 'qh-field4' in the ehci.c...

USBArmyKnife

🚀 USB Army Knife v2 se está gestando — y va a ser una bestia Tras dos años de desarrollo activo de la v1, la v2 está pensada para convertir el USB Army Knife en una plataforma completa de red team en tu bolsillo. Un gran anuncio llegará este otoño, pero quería adelantar algo:...

zephyr_cve-2021-3625

CVE-2021-3625 Este repositorio contiene algunos exploits de ejemplo para CVE-2021-3625. Todos los dispositivos USB basados en Zephyr hasta la versión 2.5.0 incluida sufren un desbordamiento de búfer que permite la lectura de hasta 65 kB. Dependiendo del dispositivo real esto puede provocar la fug...

vUSBf

vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / // // / / / / / // / / // // / / // ,/ ///// A KVM/QEMU based USB-fuzzing framework. Sergej Schumilo, OpenSource Security...

blackleak

BlackLeak CVE-2024-30212 的概念验证 目录 1. 关于 PoC 2. 开始使用 先决条件 安装 3. 用法 4. 许可证 5. 联系方式 6. 致谢 关于 PoC 这是 CVE-2024-30212 的概念验证。 更多详情请查看 https://vulners.com/cve/CVE-2024-30212 回到顶部 开始使用 先决条件 libusb root@kitploit: apt install libusb-1.0-0-dev 安装 1. 克隆仓库 root@kitploit: git clone...

CVE-2026-80780

CVE-2026-80780 is an out-of-bounds write in the Linux kernel's HID: pidff driver, specifically in hid_pidff_init_with_quirks(). The function calls list_entry() on hid->inputs without verifying the list is non-empty. When hid->inputs is empty—possible with a USB device whose report descripto...

CVE-2026-80773

In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

usbrip

usbrip （名称源自“USB Ripper”，而非“USB R.I.P.”）是一款简单的命令行取证工具，可让您跟踪 Linux 机器上的 USB 设备痕迹（即 USB 事件历史）。 目录： 描述 快速开始 展示 系统日志结构 依赖项 deb pip 手动安装 Git Clone install.sh 路径 Cron uninstall.sh 用法 概要 帮助 示例 鸣谢与参考 加星者图表 后记 描述 usbrip 是一款小型软件，用于分析 Linux 日志数据：journalctl 输出或 /var/log/syslog（或...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

Linux Distros Unpatched Vulnerability : CVE-2026-80780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: pidff: fix OOB write when hid-inputs is empty hidpidffinitwithquirks derives its inputdev from listentryhid-inputs.next, struct hidinput, list without firs...

CVE-2023-40930

介绍 这是一个关于如何搭建 CVE-2023-40930 复现环境的介绍 在 "issue detail.pdf" 中了解更多关于此 CVE 问题的信息 搭建 概述 你可以使用树莓派 Pi Zero 2W 或其他 ARM64（ARM32 也可）架构的设备来搭建这个环境，也可以在已 root 的 Android 设备上搭建。 如何搭建 针对非安卓设备 创建目录路径 "/system/lib"，并将本程序中的 "lib" 目录复制到 /system/lib。 然后创建目录路径 "/system/bin"，并将 "blkid" 和 "linker" 复制到此路径。 之后，插入你的恶意 U 盘并...

rinhit

RinHit RinHit - framework de reconocimiento del ecosistema macOS. Recopila artefactos del ecosistema Apple para construir líneas temporales de actividad de red, identidad entre dispositivos y correlación de ubicación física. Este es el módulo de reconocimiento de código abierto. El payload Swift...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

The vulnerability of the library for working with USB devices using libusb, related to reading data beyond the buffer’s acceptable limits, allows a hacker to cause a service failure.

The vulnerability of the library for working with USB devices using libusb is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the usbhs_remove() function in the drivers/usb/renesas_usbhs/common.c driver module of the Linux operating system’s USB device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbhsremove function in the drivers/usb/renesasusbhs/common.c driver for Linux USB device controllers is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `__acquires()` function in the drivers/usb/chipidea/udc.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acquires function in the drivers/usb/chipidea/udc.c module of the Linux device driver framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the eth_get_drvinfo() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ethgetdrvinfo function in the drivers/usb/gadget/function/uether.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098919 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen,...

CVE-2026-64565

A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...