268 matches found
workshop_firmware_reverse_engineering
ワークショップ: ファームウェアリバースエンジニアリング このリポジトリには、ScapyCon Automotive 2025 で発表された Emproof のファームウェアリバースエンジニアリングワークショップ向けのスライドとハンズオン教材が含まれています。このワークショップは、セキュリティ経験がほとんどない技術者を対象としており、実践的で自己完結型のタスクを通じて基礎を教えます。トピックは次のとおりです。 基本的なファイル/ELF解析; ソフトウェアクラッキングとキージェネレーション; 文字列の復号とマルウェアのトリアージ; 組み込みLinuxファームウェアの展開; ベアメタル解析;...
firmware-workshop
ハンズオン：ファームウェアの抽出・探索・エミュレーション このハンズオンデモでは、柔軟なファームウェア抽出ツールであるUnblobを体験していただきます。 このワークショップセッションでは、EV充電器からファームウェアを抽出し、ファームウェアを詳しく調べ、最終的にエミュレーションして、サービスとリアルタイムにやり取りできるようにします。Unblobはハードウェア版とダウンロード版の両方のファームウェアに対応しているため、ターゲットとなる環境は豊富です。事前経験は不要で、あらゆるスキルレベルに適したセッションです。皆様のご参加をお待ちしています。 対象ターゲット...
Blue Angel Software Suite (5V Technologies) - OS Command Injection
Blue Angel 5V Technologies Blue Angel Software Suite through 20230920, as used in Analog Telephone Adapter ATA and Voice over IP VoIP devices, allows remote authenticated attackers to execute arbitrary OS commands as root via shell metacharacters in the pingaddr parameter to...
firmadyne
目次 目次 はじめに セットアップ 抽出ツール データベース バイナリ QEMU 使い方 FAQ run.sh が生成されない ログが "Kernel panic - not syncing: No working init found" で終了する プロセスがクラッシュした場合（例：dopagefault 2: sending SIGSEGV for invalid read access from 00000000） エミュレートされたファームウェアをデバッグするには？ ソースからのコンパイル ツールチェーン コンソール libnvram カーネル ARM MIPS データベース デ...
thetick
The Tick 一个简单的嵌入式 Linux 后门。 The Tick 编译 安装 使用 媒体 编译 The Tick 仅依赖 libcurl，因此请确保已安装相应的开发包。例如，在基于 Debian 的发行版上，您可以执行以下操作： sudo apt-get install libcurl-dev 依赖安装完成后，只需运行 makefile： cd src make clean make 当“make”命令执行完毕后，编译生成的二进制文件可以在“bin”文件夹中找到。这就是您需要在目标机器上运行以对其进行远程控制的二进制文件。...
CLEANSTART-2026-LW63559 Security fixes in smarter-device-manager 1.20.11-r2
Package smarter-device-manager version 1.20.11-r2 fixes 1 vulnerabilities: CVE-2026-46600...
CVE-2026-9266
A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...
CVE-2026-9266
A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...
CVE-2026-9266: Missing Cryptographic Step
A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...
SWUpdate 安全漏洞
SWUpdate is an embedded Linux system update tool developed by Stefano Babic. Versions of SWUpdate prior to 2026.05 contained security vulnerabilities. These vulnerabilities were due to race conditions between the check time and the usage time, which could allow local non-privileged users to gain...
JUNG Smart Visu Server 1.1.1050 - Dos
Exploit Title: JUNG Smart Visu Server 1.1.1050- Dos CVE: CVE-2026-26235 Date: 2026-02-12 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/banyamer-security Vendor Homepage: https://www.jung.de Software Link:...
[SECURITY] Fedora 43 Update: rauc-1.15.2-1.fc43
RAUC is a lightweight update client that runs on your Embedded Linux device and reliably controls the procedure of updating your device with a new firmwa re revision. RAUC is also the tool on your host system that lets you create, inspect and modify update artifacts for your device. Service is no...
Linux Distros Unpatched Vulnerability : CVE-2026-34155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cau...
CVE-2026-34155
RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...
DEBIAN-CVE-2026-34155
RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...
CVE-2026-34155
RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...
UBUNTU-CVE-2026-34155
RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...
EUVD-2026-17413
RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...
CVE-2026-34155 RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB
RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a...