Penetration_Testing_POC

PenetrationTestingPOC 搜集有关渗透测试中用到的POC、脚本、工具、文章等姿势分享，作为笔记吧，欢迎补充。 请注意所有工具是否有后门或者其他异常行为，建议均在虚拟环境操作。 PenetrationTestingPOC 请善用搜索Ctrl+F查找 IOT Device&Mobile Phone Web APP 提权辅助相关 PC tools-小工具集合 文章/书籍/教程相关 说明 请善用搜索Ctrl+F查找 IOT Device&Mobile Phone 天翼创维awifi路由器存在多处未授权访问漏洞 华为WS331a产品管理页面存在CSRF漏洞...

CVE-2025-54322

CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE Scanner A multi-threaded vulnerability scanner for CVE-2025-54322, an unauthenticated remote code execution vulnerability in XSpeeder SXZOS firmware affecting 70,000+ hosts globally. 📋 Table of Contents About the Vulnerability Features Installation Usa...

CVE-2024-9466

CVE-2024-9466 CVE-2024-9466 Proof of Concept PoC Description This script checks for the CVE-2024-9466 vulnerability by appending /home/userSpace/devices/debug.txt to a list of target URLs or IP addresses. It determines if the target is vulnerable based on the HTTP response status code and whether...

eclipse__hawkbit_CVE-2020-27219_0-3-0M6

Eclipse hawkBit™ - Update Server Eclipse hawkBit is an domain independent back end solution for rolling out software updates to constrained edge devices as well as more powerful controllers and gateways connected to IP based networking infrastructure. Build: SonarQuality Docker: Documentation see...

CVE-2018-9995_dvr_credentials

Tool show DVR Credentiales Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: $ curl...

CVE-2025-36911-exploit

WhisperPair Python CLI Fast Pair CVE-2025-36911 Exploit Tool in Python to test our equipment Author: Sébastien Dudek @FlUxIuS @ Penthertz Credits: whisperpair.eu for the discovery and this nice APK from @ZalexDev that shorten the time of the implementation wpair-app ⚠️ Disclaimer For authorized...

MESH

DOCS | BARGHEST MESH is a networking tool, to support remote logical forensics acquision on mobile devices MESH gives analysts a direct, encrypted path to mobile devices for wireless debugging, network monitoring and forensic acquisition, even when those devices sit behind NAT, firewalls, or...

shodan-dorks

Shodan dorks Description: This GitHub repository provides a range of search queries, known as "dorks," for Shodan, a powerful tool used to search for Internet-connected devices. The dorks are designed to help security researchers discover potential vulnerabilities and configuration issues in...

emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

whad-client

WHAD: Wireless HAcking Devices This framework provides a set of command-line tools to play with/hack/explore wireless protocols and devices as well as a library to create powerful wireless tools to use with hardware devices running a compatible firmware. Installation Installation is pretty...

WhatsApp-OSINT

WHATS OSINT 🕵️‍♂️ OSINT tool for WhatsApp that allows you to obtain profile photos, verify Business accounts, check status and user information, analyze linked devices, review privacy settings, and access full data using the WhatsApp OSINT API from RapidAPI. Supports 6 endpoints: about, base64,...

pciem

PCIem A Linux kernel framework enabling synthetic userspace PCIe device emulation. | Documentation What is PCIem? PCIem is a framework that creates virtual PCIe devices in the Linux kernel by leveraging a few novel techniques to populate synthetic cards as legitimate PCI devices to the host OS. T...

tinyos-rtos

TinyOS — Ultra-Lightweight RTOS for IoT An ultra-lightweight real-time operating system for resource-constrained IoT and embedded devices. Kernel footprint under 10 KB, 2 KB minimum RAM, preemptive priority-based scheduling. Features Category| Details ---|--- Kernel| Preemptive priority-based...

gdid-reversal

Full writeup of the Windows GDID Global Device Identifier fully reverse engineered -8a2be2 -0078d6 How Microsoft's "Global Device Identifier", the persistent Windows fingerprint named in the July 2026 Scattered Spider complaint, is actually generated, stored, and transmitted. TL;DR !NOTE Listed...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

minicps

MiniCPS MiniCPS is a framework for Cyber-Physical Systems real-time simulation. It includes support for physical process and control devices simulation, and network emulation. It is build on top of mininet. MiniCPS is developed by the SCy-Phy group from SUTD Singapore University of Design and...

HikPwn

HikPwn HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8. This project was born out of curiosity while I was capturing and watching network traffic generated by some Hikvision's software and devices. Setup instructions: git clone...

shodan-eye

Shodan Eye This tool collects all information about all devices that are directly connected to the internet with the specified keywords that you enter. This way, you get a complete overview. Here you can read the latest article about Shodan Eye:...

Kamerka-GUI

Kamerka GUI Kamerka GUI is a Django-based reconnaissance dashboard for discovering, reviewing, and triaging Internet-exposed Industrial Control System, Internet of Things and medical devices. It combines Shodan search data, Google Maps visualization, device screenshots, passive intelligence...

THERE-IS-A-CVE

There is a CVE TIAC 🕵️ There is a CVE is a pentesting tool that leverages to quickly identify vulnerabilities in internet-connected devices. It helps security professionals efficiently detect and assess security flaws. Additionally, it integrates for exploit searching and uses the database to find...