dcsgonefirm

dcsgonefirm 注意事項 このリポジトリはまだ開発中であるため、このReadme内の一部の項目には'Dev:'とマークされています。必要に応じて変更してください。 ビルド方法 ESP-IDFが必要です。最新バージョンであれば動作するはずです。Dev: より具体的なバージョンが必要な場合はこれを変更してください コマンドライン: idf.py set-target esp32c6 idf.py build idf.py flash または、IDEで同等の操作を行ってください。 構造...

AI-driven-MITRE-Attack

POC：AI 驱动的 MITRE 攻击检测与告警富化 该仓库演示了一个机器学习流水线 ，用于从日志中检测 MITRE ATT&CK 技术，并使用本地 LLM 富化输出。 概述 该项目分为两个主要组件 ： 1. 机器学习模型（ML） – 将日志分类到 MITRE ATT&CK 技术 2. LLM 富化 – 将 ML 预测结果富化为分析师友好的解释和可操作的见解 机器学习模型 目的 ML 模型经过训练，可从日志事件中预测 MITRE 技术 （或 BENIGN）。 这样可以自动化检测和分类潜在的恶意行为。 方法 特征： 来自日志的 commandline 字段 向量化： TF-IDF（词频 –...

esp32_esp8266_attacks

ESP32/ESP8266 Wi-Fi 攻击 本仓库是ASSET 研究组 的研究成果的一部分。 本仓库演示了针对流行的 ESP32/8266 IoT 设备的 3 种 Wi-Fi 攻击： Zero PMK 安装 CVE-2019-12587 - 劫持连接到企业网络的 ESP32/ESP8266 客户端； ESP32/ESP8266 EAP 客户端崩溃 CVE-2019-12586 - 使连接到企业网络的 ESP 设备崩溃； ESP8266 信标帧崩溃 CVE-2019-12588 - 使 ESP8266 Wi-Fi 设备崩溃。...

esp32-cve-2025-27840-power-trace-experiment

esp32-cve-2025-27840-power-trace-experiment 用于在 ESP32 被发送未记录的 hci 蓝牙命令 CVE-2025-27840 时，获取蓝牙模块行为功耗轨迹的固件。 当 ESP32 收到命令时，它会切换一个 GPIO 引脚以触发功耗轨迹采集。我建议使用 trace hook 在蓝牙控制器任务被调度时执行此操作。你可以在 trigger-mechanisms 文件夹中查看触发机制。 该代码兼容 ESP-IDF v5.0.8 和 v5.0.9，并根据 Espressif 的 controllerhciuartesp32 示例进行了改编。 你可以在...

RAG-PIBench: A Leakage-Aware Benchmark for Prompt-Injection Detection in Trustworthy RAG Systems

Retrieval-Augmented Generation RAG systems are vulnerable to prompt-injection attacks embedded in retrieved content. We introduce RAG-PIBench, a benchmark for RAG-style prompt-injection detection containing 4,876 contextual examples across frozen train, validation, and protected-test splits. Usin...

CVE-2024-33453

CVE-2024-33453 通过对象级访问控制导致敏感数据泄露（esp-idf） 描述 esp-idf 框架版本 5.1 中存在一个缓冲区溢出漏洞，该框架被某些 Schoolbox 产品使用，允许远程攻击者通过不当的对象级访问控制获取敏感信息。此漏洞通过操纵与 externalId 组件关联的 id 参数触发，导致未授权访问敏感数据。 附加信息 esp-idf 框架的 externalId 组件存在一个漏洞，导致对象级访问控制不当。此问题允许经过身份验证的用户通过更改 URL 中的 id 参数来访问属于其他用户的数据。 漏洞 URL 示例 经过身份验证的用户可以更改 URL 中的 id...

Browser-Extension-Included-SVM-in-XSS

XSS Guard ML Browser extension Manifest V3 phát hiện Reflecte...

CVE-2026-81508

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

EUVD-2026-86334

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

CVE-2026-81508 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

CVE-2026-81508 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

CVE-2026-81508

The ESF-IDF (Espressif Internet of Things Development Framework) versions 5.5.5 , 6.0.1 , and 6.1 are vulnerable to an out-of-bounds read in the BlueDroid A2DP sink function btc_a2dp_sink_handle_inc_media(). The root cause is that the function reads a timestamp field from a received media buffer ...

CVE-2026-81508 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

PT-2026-98227

Name of the Vulnerable Software and Affected Versions ESF-IDF version 5.5.5 ESF-IDF version 6.0.1 ESF-IDF version 6.1 Description The BlueDroid A2DP sink function btc a2dp sink handle inc media reads a timestamp field from the received media buffer without first validating that the packet layout...

CVE-2026-81508: Out-of-bounds Read

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

A Bulletproof Business? Towards Detecting Infrastructure-As-A-Service Offerings on Telegram

Cybercriminal operations increasingly depend on reusable digital infrastructure---including hosting, proxies, and virtual private networks VPNs---rented through Cybercrime-as-a-Service markets and advertised on platforms such as Telegram. We present a taxonomy for identifying Telegram messages...

GhostESP v2.2-pre1

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

CVE-2026-55687: Stack-based Buffer Overflow

ESF-IDF is the Espressif Internet of Things IOT Development Framework. Versions 6.0.1, 5.5.4, 5.4.4, 5.3.5, and possibly prior contain an out-of-bounds write in jpegparsedqtmarker in components/espdriverjpeg/jpegparsemarker.c because the attacker-controlled DQT marker Tq nibble is used as an inde...

CVE-2026-45329

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in espsecureservices.c and espsecureservicesiram.c validated only some of the caller-supplied pointer arguments, leaving input pointer arguments unchecked...

CVE-2026-46532

CVE-2026-46532 describes a heap/out-of-bounds read in Espressif’s ESF-IDF (IoT Development Framework) due to the BlueDroid AVRCP vendor-command parser (avrc_pars_vendor_cmd) in bluedroid. Affected versions are 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0. The issue has been patched in 5.2.7, 5.3.6, 5.4.5,...