dronesploit

DroneSploit Pentestez facilement des drones...

Damn-Vulnerable-Drone

Damn Vulnerable Drone Le Damn Vulnerable Drone est un simulateur de hacking de drones intentionnellement vulnérable basé sur l'architecture populaire ArduPilot/MAVLink, offrant un environnement réaliste pour l'apprentissage pratique du piratage de drones. Table des matières À propos du Damn...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi — это инструмент для анализа спектра 2,4 ГГц и 5 ГГц WiFi и Bluetooth для Linux. Он объединяет в себе сканирование WiFi, обнаружение Bluetooth Low Energy и Classic, анализ спектра с помощью программно-определяемого радио HackRF, Ubertooth, GPS-трекинг, обнаружение дронов...

DroneCamera

DroneCamera Android-приложение для просмотра прямого видеопотока с FPV-дронов HASAKEE. Создано путём реверс-инжиниринга проприетарного UDP-протокола, используемого WiFi-камерой дрона. Поддерживаемый дрон FPV-дрон HASAKEE WiFi SSID: HASAKEE-WiFi-XXXXX VGA-камера с использованием UDP-протокола 0x63...

SymaX5SW-Rx-Tx

SymaX5SW Rx and Tx Исследование, проведённое на дроне SYMA X5SW, с тремя поставленными целями. 1. Перехватить телеметрию дрона и отображать её в графическом интерфейсе в реальном времени. 2. Создать передатчик командное управление, используя радиочастотные модули, Arduino и код на C. 3. Перехвати...

CVE-2026-78321 DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion

The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...

EUVD-2026-64756

The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...

CVE-2026-78306 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...

CVE-2026-78255 DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media

The HTTP media server running on DJI drones serves stored photos and videos through the /v2 endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumerate valid filenames and exfiltrate stored...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones (15 models including Mavic 4 Pro, Air 3S, Mini 5 Pro, and others) expose an FTP service with hardcoded credentials shared across affected firmware versions. An attacker with access to the drone's internal network or USB RNDIS interface can upload unlimited files to /blackbox/upgrade/, ...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

skyjack

SkyJack SkyJack is a drone engineered to autonomously seek out, hack, and wirelessly take full control over any other drones within wireless or flying distance, creating an army of zombie drones under your control. Update: Proof of Concept of SkyJack for 3D Robotics drones using the TI CC1111...

skyjack

SkyJack SkyJack — это дрон, созданный для автономного поиска, взлома и беспроводного полного захвата управления над любыми другими дронами в пределах радиуса действия или полёта, создавая армию дронов-зомби под вашим контролем. Обновление: Подтверждение концепции SkyJack для дронов 3D Robotics с...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cluster-api-helm-controller, gatekeeper, cert-manager-cmctl, xeol, rancher-agent, cloudbeat-fips, rancher-fleet, kube-mgmt, kyverno-notation-aws-fips, argo-cd-fips, gogatekeeper, eksctl, cert-manager-cmctl-fips, tw, kube-arangodb, linkerd2-fips,...

Social media platforms crack down on drone factory recruiting game

A video game about drone warfare may look like an unusual cybersecurity story. But cybersecurity isn't only about malware or stolen passwords. Sometimes it's about understanding how online platforms are used to influence decisions, build trust, and persuade people to share personal information or...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, calico-fips, seaweedfs-rocksdb-fips, external-secrets-operator-fips, gatekeeper, kaf, nemo, rancher-agent, frankenphp-8.2, cloudbeat-fips, knative-serving-fips, kubevela-fips, etcd, argo-cd-fips, gitea, prometheus, knative-kafka-broker,...

New GhostShell Hacking Group Targets Ukraine’s Drone Defense Sector

Researchers warn GhostShell is using fake drone documents to target Ukrainian defence teams, stealing passwords and sensitive data in a new cyber campaign...

EUVD-2026-37716

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account pre-hijacking attack in which an attacker could register an account using a victim's email address with an attacker-controlled password before the victim completed accoun...

Framework for Discovering GPS Spoofing Attacks in Drone Swarms

Swarm robotics, particularly drone swarms, are used in various safety-critical tasks. While a lot of attention has been given to improving swarm control algorithms for improved intelligence, the security implications of various design choices in swarm control algorithms have not been studied. We...