472 matches found
iotmap
IoTMap IoTMap is a tool that models IoT networks using one or multiple protocols simultaneously. This is work in progress, as a part of a PhD thesis on Internet Of Things security. This repository is regularly updated as new results are obtained. This project supports 3 protocol as this time : BL...
killerbee
KillerBee KillerBee is a Framework and Tools for Testing & Auditing ZigBee and IEEE 802.15.4 Networks Notice usb0.x support is being deprecated/removed Apimote v1 support is being deprected/removed If you require these features please create an issue to explain your usecase and requirements...
IoT-Pentest-devices-and-purpose
IoT 침투 테스트 기기 및 목적 - 2025 에디션 이 문서는 다양한 프로토콜과 기술을 다루는 2025년 IoT 보안 테스트를 위한 최신 도구와 하드웨어를 요약합니다. 최첨단 공격, 새로 발견된 취약점, 향상된 기능을 갖춘 업데이트된 하드웨어 및 소프트웨어 도구를 포함합니다. 목차 블루투스 지그비 Z-Wave WiFi 하드웨어 부채널 공격 SCA 자동차 보안 무선 주파수 NFC 및 RFID 최신 2025 취약점 AI 기반 보안 테스트 블루투스 소프트웨어 도구| 하드웨어 도구| 목적| 2025 업데이트 ---|---|---|-...
killerbee
KillerBee KillerBeeは、ZigBeeおよびIEEE 802.15.4ネットワークのテストと監査のためのフレームワークおよびツールです。 注意 usb0.x サポートは非推奨/削除予定です Apimote v1 サポートは非推奨/削除予定です これらの機能が必要な場合は、ユースケースと要件を説明するイシューを作成してください。 KillerBee 3.0.0-beta アップデート 皆様、KillerBeeへの継続的なご支援とご関心に感謝いたします。 コードの整理、Python...
CVE-2021-27289
🐝 CVE-2021-27289: Ksix Zigbee デバイスにおける再生保護バイパス 📑 目次 本題に入る前に この CVE の背景 脆弱性 影響を受けるデバイス 技術的詳細 攻撃シナリオ 影響 実証コード デモ動画 オリジナルブログ記事 研究者 Zigbee の基礎 背景と動機 初期の実験 発見 悪用 実験環境 関連研究 🎭 本題に入る前に 皆さん、こんにちは。 プロらしいやり方としては、このリポジトリのタイトルをまさに今のまま – 明確で説明的で、要点を突いたもの –...
CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit
CVE-2026-21006 – Zigbee Light Link ファクトリーリセットエクスプロイト プログラムコード Python Zigbee シミュレーション root@kitploit: zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself, cmdid: if cmdid ...
zigdiggity
ZigDiggity 版本 2 介绍 ZigDiggity 2.0 ，这是一款由 Bishop Fox 的 Matt Gleason 和 Francis Brown 创建的 ZigBee 渗透测试框架。特别感谢 Caleb Marion！ ZigDiggity 版本 2 是对原始包的重大改进，旨在让网络安全专业人员、审计人员和开发人员能够使用单个设备与 ZigBee 网络进行复杂交互。 2019 年 – Black Hat USA 2019 和 DEF CON 27 – 链接、幻灯片和视频 Black Hat USA 2019 – ARSENAL LAB – ZigBee 入侵：使用...
Astra Linux – Vulnerability in Wireshark
MONGO and ZigBee TLV dissector have infinite loops in Wireshark versions 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22. These bugs allow for denial of service through packet injection or with properly crafted capture files...
EUVD-2026-67300
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...
CVE-2026-17610
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...
CVE-2026-17610: Improper Resource Shutdown or Release
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...
CVE-2026-17610 RAIL 802.15.4 Mux missing ACK can lead to DoS
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...
PT-2026-82755
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...
Exploit for CVE-2026-21006
--- CVE-2026-21006 – Zigbee Light Link Factory Reset Exploit...
EUVD-2026-39396
In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed...
CVE-2026-4526 Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed...
PT-2026-52394
In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed...
The vulnerability of the decrypt_data() function in the ZigBee protocol analyzer of Wireshark allows a hacker to cause a service failure.
The vulnerability of the decryptdata function in the Kismet protocol of the Wireshark network traffic analyzer involves buffer overflow in the stack. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2026-6537
A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the ZigBee protocol dissector by crafting a malicious packet. This could lead to a crash of the Wireshark application, resulting in a denial of service DoS for the user. Mitigation To mitigate this issue, users can...
