bread

🍞 BREAD BREAD（BIOS Reverse Engineering & Advanced Debugger）は、「注入可能な」リアルモード x86 デバッガであり、シリアルケーブルを介して別の PC から任意のリアルモードコード（実際のハードウェア上で）をデバッグできます。 はじめに BREAD は、レガシー BIOS をリバースエンジニアリングする多くの失敗した試みから生まれました。BIOS 解析の大部分（すべてではないにせよ）は逆アセンブラを使って静的に行われているため、特定のコード片におけるレジスタやメモリの値を知る方法がなく、BIOS を理解することが非常に困難です。...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

android_hid

androidhid AndroidをRubber Duckyとして使い、標的のAndroidデバイスやPCに対して攻撃 Androidを使ったHID攻撃 AndroidをRubber Duckyとして使い、AndroidやWindowsに対して攻撃します。これは新しい手法ではなく、Rubber Duckyの代わりにAndroidを使ってHID攻撃を行うデモです。標的のAndroidデバイスに関しては、ルート化、ADB/USBデバッグの有効化、デバイスの認証は不要です。攻撃者のスマートフォンが接続されたキーボードとして振る舞うからです。 hidattack -...

CVE-2017-9476

CVE-2017-9476 예측 가능한 자격 증명을 사용하는 숨겨진 AP. 컴파일 root@kitploit: cc xhscmmac2psk.c -o xhscmmac2psk 사용법 root@kitploit: ./xhscmmac2psk 이 알고리즘은 PSKracker에도 추가되었습니다. 참고 자료 CVE-2017-9476 Bastille-18.home-security-wifi-network.txt DEFCON 25 백서 DEFCON 25 슬라이드...

usb-ninja-detection-poc

使用方法 1. 构建解决方案 2. 运行可执行文件 3. 连接你的键盘/忍者线缆 4. 使用键盘输入或启动按键注入 5. 终止可执行文件 6. 在可执行文件所在文件夹下，会生成一个名为 keystrokeinjectionlogfile.txt 的日志文件 7. 事件日志将记录在“应用程序”下...

ZTE Cable Modem Web Shell

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...

Cable-modems

Analyse von WiFi-fähigen ISP-Modems Überblick Die SEARCH-LAB Ltd. hat fünf Heim-Gateway-Modelle evaluiert, die alle von vielen Internetdienstanbietern weltweit eingesetzt werden; die tatsächlichen Geräte wurden jedoch von einem der ungarischen Kabel-TV-Betreiber, UPC Magyarország...

Cable

Cable Cable è uno strumento di post-exploitation utilizzato per la ricognizione e lo sfruttamento mirato delle Discretionary Access Control List DACL in un ambiente Active Directory. Questo strumento è stato creato principalmente per approfondire lo sviluppo offensivo .NET in un contesto Active...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 Exploit Dieser Exploit nutzt die Cable-Haunt-Sicherheitslücke, um über den lokalen Netzwerkzugriff eine Shell auf dem Kabelmodem Sagemcom F@ST 3890 50.10.19 zu öffnen. Firmware-Version 50.10.21 oder neuer sollte gegen Cable Haunt sicher sein. Dieses Proof of Concept wurde...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098982 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to che...

kernel: ALSA: aloop: Fix racy access at PCM trigger

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since both check and stop operations are...

CVE-2026-11410

An authenticated OS command injection vulnerability exists in the BigPond Cable BPA WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-11410 OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N

An authenticated OS command injection vulnerability exists in the BigPond Cable BPA WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-11410

The CVE-2026-11410 entry concerns TL-WR940N v6 (BigPond Cable BPA WAN config) with an authenticated OS command injection caused by improper input sanitization in the configuration module. An administrator can trigger arbitrary command execution with elevated privileges on the device via the BPA W...

CVE-2026-24444

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

CVE-2026-24444 SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

PT-2026-44402

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9 B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

EUVD-2026-32473

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopbackcheckformat may stop the capture side when playback starts with parameters that no longer match a running capture stream. Commit 826af7fa62e3 "ALSA: aloop: Fix...

CVE-2026-46090 ALSA: aloop: Fix peer runtime UAF during format-change stop

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopbackcheckformat may stop the capture side when playback starts with parameters that no longer match a running capture stream. Commit 826af7fa62e3 "ALSA: aloop: Fix...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fix command flush on cable pull The system crashed due to a command failing to be flushed back to the SCSI layer. BUG: Unable to handle a NULL pointer dereferencing in the kernel at 0000000000000000 PGD 0 P4D 0...