power_analysis

Power analysis attack over RSA Index Index Introduction Power Analysis Attacks RSA: A Short Introduction RSA Example Equipment Measuring Power: A Short Introduction Ohm's Law Kirchhoff's Voltage Law KVL Voltage Divider Shunt Resistor Example Power Measurement Fast Exponentiation Fast Exponentiati...

Brutal

Now Teensy can be use for penetration Teensy like a rubber ducky , why im choose teensy ? because the price very cheap for me . t’s extremely useful for executing scripts on a target machine without the need for human-to-keyboard interaction HID -ATTACK .When you insert the device, it will be...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

arduino-pico

Arduino-Pico Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards This is a port of Arduino to the RP2040 Raspberry Pi Pico processor and RP2350 Raspberry Pi Pico 2 processor. It uses the bare Raspberry Pi Pico SDK and a custom GCC 14.3/Newlib 4.5 toolchain and supports ARM and RISC-V...

arducky

Arducky - Arduino Ducky Script Interpreter This project aims to create a cheap alternative but not less efficient to Hak5's USB Rubber Ducky. Introduction The USB Rubber Ducky is a HID Human Interface Device programmable with a simple scripting language allowing penetration testers to quickly and...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

Arduino-Netcat-Backdoor

Arduino - Netcat - Backdoor for Windows Name suggestions welcome. root@kitploit: Proof Of Concept. Not intended for real life use. I can't take responsibillity for stuff other people do with this Attacks a Windows machine running Windows 7 or later, creating a persistent Backdoor. Funtionallity T...

SymaX5SW-Rx-Tx

SymaX5SW Rx and Tx Исследование, проведённое на дроне SYMA X5SW, с тремя поставленными целями. 1. Перехватить телеметрию дрона и отображать её в графическом интерфейсе в реальном времени. 2. Создать передатчик командное управление, используя радиочастотные модули, Arduino и код на C. 3. Перехвати...

OverThruster

OverThruster "I've been ionized, but I'm okay now." -Buckaroo Banzai. General Info OverThruster is a tool to generate sketches for Arduinos when used as an HID Attack. It was designed around devices with the ATMEGA32U4 chip, like the CJMCU-BEETLE, or the new LilyGo "BadUSB" devices popping up on...

Arduino_mousejack

Arduino Mousejack ShutDô Arduino Mousejack is a project, based on uCmousejeck by insecuritythings , to get Mousejack attacks into a small embedded device, with the form factor of a key chain. Prototype Mousejack Device Building the device is straight-forward, and the code provides a tool to use...

keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // REL ДЛЯ ВСЕХ // ПРИКЛАДНОЙ ХАКИНГ KeySweeper KeySweeper — это скрытое устройство на базе Arduino, замаскированное под работающее USB-зарядное устройство для розетки, которое беспроводно и пассивно перехватывает, расшифровывает, регистрирует и передаёт через GSM...

gha-lab-6ab39df295

자동화된 연구 산출물 — 상위 프로젝트가 아님. 이 저장소는 Université Laval의 석사 논문에서 게시된 GitHub Actions 워크플로우 취약점을 재현하기 위해 자동화된 하네스가 구축한 일회용 실험실입니다. 이는 커밋 9e60bbe4bc05e8d27050d23ce3a61a955c1851eb2024-09-13 시점의 espressif/arduino-esp32의 축어적 스냅샷이며, 해당 프로젝트의 자체 라이선스에 따라 재배포되며, 그 라이선스 파일은 이 스냅샷에 변경 없이 포함되어 있습니다. 상위 프로젝트는 관여하지...

PT-2026-90504

ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a stack-based buffer overflow when concatenating floating-point values of sufficiently large magnitude onto an Arduino Stri...

gha-lab-16bfb18428

Arduino core für den ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 und ESP32-H2 Brauchen Sie Hilfe oder haben Sie eine Frage? Treten Sie dem Chat auf Gitter bei oder...

CVE-2026-42854

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer multipart form parser in arduino-esp32 allocates a Variable Length Array VLA on the stack whose size is derived from an attacker-controlled HTTP head...

CVE-2026-42855

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer Digest authentication implementation in arduino-esp32 computes the authentication hash using the URI field from the client's Authorization header,...

CVE-2026-42854

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer multipart form parser in arduino-esp32 allocates a Variable Length Array VLA on the stack whose size is derived from an attacker-controlled HTTP head...

CVE-2026-42854

Summary: The Arduino-ESP32 core is affected by a stack overflow in the WebServer multipart boundary parser. A boundary derived from the HTTP header (Content-Type: multipart/form-data; boundary=...) with length > ~8000 can overflow the 8192-byte loopTask stack, potentially enabling remote code ...

CVE-2026-42854 arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer multipart form parser in arduino-esp32 allocates a Variable Length Array VLA on the stack whose size is derived from an attacker-controlled HTTP head...

CVE-2026-42854 arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer multipart form parser in arduino-esp32 allocates a Variable Length Array VLA on the stack whose size is derived from an attacker-controlled HTTP head...