122 matches found
xortool
xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...
CMF-Watch-Pro-2-BLE-Protocol
CMF Watch Pro 2 — Protocollo BLE reverse-engineered Ufficioso. Questo documento descrive il protocollo Bluetooth Low Energy BLE del CMF Watch Pro 2 CMF by Nothing, ricostruito tramite reverse engineering per un'app companion alternativa. Non è affiliato o approvato da Nothing/CMF. Utilizzalo a tu...
bn-uefi-helper
bn-uefi-helper ATTENTION: This plugin has been deprecated. See EFI Resolver Description Helper plugin for analyzing UEFI firmware. This plugin contains the following features: Apply the correct prototype to the entry point function Fix segments so all segments are RWX and have the correct semanti...
Firmware-analysis
لا يحتوي هذا المستودع على ملف README...
IoT-Vulnerability-Research-Public
Sicurezza Hardware e Ricerca sulle Vulnerabilità Questo repository funge da archivio pubblico centralizzato per la mia ricerca indipendente sulle vulnerabilità, audit hardware e Coordinated Vulnerability Disclosures CVD. Tutti gli script proof-of-concept, le estrazioni di firmware e gli smontaggi...
embark
EMBArk - L'ambiente di scansione della sicurezza del firmware Informazioni EMBArk è uno strumento per l'analisi centralizzata dei firmware. Scansiona, Identifica, Traccia, Segnala. Progettato per essere semplice ma potente. È l'interfaccia enterprise basata sul web per lo scanner di sicurezza del...
ipsw
ipsw Coltellino svizzero per la ricerca su iOS/macOS Cos'è ipsw 🤔 ipsw è un framework di ricerca completo da riga di comando per iOS e macOS. Offre un'ampia gamma di strumenti per ricercatori di sicurezza, reverse engineer, sviluppatori di jailbreak e appassionati iOS per scaricare, analizzare e...
uefi_retool
uefiretool Ein Werkzeug zum Reverse Engineering von UEFI-Firmware. UEFI-Firmware-Analyse mit dem uefiretool-Skript Verwendung: Kopieren Sie das Skript idaplugin/uefianalyser.py und das Verzeichnis idaplugin/uefianalyser in das IDA-Plugins-Verzeichnis Bearbeiten Sie die Datei config.json PEDIR ist...
IoT-PT-v1
🛠️ IoT-PT OS v1 Penetrationstest-Betriebssystem für das Internet der Dinge – Version 1 📦 Was ist IoT-PT OS v1? IoT-PT OS v1 ist eine Penetrationstest-Virtualmaschine, die speziell für IoT-Sicherheitsbewertungen entwickelt wurde. Sie enthält vorkonfigurierte Werkzeuge, Skripte und Umgebungen, die...
CVE-2026-12001
A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through...
CVE-2026-7786 Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials
Jinan USR IOT Technology Limited PUSR USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services...
USR-W610 信任管理问题漏洞
USR-W610 is an industrial-grade serial-to-Wi-Fi networking module developed by USR. The USR-W610 has a trust management vulnerability, which stems from the inclusion of plaintext management credentials in the firmware. This vulnerability could allow credentials to be extracted through firmware...
Exploit for Code Injection in Iptime N104S-R1_Firmware
CVE-2025-55423 — ipTIME UPnP Command Injection: Analysis & Rep...
CVE-2025-1242
The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicio...
CVE-2025-1242
The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicio...
PT-2026-4753
Name of the Vulnerable Software and Affected Versions Access Manager 92xx hardware revision K7 affected versions not specified Description The Access Manager 92xx hardware revision K7 utilizes a Linux-based operating system, differing from older revisions that used Windows CE. An SSH service is...
Exploit for CVE-2020-98765
FirmwareForge - Advanced Firmware & Hardware Exploitation Tool...
EUVD-2020-3852
Malware in sbrugna...