fragattacks

FragAttacks: Fragmentation & Aggregation Attacks 1. Introduction This repository contains the FragAttacks tool. It can test Wi-Fi clients and access points for fr agmentation and ag gregation attacks. These vulnerabilities affect all protected Wi-Fi networks. For more information about these...

CVE-2022-1077

CVE-2022-1077 Description A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely an...

hbp-attack-demo

fork from https://github.com/veritas501/hbpattackdemo hbpattack demo Reference: P0 blog: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html Created a vuln module, pretending we have a kernel arbitrary address write primitive, but KASLR is...

mora-hwbp

Mora-HWBP — AMSI / WLDP / ETW Telemetry Hooking via Hardware Breakpoints A security-research Proof-of-Concept POC demonstrating hardware-breakpoint CPU debug register based function hooking as an alternative to traditional in-memory code patching. Purpose & Scope This repository is published...

Hardware Hacking Cheatsheet

Hardware Hacking Cheatsheet TOC Disclaimer I'm a noob who's trying to learn this type of things so maybe something could be not 100% correct Sorry for bad english Notes Follow the easyest path first methodology Sometimes you will need to solder stuff; here a quick and simple how to You could have...

hardware-compliance-handbook

Hardware Compliance Knowledge Base A fact-checked, open reference on the EU laws that govern hardware and IoT cybersecurity — CRA, RED, NIS2, and the Cybersecurity Act/EUCC, in one place instead of four. Prepared by Platanor Technologies platanor.com — an embedded security firm for IoT device...

HWSyscalls

HWSyscalls Main Contributors Description HWSyscalls is a new method to execute indirect syscalls using 3 main components: Hardware breakpoints and Vectored Exception Handler to control the flow of execution. HalosGate is used to find syscall numbers and addresses. Creating a synthetic trampoline ...

CVE-2026-99146

A flaw was found in the Linux kernel's Intel i915 graphics driver. When parsing Display Microcontroller DMC firmware headers, the driver fails to validate the target load address against allowed memory ranges. An attacker capable of supplying a crafted firmware file could exploit this vulnerabili...

openentropy

openentropy Measure and operationalize hardware entropy for research and security. Collect entropy from on-device hardware sources, analyze source quality with statistical tests, and deliver raw or conditioned output through CLI, Rust, Python, and HTTP interfaces. One workflow for entropy researc...

SuperDiagnosticTool

SuperDiagnosticTool AI-Powered Windows Diagnostic & Remediation Tool SuperDiagnosticTool collects real-time hardware telemetry, sends it to the Google Gemini API for analysis, and generates PowerShell remediation scripts to address detected issues. It includes multiple validation layers that a...

Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability Research An in-depth research paper and hands-on Proof-of-Concept PoC exploring speculative execution attacks on modern CPUs. 📖 Overview This project is a research and lab-based exploration of Spectre Variant 2 CVE-2017-5715 , also known...

IoT-Vulnerability-Research-Public

Hardware Security & Vulnerability Research This repository serves as a centralized public archive for my independent vulnerability research, hardware audits, and Coordinated Vulnerability Disclosures CVD. All proof-of-concept scripts, firmware extractions, and hardware teardowns are published her...

cve-2021-31630

This script automatically exploits vulnerability in OpenPLC Web Server v3 You will be able to create an automatic Rever Shell with the server without having to use manual techniques. CVE-2021-31630 Detail Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code...

amradio

AM Radio Break-in System A 12-channel AM radio broadcast system using Red Pitaya FPGA for emergency alert transmission in unmanned tunnels. Why AM radio in a tunnel? During construction and maintenance, vehicles with standard AM radios transit through tunnels that have no mobile coverage. AM...

CVE-2026-99210

A flaw was found in the Linux kernel's accel/rocket driver. This flaw can lead to a Denial of Service DoS through a system crash under specific hardware initialization failure conditions. If initial device setup fails, the driver does not properly clear an internal reference pointer, leaving an...

CVE-2026-98957

A flaw was found in the Linux kernel's MT7915 wireless driver. The driver fails to properly disable receive network polling before freeing device resources during hardware teardown or module unloading. This flaw may allow a local privileged user to induce kernel warnings and cause system...

CVE-2026-99022

A flaw was found in the Linux kernel's LTC3676 regulator driver. The driver improperly marks write-only command registers, including the hardware reset register, as readable. A local user with administrative privileges can cause a Denial of Service DoS by reading the regulator registers through...

proxmark3

Deprecated Iceman fork THIS FORK HAS BEEN DEPRECATED, USE RRG/ICEMAN REPO INSTEAD! Ref: Proxmark3 RDV4.0 github repository The RRG/Iceman repo is based upon this repo. Much development has been put into the RRG repo to bring support to all new hardware features. The repo fully support all of them...

Node.JS System Information Library <5.3.1 - Remote Command Injection

Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...