firmware-mod-kit

免责声明 从 googlecode.com/p/firmware-mod-kit 自动导出 固件修改工具包 本工具包是一套脚本和工具，用于提取和重建基于 Linux 的固件映像。 将固件映像提取为其组成部件 用户对固件文件系统或 Web UI（webif）进行所需修改 重建固件 将修改后的固件刷写到设备上并使其变砖（哈哈） 警告：使用本工具包后你的设备将会变砖（也许不会，但最好还是说会）。变砖意味着设备实际上变成了一块无功能的“砖头”。有时无需硬件修改即可恢复。有时需要硬件修改（例如在 PCB 上焊接串行或 JTAG 接头）。有时根本不可行，或者总恢复成本超过设备本身价值。...

CVE-2025-51643

CVE-2025-51643: Flash SPI sin protección permite la extracción de firmware en Meitrack T366G-L Descripción Los dispositivos de rastreo GPS Meitrack T366G-L contienen un chip de memoria flash SPI Winbond 25Q64JVSIQ que es accesible sin autenticación ni protección contra manipulaciones. Un atacante...

sony-vp-extract

Sony WH-1000XM4 语音包提取器 从索尼 WH-1000XM4 加密固件文件中解密并提取语音指导 MP3 提示。 AES-128-CBC 密钥是通过使用 RACE 协议 通过蓝牙低能耗 BLE 转储耳机 Airoha MT2811 固件，然后反汇编 ARM Cortex-M4 FOTA 解密例程而提取的。完整技术文章：docs/WRITEUP.md 快速开始...

draytek-arsenal

Draytek Arsenal: kit de observabilidad y endurecimiento para dispositivos perimetrales Draytek. Los atacantes avanzados eligen cada vez más los dispositivos perimetrales como objetivos. Sin embargo, estos dispositivos están controlados por software de código cerrado conocido como firmware, a menu...

CVE-2020-8004

CVE-2020-8004 Prueba $cd openocd-toolbox/scripts/linux/stm32f1x/ $./lock.sh $./attach.sh $telnet localhost 4444 $reset halt $mdw 0x08000000 $cd stm32f1-firmware-extractor $python3 main.py 0x08000000 512 Referencias https://blog.zapb.de/stm32f1-exceptional-failure/...

ch55x_firmware_extractor

Extractor de firmware CH55x El extractor de firmware CH55x se utiliza para leer el firmware de los circuitos integrados CH55x. No hay soporte integrado en los dispositivos para leer directamente el firmware a través del bootloader. Sin embargo, existe una funcionalidad para verificar el contenido...

mtk_bp

MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...

nec_aterm_tools

necatermtools Este repositorio contiene dos herramientas desarrolladas para obtener un shell en routers NEC Aterm: 1. nec-aterm-firmware-config-extractor: extrae la HWRANDOMKEY de una imagen de firmware. Esta clave es necesaria para generar una contraseña válida para iniciar sesión. 2...

firmware-workshop

Extracción, exploración y emulación práctica de firmware Únete a nosotros en esta demostración práctica de Unblob, el extractor de firmware flexible. Durante esta sesión del taller, extraeremos firmware de un cargador de vehículos eléctricos, indagaremos en el firmware y, finalmente, lo emularemo...

CVE-2025-67399

CVE-2025-67399 Resumen de vulnerabilidad El monitor AQI Smart Home AIRTH utiliza un SoC Bluetooth CB3S basado en el chipset BK7231N con número de versión de software: 2.1.17. Accediendo físicamente al dispositivo e identificando el SoC, se localizaron los pines de depuración/programación UART...

firmware-reverse-engineering

Habilidades de Ingeniería Inversa de Firmware Cinco habilidades de agente de OrbitCurve para extracción de firmware, análisis estático, ingeniería inversa con Ghidra, emulación y reportes de seguridad, por Hussein Muhaisen. La colección empaqueta los flujos de trabajo existentes, referencias,...

CVE-2026-8989

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data...

CVE-2026-8989 Open Recovery Mode

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data...

CVE-2026-8989 Open Recovery Mode

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data...

CVE-2026-8989: On-Chip Debug and Test Interface With Improper Access Control

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data...

CVE-2026-50099 Naxclow IoT Platform Insertion of sensitive information into Externally-Accessible file or directory

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits...

CVE-2026-50099 Naxclow IoT Platform Insertion of sensitive information into Externally-Accessible file or directory

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits...

EUVD-2026-36538

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits...

CVE-2026-50099: Insertion of Sensitive Information into Externally-Accessible File or Directory

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits...

PT-2026-48956

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits...