5154 matches found
hcxdumptool
hcxdumptool A tool to capture packets from WLAN devices and to discover potential weak points within own WiFi networks by running layer 2 attacks against the WPA protocol. Designed to run mostly headless on small systems like a Raspberry Pi Zero. hcxnmealog A tool to handle NMEA 0183 sentences fr...
LANs.py
LANs.py NOTE I do not maintain this anymore. I highly suggest using bettercap instead for ARP and MITM needs. Automatically find the most active WLAN users then spy on one of them and/or inject arbitrary HTML/JS into pages they visit. Individually poisons the ARP tables of the target box, the...
pinecone
Pinecone is a WLAN networks auditing tool, suitable for red team usage. It is extensible via modules, and it is designed to be run in Debian-based operating systems. Pinecone is specially oriented to be used with a Raspberry Pi, as a portable wireless auditing box. This tool is designed for...
CVE-2024-53027-WIP
CVE-2024-53027-WIP Work in Progress for POC CVE-2024-53027: Qualcomm Bluetooth/Wi-Fi Vulnerability 📄 Overview CVE-2024-53027 is a medium-severity vulnerability CVSS unrated affecting Qualcomm’s WLAN and Bluetooth chipsets in Android devices. It can cause transient denial-of-service DoS when...
CVE-2026-83668
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally...
CVE-2026-83668
An out-of-bounds read vulnerability exists in the Windows WLAN Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended memory boundaries. The official CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low...
CVE-2026-83855
The Windows WLAN Service is vulnerable to an integer underflow (wrap or wraparound) , as categorized under CWE-191 . This vulnerability allows an unauthorized attacker to cause a denial of service (DoS) over a network. The official remediation level is an official fix , and the severity is rated ...
Windows WLAN Service Information Disclosure Vulnerability
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally...
Windows WLAN Service Denial of Service Vulnerability
Integer underflow wrap or wraparound in Windows WLAN Service allows an unauthorized attacker to deny service over a network...
mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce
CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Access Point driver. Vulnerability CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Subcomponent : wlan AP driver Attack...
Microsoft Windows: CVE-2026-83855: Windows WLAN Service Denial of Service Vulnerability
Integer underflow wrap or wraparound in Windows WLAN Service allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83668: Windows WLAN Service Information Disclosure Vulnerability
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally...
CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware
CVE-2023-33105: Transient DOS in WLAN Host and Firmware Overview This repository contains the exploit code for CVE-2023-33105, a vulnerability identified in Qualcomm devices. The exploit leverages authentication frames to perform a denial of service DoS attack on a target access point AP by sendi...
CVE-2020-23590
CVE-2020-23590 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Vulnerability found in the "Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OPV3.3.1-191028" which allow an unauthenticated remote attacker to conduct a...
CVE-2020-23582
CVE-2020-23582 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" A vulnerability in the "/admin/wlmultipleap.asp" of "optilink OP-XT71000N version: V2.2" Software could allow an unauthenticated, remote attacker to conduct a cross-site...
pinecone
Pinecone es una herramienta de auditoría de redes WLAN, adecuada para uso de equipos rojos. Es extensible mediante módulos y está diseñada para ejecutarse en sistemas operativos basados en Debian. Pinecone está especialmente orientada a ser usada con una Raspberry Pi, como una caja de auditoría...
CVE-2024-20137
CVE-2024-20137 Python code for expoiting the vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 About the code This code is...
CVE-2024-38143
CVE-2024-38143 Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability Successful exploitation can lead to possible escalation to NT AUTHORITY\SYSTEM Background While on a client engagement, I had to test a physical laptop and for some reason, stumbled upon this article by Matthew...
CVE-2026-57546
A Buffer Over-read vulnerability exists in the WLAN HAL component. The flaw occurs during the processing of a continuous receive command when a zero-sized global configuration override is present, leading to a transient Denial of Service (DoS) . No specific software versions or remediation steps ...
