Stuxnet

Stuxnet This repository contains a strictly educational and research-oriented reconstruction of the infamous Stuxnet worm. It is the product of countless hours of reverse engineering work conducted by the global security research community on the original binary samples discovered in 2010...

uboatdemo

uboatdemo A demo server for CVE-2016-3955 UBOAT Performs Linux heap buffer overflow, when USB/IP client begins sending control URBs. Building The server is a standard simple Go program. You can build it the usual way assuming you have Go setup and configured according to official instructions wit...

android-gadget

android-gadget Resumen Ciertas revisiones del kernel de Linux utilizadas en Android se ven afectadas por el problema CVE-2021-39685. Se puede encontrar información detallada y un PoC para CVE-2021-39685 en el repositorio inspector-gadget. Este repositorio incluye un PoC dirigido a varios gadgets...

zephyr_cve-2021-3625

CVE-2021-3625 This repository contains a few example exploits for CVE-2021-3625. All Zephyr-based usb devices up to and including version 2.5.0 suffer from a buffer overflow allowing readout of up to 65kB. Depending on the actual device this may result of leakage of sensitive data like encryption...

CVE-2024-31317-PoC

CVE-2024-31317 漏洞概念验证 CVE-2024-31317 Prueba de Concepto 本仓库包含针对Android系统的CVE-2024-31317漏洞的概念验证脚本集合。 Este repositorio contiene una colección de scripts de prueba de concepto para la vulnerabilidad CVE-2024-31317 en sistemas Android. 脚本说明 Descripción del Script CVE-2024-31317-android11-.sh: 针对Andro...

usb-ninja-detection-poc

How to use 1. Build the solution 2. Run the executable 3. Connect your keyboard/ninja cable 4. Type with your keyboard or start the keystroke injections 5. Kill the executable 6. Under the executable folder, a log file called keystrokeinjectionlogfile.txt is created 7. Event Logs will be logged...

poisontap

PoisonTap - siphons cookies, exposes internal router & installs web backdoor on locked computers Created by @SamyKamkar || https://samy.pl When PoisonTap Raspberry Pi Zero & Node.js is plugged into a locked/password protected computer, it: emulates an Ethernet device over USB or Thunderbolt...

vUSBf

vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / / / / / / / / // / / // // / / // ,/ ///// A KVM/QEMU based USB-fuzzing framework. Sergej Schumilo, OpenSource Security Spenneberg...

ZoneMinder Snapshots - Command Injection

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...

mimikatz-detector-busylight

Mimikatz 检测器驱动程序 - Busylight USB HID 驱动程序模拟，使用 Plenom A/S Busylight Alpha 的 PID/VID（0x3bca/0x27bb），该设备受 Mimikatz 支持。 当 mimikatz 执行时，默认会生成一个线程，尝试定位受支持的 busylight 之一。系统会枚举所有 HID 设备，如果 PID/VID 匹配，则会发送数据包以不同颜色闪烁 busylight。 mimikatz 会向该设备发送三种类型的数据包： keepalive - 大约每隔一秒左右发送一次 start - 仅在找到设备时发送 stop - 当...

Xworm RAT

XWorm-RAT V2.1 ⚠️Attention: This tool is made distributed EXCLUSIVELY for security researches. Please, dont use it for illegal activity A famous XWorm RAT for free, all the popular RAT features. Please support this repository with a star⭐️ if you like it The archive is protected, the password is:...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC Proof-of-Concept of Local Privilege Escalation for FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and below 5.2 Triggered by fnsysctl and USB so physical access required. This PoC spawns local root shell by exploiting CVE-2017-14187. Write-up Korean English TL;DR 1. fnsysctl cp...

chipicopwn

chipicopwn Bootloader exploit for Google Nest Hub 2nd Gen elaine requirements Google Nest Hub 2nd Gen Raspberry Pi Pico Powered USB hub or USB Y cable pico-sdk see Getting Started guide for installation instructions supported version factory firmware 2020/12 - U-Boot 2019.01-gbfc19012ea-dirty Dec...

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / research + PoC Create 1 Shortcut + 1 .DLL containing malicious payload = Put it on a USB and send to victim = victim opens USB = Payload automatically triggers ! ROOT CAUSE 1. First, we need to know exactly where this bug comes from! It's because of a feature called Plug-and-Play ...

miLazyCracker

miLazyCracker Mifare Classic Plus - Hardnested Attack Implementation for LibNFC USB readers SCL3711, ASK LoGO, etc Installation: root@kitploit: ./miLazyCrackerFreshInstall.sh Usage example: place a tag and enjoy root@kitploit: mkdir mydumps cd mydumps miLazyCracker Possible issue: root@kitploit:...

blackleak

BlackLeak Prueba de concepto para CVE-2024-30212 Tabla de contenidos 1. Acerca del PoC 2. Primeros pasos Requisitos previos Instalación 3. Uso 4. Licencia 5. Contacto 6. Agradecimientos Acerca del PoC Esta es la prueba de concepto para CVE-2024-30212. Para más detalles, consulta...

secure-vault-for-commercial

Secure Vault 📄 Technical paper: SecureVaultTechnicalPaperv3.5.0.pdf · Cite on Zenodo Local-first file encryption for Windows, secured by a physical USB key instead of a password. ⚠️ v3.5.0 includes a breaking security fix — see CHANGELOG.md before updating from an earlier version. Table of Content...

wifit3

wifit3: USB Wireless Auditor A wireless auditor that runs on Linux and Windows, comes with its own built-in drivers. At least one of the supported USB adapters is required. wifit3 is fundamentally different from its predecessor, wifite2: Only supports certain popular USB cards see Supported...

USBvalve

!NOTE USBvalve Version 1.0.0 A complete rewrite of the application has been done: moved away from Arduino IDE environment, now the code is written for the Pi Pico SDK dependencies on external libraries have been reduced a lot USB host support for Low Speed devices is now more robust ATTiny85,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073360 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsiconnectorchange The connector number in a UCSI...