nexmon

¿Qué es nexmon? Nexmon es nuestro framework de parcheo de firmware basado en C para chips WiFi Broadcom/Cypress que te permite escribir tus propios parches de firmware, por ejemplo, para habilitar el modo monitor con cabeceras radiotap e inyección de tramas. A continuación, encontrarás una visión...

polypyus

Polypyus Firmware Historian Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware historian. Polypyus works without disassembling these binaries, which is an advantage for binaries that are complex to disassemble and where...

polypyus

Polypyus Historiador de Firmware Polypyus aprende a localizar funciones en binarios sin procesar extrayendo funciones conocidas de binarios similares. Por lo tanto, es un historiador de firmware. Polypyus trabaja sin desensamblar estos binarios, lo cual es una ventaja para binarios complejos de...

Root-My-Galaxy-S938B

Root My Galaxy — S938B Root My Galaxy is a firmware-profiled installer for temporary KernelSU root on supported Samsung builds. This fork is maintained for the Galaxy S25 Ultra SM-S938B running: root@kitploit: Build: BP4A.251205.006.S938BXXSBCZG3 Kernel:...

netwave-dosvulnerability

Netwave IP Camera server vulnerable to unauthenticated Denial of Service via one single huge POST request on any firmware. CVE| Description ---|--- CVE-2018-6479| Unauthenticated remote Denial of Service vulnerability CVSS| Score| Details ---|---|--- 3| 7.3|...

CVE-2023-27216

CVE-2023-27216 - DLink Router This document is my personal experience of me - a newbie into firmware reversing and exploiting. Scope For demonstration, we will analyze and reproduce CVE-2023-27216. CVE number: CVE-2023-27216 Vulnerability description: An issue found in D-Link DSL-3782 v.1.03 allo...

PcanExploit

CVE-2024-44610: PEAK PCAN-Ethernet Gateway FD DR Authenticated Root Exploit What is it? This repository contains a Proof-of-Concept PoC exploit that executed code as root on Peak Ethernet gateways. It requires that you know the credentials to the web interface. How to fix it? The vendor has rapid...

chipsec

CHIPSEC：平台安全评估框架 CHIPSEC 是一个用于分析 PC 平台安全性的框架，包括硬件、系统固件（BIOS/UEFI）和平台组件。它包含一个安全测试套件、访问各种低级接口的工具以及取证能力。它可以在 Windows、Linux 和 UEFI shell 上运行。有关安装和使用 CHIPSEC 的说明，请参阅手册。 注意：本软件用于安全测试目的。使用风险自负。使用前请阅读 WARNING.txt。 CHIPSEC 的第一个版本于 2014 年 3 月发布： 在 CanSecWest 2014 上的公告 最近关于如何使用 CHIPSEC...

CVE-2024-24919

Check Point Security Gateway RCE Exploit Tool CVE-2024-24919 Overview This repository contains a tool for exploiting the CVE-2024-24919 vulnerability in Check Point Security Gateways. The tool is a multi-scanner that can identify vulnerable devices and a single-target exploit that can take full...

tp-link-decrypt

NOTA: a partir del 5 de octubre de 2025, este proyecto ahora está obsoleto. Nate Robbins ha tenido la amabilidad de hacerse cargo y ha añadido el descifrado de switches - https://github.com/robbins/tp-link-decrypt...

CVE-2022-24654

CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Management Syslog 3. In the "Field Server Address" inject the payload "-prompt"XSS"-" 4. Click Save 5...

CVE-2023-22960

PoC para CVE-2023-22960 Detalles PoC para CVE-2023-22960 que descubrí. Esta vulnerabilidad permite a un atacante eludir el mecanismo de prevención de fuerza bruta de credenciales de la interfaz del Servidor Web Integrado de todos los modelos de impresoras Lexmark que tengan una versión de firmwar...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure, denial of service and code execution. CVE-2018-12031 To exploit vulnerability, someone could use...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

IoTGoat

EL REPOSITORIO OFICIAL SE HA MOVIDO Ahttps://github.com/OWASP/IoTGoat Descripción El Proyecto IoTGoat es un firmware deliberadamente inseguro basado en OpenWrt y mantenido por OWASP para educar a los usuarios sobre cómo probar las vulnerabilidades más comunes encontradas en dispositivos IoT. Los...

internalblue

Los chips de Broadcom se utilizan en aproximadamente mil millones de dispositivos, como todos los iPhones , MacBooks , la serie Samsung Galaxy S , la serie Google Nexus más antigua, los Thinkpads más antiguos, los Raspberry Pis , varios dispositivos IoT y más. En 2016, Cypress adquirió la divisió...

CVE-2021-3166

An issue was discovered on Asus DSL-N14UB1 v.1.1.2.3805. An attacker can upload any file to the Firmware box as long as it is renamed as SettingsProductName.trx eg. SettingsDSL-N14U-B1.trx. Once the file is loaded, shutdown measures on a wide range of services are triggered as if it were a real...

cisco-rce

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

CVE-2021-4045

🔍 CVE-2021-4045: Command Injection Vulnerability in TP-Link Tapo C200 CVE-2021-4045 📌 Summary CVE-2021-4045 is a command injection vulnerability discovered in the TP-Link Tapo C200 camera, allowing an attacker to take full control of the device withroot privileges. This vulnerability affects all...

powerg-tools

Herramientas de análisis de PowerG Una colección de herramientas para la ingeniería inversa e interacción con el protocolo de radio PowerG. Esta versión acompaña la investigación que James Chambers y Sultan Qasim Khan presentaron en REcon y hardwear.io. Consulta la grabación de la presentación y...