CVE-2020-8004

CVE-2020-8004 테스트 $cd openocd-toolbox/scripts/linux/stm32f1x/ $./lock.sh $./attach.sh $telnet localhost 4444 $reset halt $mdw 0x08000000 $cd stm32f1-firmware-extractor $python3 main.py 0x08000000 512 참조 https://blog.zapb.de/stm32f1-exceptional-failure/...

ch55x_firmware_extractor

CH55x экстрактор прошивки Экстрактор прошивки CH55x используется для чтения прошивки из интегральных схем CH55x. В устройствах нет встроенной поддержки для прямого чтения прошивки через загрузчик. Однако существует функция проверки содержимого прошивки по 8 байт за раз с предоставленными данными...

draytek-arsenal

Draytek Arsenal: Draytek 엣지 디바이스를 위한 관찰 가능성 및 보안 강화 툴킷. 고급 공격자들은 점점 더 엣지 디바이스를 표적으로 삼고 있습니다. 그러나 이러한 디바이스는 종종 독점 형식으로 배포되는 펌웨어로 알려진 폐쇄 소스 소프트웨어에 의해 제어됩니다. 이는 보안을 평가하기 위해 펌웨어를 추출하는 방법을 이해해야 하는 방어자와 연구자에게 추가적인 어려움을 의미합니다. 이는 단지 가상의 시나리오에 그치지 않습니다. 최근 고객이 침해 사고를 당했을 때 우리가 직접 경험했기 때문입니다. 고객 인프라의 가장자리...

nec_aterm_tools

necatermtools Questo repository contiene due strumenti sviluppati per ottenere una shell sui router NEC Aterm: 1. nec-aterm-firmware-config-extractor: estrae la HWRANDOMKEY da un'immagine firmware. Questa chiave è necessaria per generare una password valida per il login. 2. rakuraku-nec-shell:...

CVE-2025-51643

CVE-2025-51643: Flash SPI non protetto consente l'estrazione del firmware in Meitrack T366G-L Descrizione I dispositivi Meitrack T366G-L GPS Tracker contengono un chip di memoria flash SPI Winbond 25Q64JVSIQ accessibile senza autenticazione o protezione anti-manomissione. Un attaccante con access...

CVE-2025-67399

CVE-2025-67399 Riepilogo della vulnerabilità Il monitor AQI per smart home AIRTH utilizza un SoC Bluetooth CB3S basato sul chipset BK7231N con numero di versione del software: 2.1.17. Accedendo fisicamente al dispositivo e identificando il SoC, i pin UART di debug/programmazione esposti sono stat...

sony-vp-extract

مستخرج حزم صوت سماعة Sony WH-1000XM4 قم بفك التشفير واستخراج ملفات MP3 الخاصة بالتوجيه الصوتي من ملفات البرامج الثابتة المشفرة لسماعة Sony WH-1000XM4. تم استخراج مفتاح AES-128-CBC عن طريق تف...

ghidra-nanomips

ghidra-nanomips nanoMIPS module for Ghidra. Setup Build root@kitploit: $ ./gradlew -PGHIDRAINSTALLDIR=/opt/ghidra11.0.3 Install The Gradle build task creates a ZIP file in the dist directory. Install it with File Install Extensions in the main Ghidra project window. Reference Material "MIPS...

firmware-mod-kit

Aviso Exportado automaticamente de code.google.com/p/firmware-mod-kit Kit de Modificação de Firmware Este kit é uma coleção de scripts e utilitários para extrair e reconstruir imagens de firmware baseadas em Linux. root@kitploit: Extrair uma imagem de firmware em suas partes componentes O usuário...

firmware-workshop

Extração, Exploração e Emulação Prática de Firmware Junte-se a nós nesta demonstração prática do Unblob, o extrator de firmware flexível. Durante esta sessão de workshop, vamos extrair firmware de um carregador de veículos elétricos, explorar o firmware e, por fim, emulá-lo para interagirmos com ...

CVE-2026-8989

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data...

CVE-2026-8989 Open Recovery Mode

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data...

CVE-2026-50099 Naxclow IoT Platform Insertion of sensitive information into Externally-Accessible file or directory

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits...

CVE-2026-50099 Naxclow IoT Platform Insertion of sensitive information into Externally-Accessible file or directory

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits...

EUVD-2026-36538

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits...

PT-2026-48956

During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interactive RT-Thread shell that permits...

EUVD-2026-8994

Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker or anyone paying attention, the firmware updates may be altered by an unauthorized user, and then trusted by a Unitree product, such as the Unitree Go2 and other models...

CVE-2026-1442

Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker or anyone paying attention, the firmware updates may be altered by an unauthorized user, and then trusted by a Unitree product, such as the Unitree Go2 and other models...

CVE-2026-1442

Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker or anyone paying attention, the firmware updates may be altered by an unauthorized user, and then trusted by a Unitree product, such as the Unitree Go2 and other models...

CVE-2017-18347

Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug SWD commands because there is a race condition between full initialization of the SWD...