Damn-Vulnerable-Drone

Damn Vulnerable Drone Damn Vulnerable Drone 是一个基于流行的 ArduPilot/MAVLink 架构的故意存在漏洞的无人机黑客模拟器，为动手实践无人机黑客技术提供了逼真的环境。 目录 关于 Damn Vulnerable Drone 什么是 Damn Vulnerable Drone？ 为什么构建它？ 它是如何工作的？ 功能特性 安装 系统要求 获取 Docker（关键依赖） Wi-Fi 模式 非 Wi-Fi 模式 架构 飞行状态 攻击场景 屏幕截图 媒体报道 社区支持 反馈与贡献 维护者 致谢 免责声明 许可证 关于 Damn...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi 是一个用于 Linux 的 2.4 GHz 和 5 GHz WiFi 及蓝牙频谱感知工具。它集成了 WiFi 扫描、蓝牙低功耗（BLE）和经典蓝牙发现、软件定义无线电频谱分析（HackRF、Ubertooth）、GPS 追踪、FAA RemoteID 无人机检测、无人机/漫游车远程操作，以及将 ECS 8.17 索引到 Elasticsearch 或 OpenSearch，统一在一个平台上。完全使用 Python 3 编写。 该项目包含四个可独立或协同工作的组件： 组件| 界面| 用途 ---|---|--- Sparrow-WiFi|...

dronesploit

DroneSploit 轻松地对无人机进行渗透测试。...

skyjack

SkyJack SkyJack es un dron diseñado para buscar, hackear y tomar el control total de forma inalámbrica sobre cualquier otro dron dentro del alcance inalámbrico o de vuelo, creando un ejército de drones zombis bajo tu control. Actualización: Prueba de concepto de SkyJack para drones de 3D Robotics...

skyjack

SkyJack SkyJack is a drone engineered to autonomously seek out, hack, and wirelessly take full control over any other drones within wireless or flying distance, creating an army of zombie drones under your control. Update: Proof of Concept of SkyJack for 3D Robotics drones using the TI CC1111...

SymaX5SW-Rx-Tx

SymaX5SW Rx y Tx Investigación realizada sobre un dron SYMA X5SW con tres objetivos definidos. 1. Interceptar la telemetría del dron y mostrarla en una interfaz gráfica en tiempo real. 2. Crear un transmisor control de comandos, utilizando RF, módulos Arduino y código C. 3. Interceptar el flujo d...

infected-drones

Drones Infectados Vectores de ataque, vulnerabilidades y exploits de Drone a Estación de Control en Tierra Las flotas de drones hoy en día son un operador pilotando docenas o cientos de drones desde una única estación en tierra. Esto convierte a la estación de control en tierra en un objetivo...

DroneCamera

DroneCamera 一款用于查看 HASAKEE FPV 无人机实时视频流的 Android 应用。通过逆向工程无人机 WiFi 摄像头使用的专有 UDP 协议构建。 支持的无人机 HASAKEE FPV 无人机 （WiFi SSID：HASAKEE-WiFi-XXXXX） 使用 0x6363 UDP 协议的 VGA 摄像头 无人机 IP：192.168.0.1，视频端口：40000 其他使用相同协议的 HASAKEE/Lewei 系列无人机可能也可使用。 功能特性 自动连接无人机网络（API 29+ 使用 WifiNetworkSpecifier，API 26-28 检查现有连接）...

PX4-Autopilot

La pila de piloto automático sobre la que construye la industria. Acerca de PX4 es una pila de piloto automático de código abierto para drones y vehículos no tripulados. Admite multirrotores, ala fija, VTOL, rovers y muchas más plataformas experimentales, desde quads de carreras hasta aeronaves d...

CVE-2021-44320

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., video streaming and control by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding...

CVE-2026-78321 DJI Drone HTTP Media Server Denial of Service via Connection Pool Exhaustion

The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...

EUVD-2026-64756

The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker with access to the drone's internal network can exhaust the server's connection pool by repeatedly requesting a stored media file, preventing the server from handling...

CVE-2026-78306 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...

CVE-2026-78255 DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media

The HTTP media server running on DJI drones serves stored photos and videos through the /v2 endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumerate valid filenames and exfiltrate stored...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251

DJI drones (15 models including Mavic 4 Pro, Air 3S, Mini 5 Pro, and others) expose an FTP service with hardcoded credentials shared across affected firmware versions. An attacker with access to the drone's internal network or USB RNDIS interface can upload unlimited files to /blackbox/upgrade/, ...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: gatekeeper, kubescape-server-fips, crossplane-fips, helm-operator, oras-fips, rancher-fleet, conftest-fips, envoy-gateway-fips, kyverno-fips, cilium-cli, k9s-fips, zarf, trivy, ocm-cli, k8ssandra-client-fips, opentofu, helm-operator-fips, kubescape-operator, kyverno,...

Social media platforms crack down on drone factory recruiting game

A video game about drone warfare may look like an unusual cybersecurity story. But cybersecurity isn't only about malware or stolen passwords. Sometimes it's about understanding how online platforms are used to influence decisions, build trust, and persuade people to share personal information or...