dns-rebind-toolkit

DNS Rebind Toolkit Demo | Security Advisory | Included Payloads | FAQ DISCLAIMER: This software is for educational purposes only. This software should not be used for illegal activity. The author is not responsible for its use. Don't be a dick. DNS Rebind Toolkit is a frontend JavaScript framewor...

test_avb_key

On Almost Signing Android Builds Introduction An error sometimes encountered by NCC Group consultants is signing Android builds with known private keys. This leaves the device manufacturers and in turn their users vulnerable, even on devices where secure boot is enabled. This blog post has two...

CVE-2026-0163-EXP

CVE-2026-0163 DISCLAIMER This repository is for educational and research purposes only. The author is not responsible for any misuse, damage, or illegal activities caused by the use of this material. Use at your own risk. Respect applicable laws and ethical guidelines. Overview A functional remot...

peniot

PENIOT: Herramienta de Pruebas de Penetración para IoT Tabla de Contenidos Descripción del Proyecto ¿Qué es PENIOT? ¿Por qué se necesita PENIOT? ¿Qué proporciona PENIOT? Instrucciones de Compilación Documentación Pruebas Contribuyentes Nota del Desarrollador Póster del Proyecto Descripción del...

uberscan

uberscan Security program for pen-testing servers, routers and IoT devices btw my bitcoin address is 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Here's an alternative, also for BTC, as I've been getting reports of some bitcoin wallets not supporting certain addresses: 1PEDKUiUTxGNJ3XTPfXCTAjpzVzX1VZAme...

IoT-Implant-Toolkit

IoT-Implant-Toolkit IoT-Implant-Toolkit es un framework de herramientas útiles para la investigación de implantación de malware en dispositivos IoT. Es un conjunto de herramientas compuesto por software esencial para la modificación de firmware, depuración de puertos serie, análisis de software y...

firmware-mod-kit

Descargo de responsabilidad Exportado automáticamente desde code.google.com/p/firmware-mod-kit Kit de Modificación de Firmware Este kit es una colección de scripts y utilidades para extraer y reconstruir imágenes de firmware basadas en Linux. root@kitploit: Extraer una imagen de firmware en sus...

vamp-forticheck

vamp-forticheck Multi-Vendor Edge Device CVE Scanner — VampSecure Labs Overview vamp-forticheck is an asynchronous, non-destructive security scanner that detects CVE vulnerabilities across seven major network security vendors. It performs a structured three-phase analysis: 1. Passive detection —...

ca-clone

CA Cloning Scripts Scripts to clone CA certificates for use in HTTPS client attacks. Currently includes scripts to clone a root Comodo CA, and a Digicert CA, both of which are fairly widely trusted in IoT devices. Usage Run either script in place to automatically generate a key and certificate. I...

draytek-arsenal

Draytek Arsenal: Observability and hardening toolkit for Draytek edge devices. Advanced attackers are increasingly choosing edge devices as targets. However, these devices are controlled by closed-source software known as firmware, often distributed in a proprietary format. This is an added...

NINJA-PingU

NINJA PingU NINJA-PingU Is Not Just a Ping Utility is a free open-source high performance network scanner tool for large scale analyses. It has been designed with performance as its primary goal and developed as a framework to allow easy plugin creation. NINJA PingU comes out of the box with a se...

awind-research

Awind Research This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and OEM'ed to multiple manufacturers. The repository is split into these subsections: hardware - hardware hacking stuff, mostly for MMC dumpin...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

FireShodanMap

FireShodanMap FireShodanMap es un mapa en tiempo real que integra Firebase y Shodan. Se realiza una búsqueda utilizando Shodan para encontrar dispositivos vulnerables y se muestran en el mapa para su análisis. Todos los datos actualizados en Firebase son en tiempo real. Cambios Tenemos un archivo...

Kamerka-GUI

Kamerka GUI Kamerka GUI es un panel de reconocimiento basado en Django para descubrir, revisar y clasificar dispositivos de Sistemas de Control Industrial, Internet de las Cosas y dispositivos médicos expuestos en Internet. Combina datos de búsqueda de Shodan, visualización de Google Maps, captur...

WhatsApp-OSINT

WHATS OSINT 🕵️‍♂️ Herramienta OSINT para WhatsApp que permite obtener fotos de perfil, verificar cuentas Business, consultar estado e información de usuario, analizar dispositivos vinculados, revisar ajustes de privacidad y acceder a datos completos mediante la API WhatsApp OSINT de RapidAPI...

CVE-2024-7029

PoC tool for exploiting CVE-2024-7029 in AvTech devices 🎤 README Translation English فارسی 📸 Screenshot 💎 Introduction CVE-2024-7029 highlights a severe security issue in AVTech devices, where attackers can bypass authentication and execute arbitrary commands remotely. This vulnerability poses...

kyocera-cve-2022-1026_SOAP1.1

Kyocera cve-2022-1026 soap1.1 Authorized testing only. This project is provided for educational and defensive validation purposes in environments you own or have explicit permission to test. Do not use against systems you do not own or administer. A Kyocera printer exposure check and data-retriev...

gdid-reversal

Full writeup of the Windows GDID Global Device Identifier fully reverse engineered -8a2be2 -0078d6 How Microsoft's "Global Device Identifier", the persistent Windows fingerprint named in the July 2026 Scattered Spider complaint, is actually generated, stored, and transmitted. TL;DR !NOTE Listed...

HikPwn

HikPwn HikPwn, un escáner simple para dispositivos Hikvision con capacidades básicas de escaneo de vulnerabilidades escrito en Python 3.8. Este proyecto nació de la curiosidad mientras capturaba y observaba el tráfico de red generado por algunos software y dispositivos de Hikvision. Instrucciones...