esp8266_deauther

ESP8266 Deauther WiFi 장치를 스캔하고, 선택한 연결을 차단하며, 수십 개의 네트워크를 생성하고 WiFi 스캐너를 혼란시킵니다. 새 문서 안녕하세요 👋 이 프로젝트에 대한 정보는 Deauther.com을 방문해 주세요. 다음은 빠른 링크입니다: 구매 다운로드 DIY 튜토리얼 사용법 FAQ 비밀번호 pwned의 비밀번호는 deauther입니다. 이 프로젝트에 대해 이 펌웨어를 사용하면 ESP8266을 사용하여 802.11 네트워크를 테스트하기 위한 다양한 작업을 쉽게 수행할 수 있습니다. 또한 WiFi,...

esp_wifi_repeater

espwifirepeater 완전한 기능을 갖춘 WiFi NAT 라우터 그리고 이제는 WiFi 리피터, 즉 L2 브리지 2026년 신규: 첫 출시 후 10년 만에 드디어 원래 의도했던 대로진정한 WiFi 리피터 가 되었습니다. 기존 문서와 링크를 깨지 않기 위해 표준 버전은 여전히 잘 알려진 고급 기능을 갖춘 NAT 라우터 버전으로 유지됩니다. 하지만 단순화된 진정한 L2 브리지에 관심이 있다면 아래 ESP8266 WiFi Repeater - L2 bridge 섹션을 참조하세요. 이것은 esp8266 및 esp8285에서 Wi...

esp32_esp8266_attacks

ESP32/ESP8266 Wi-Fi攻撃 このリポジトリは、ASSET Research Groupの研究成果の一部です。 このリポジトリでは、人気のESP32/8266 IoTデバイスに対する3つのWi-Fi攻撃を実演しています: Zero PMK Installation CVE-2019-12587 - エンタープライズネットワークに接続されたESP32/ESP8266クライアントの乗っ取り; ESP32/ESP8266 EAPクライアントクラッシュ CVE-2019-12586 - エンタープライズネットワークに接続されたESPデバイスのクラッシュ;...

skylift

SkyLift V0.4 6月15日に公開予定 python3 click より使いやすいCLIパーサーワークフロー タイムスタンプの修正 SkyLift V0.3 SkyLiftは低コストの地理位置情報スプーフィングデバイスです。現在はESP8266を使用してWiFiビーコンフレームをブロードキャストし、WiFi地理位置情報サービスにおける長年にわたる2008年の脆弱性を悪用します。 この3番目のプロトタイプ版であるSkyLiftは、Akademie Schloss...

CVE-2026-54571: Integer Overflow or Wraparound

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3.11.1, the multipart/form-data parser in src/WebRequest.cpp stores boundaryPosition as an 8-bit value while parseMultipartPostByte processes the boundary. A remote request...

EUVD-2020-3404

Malware in sbrugna...

EUVD-2019-4182

Malware in sbrugna...

EUVD-2024-0877

Malicious code in bioql PyPI...

CVE-2025-53094: Improper Neutralization of CRLF Sequences

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. In versions up to and including 3.7.8, a CRLF Carriage Return Line Feed injection vulnerability exists in the construction and output of HTTP headers within AsyncWebHeader.cpp. Unsanitize...

CVE-2019-12588

The client 802.11 mac implementation in Espressif ESP8266NONOSSDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service crash via a crafted...

CVE-2020-11015

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

CVE-2024-27287 ESPHome vulnerable to stored Cross-site Scripting in edit configuration file API

ESPHome is a system to control your ESP8266/ESP32 for Home Automation systems. Starting in version 2023.12.9 and prior to version 2024.2.2, editing the configuration file API in dashboard component of ESPHome version 2023.12.9 command line installation and Home Assistant add-on serves unsanitized...

CVE-2024-27287

ESPHome’s CVE-2024-27287 affects the dashboard’s edit API in ESPHome 2023.12.9 up to 2024.2.1 (prior to 2024.2.2). A remote, authenticated user can inject arbitrary JavaScript via the /edit endpoint by posting to /edit?configuration=[file], storing unsanitized data in a page served with Content-T...

CVE-2024-27081

CVE-2024-27081 concerns ESPHome, where a security misconfiguration in the dashboard’s edit-configuration API (affecting the 2023.12.9 CLI installation) allowed authenticated remote attackers to read and write arbitrary files under the configuration directory, potentially yielding remote code exec...

CVE-2020-11015

CVE-2020-11015 affects the thinx-device-api IoT Device Management Server prior to firmware 2.5.0. The root issue allows a spoofed MAC address to bypass UDID checks during initial registration, potentially enabling creation of a new UDID with the same MAC address (noted to apply to ESP8266/ESP32 d...

CVE-2020-11015 Device Authentication Vulnerability in thinx-device-api IoT Device Management Server

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

CVE-2020-11015: Authentication Bypass by Spoofing

A vulnerability has been disclosed in thinx-device-api IoT Device Management Server before version 2.5.0. Device MAC address can be spoofed. This means initial registration requests without UDID and spoofed MAC address may pass to create new UDID with same MAC address. Full impact needs to be...

PYSEC-2021-351

ESPHome is a system to control the ESP8266/ESP32. Anyone with webserver enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which webserver allows over-the-air OTA updates without checking user defined basic auth username & password. This issue is...

Default credentials

ESPHome is a system to control the ESP8266/ESP32. Anyone with webserver enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which webserver allows over-the-air OTA updates without checking user defined basic auth username & password. This issue is...

CVE-2020-12638

The CVE affects Espressif IoT SDKs: ESP-IDF up to 4.2, ESP8266_NONOS_SDK up to 3.0.3, and ESP8266_RTOS_SDK up to 3.3. A forged-beacon-frame exploit forces a device to switch its authentication mode to OPEN, effectively disabling 802.11 encryption. The underlying issue is an encryption bypass trig...