access-point

Punto de acceso falso Punto de acceso Wi‑Fi abierto no autorizado para captura de tráfico en entornos controlados. Usa hostapd modo AP nativo nl80211 + dnsmasq DHCP/DNS + iptables NAT hacia una interfaz de enlace ascendente. Requisitos Linux, root. Tarjeta inalámbrica con soporte de modo AP iw ph...

killosx

killosx Usa el exploit de Apple CoreText CVE-2012-3716 y lanza un AP para afectar a todos los dispositivos Apple vulnerables dentro del alcance wifi. Instalación: Ejecuta 'make install' en el directorio de killosx. Ahora killosx se puede ejecutar desde cualquier lugar con 'killosx'. Uso:...

KawaiiDeauther

KawaiiDeauther Kawaii Deauther 是一个渗透测试工具包，旨在对 WiFi 客户端/路由器执行干扰，并发送大量虚假 AP 以进行测试。 依赖项 macchanger mdk3 nmcli 安装 依赖项将自动安装。 root@kitploit: $ git clone https://github.com/aryanrtm/KawaiiDeauther $ cd KawaiiDeauther && sudo ./install.sh $ sudo KawaiiDeauther.sh 演示 已测试环境 操作系统| 版本 ---|--- Linux Mint| 19....

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

CVE-2020-27301-hostapd

CVE-2020-27301-hostapd PoC di un Rogue AP per CVE-2020-27301 Compilazione Su Ubuntu 20.04 LTS root@kitploit: apt install libnl-genl-3-dev libssl-dev libsqlite3-dev libgnutls28-dev cd hostapd && make -j4 all Esecuzione Nella directory hostapd, usa root@kitploit: ./start.sh hostapd README...

M5PORKCHOP

root@kitploit: Volume Zero, Issue 3, Phile 1 of 1 M5PORKCHOP README v0.1.8b-PSTH ^^ oo\ \ /\ ||----w | || || yes that's a cow. the pig ate the pig art budget. the horse was unavailable for comment. 67% of skids skip READMEs. 100% of those skids report bugs we documented. the horse thinks this is...

PRISM-AP

PRISM-AP DESCRIZIONE: PRISM-AP è un framework automatizzato per attacchi MITM Wireless RogueAP. FUNZIONALITÀ: Facile da configurare e usare, completamente automatizzato Sfrutta l'attacco WiFi MANA per attirare le connessioni dei client Bypass parziale di HSTS tramite bettercap Intercetta e...

WEF

WiFi Exploitation Framework Programmiert mit 💙 von D3Ext Einführung • Angriffe • Funktionen • Installation • Verwendung README auf Spanisch Einführung Dieses Tool wurde für Sicherheitsforscher und Penetrationstester entwickelt, um Schwachstellen in Wi-Fi-Netzwerken zu analysieren und auszunutzen...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

esp32-wifi-penetration-tool

ESP32-WLAN-Penetrationstool Dieses Projekt stellt ein universelles Tool für die ESP32-Plattform zur Implementierung verschiedener Wi-Fi-Angriffe vor. Es bietet einige gängige Funktionen, die häufig bei Wi-Fi-Angriffen verwendet werden, und macht die Implementierung neuer Angriffe etwas einfacher...

AP Pricing Tables Lite <= 1.1.6 - SQL Injection

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins. id: CVE-2023-0900 info: name: AP Pricing Tables Lite = 1.1.6 - SQL Injection author: r3Y3r53 severity: high description: ...

PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection

A SQL injection vulnerability in the productalloneimg and imageproduct parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data. id: CVE-2022-22897 info: name: PrestaShop AP Pagebuilder = 2.4.4 - SQL Injection...

Wavlink Multiple AP - Remote Command Injection

Wavlink products are affected by a vulnerability that may allow remote unauthenticated users to execute arbitrary commands as root on Wavlink devices. The user input is not properly sanitized which allows command injection via the "key" parameter in a login request. It has been tested on Wavlink...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Prova di concetto per CVE-2026-20452, un overflow del buffer heap nel driver WLAN Access Point di MediaTek. Vulnerabilità CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Sottocomponente : wlan driver AP Vettore...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

evil-twin-ap

Evil Twin Access Point Toolkit Una configurazione completa, modulare e riproducibile di un punto di accesso evil twin per test di sicurezza difensiva, penetration testing e ricerca sulla sicurezza wireless. ⚠️ Dichiarazione di non responsabilità legale SOLO PER SCOPI EDUCATIVI E TEST DI SICUREZZA...

bugstropics

Jagd auf Bugs in den Tropen Dies ist ein Repository mit den Folien, die in meinem Vortrag "Jagd auf Bugs in den Tropen" auf der DEFCON30 verwendet wurden. Es enthält das Python-Skript zur Berechnung des Support-Passworts auf Basis des privaten Schlüssels, der durch das Brechen des EC-öffentlichen...

CVE-2023-37073

CVE-2023-37073 Le credenziali predefinite di Telnet possono causare divulgazione di informazioni e attacchi denial-of-service DoS. Passaggi per riprodurre Questo riguarda l'AP AR-5310 root@kitploit: Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Divulgazione di...