wifijammer

wifijammer 持续干扰范围内所有WiFi客户端和接入点。该脚本的效果受无线网卡性能限制。Alfa网卡在接入点密集的区域似乎能有效干扰约一个街区的范围。通过选项可实现更精细的定位。 要求：python 2.7、python-scapy、支持注入的无线网卡 使用方法 基础用法 root@kitploit: python wifijammer...

Learn.BlueJam

BlueJam KNOB攻击 借助KNOB，你的蓝牙音箱可以被监控用于iPhone和Android设备。第一种方法是强化KNOB攻击。第二种方法是让KNOB攻击解密或削弱两台设备之间的蓝牙通信。通过这样做，你将有机会获取会话。 CVE-2017-0781 链接 https://github.com/ojasookert/CVE-2017-0781 https://github.com/Gallopsled/pwntools 参考...

Humax-CLI

Humax-CLI 一个非官方的Humax IR4000HD终端客户端，具有增强功能。 这一切都来自于对安卓应用的反向工程，很快会有一篇文章出来 😄 截图 使用方法： root@kitploit: usage: sendUDP.py -h -i IP -l --try-this --loop -j -b btn btn ... optional arguments: -h, --help show this help message and exit -i IP, --ip IP Receiver IP address. Most times 192.168.x.2 -l, --list...

433Screen-SignalHacker

433Screen-SignalHacker Estado del proyecto: Este repositorio es un prototipo más antiguo de hacking de señales de 433 MHz. Fue sustituido por EMWaver , la plataforma de exploración de hardware de Continual MI, que a su vez fue retirada y archivada en julio de 2026. La historia completa de EMWaver...

LANs.py

LANs.py 注意 我不再维护这个项目。我强烈建议改用 bettercap 来满足 ARP 和 MITM 需求。 自动发现最活跃的 WLAN 用户，然后监视其中一个用户和/或向 ta 访问的页面注入任意 HTML/JS。 单独毒化目标设备、路由器以及必要时的 DNS 服务器的 ARP 表。不会毒化网络上的其他设备。显示所有最有趣的流量，并可以向 ta 访问的页面注入自定义 HTML。使用后自动清理。 也可用于持续干扰附近的 WiFi 网络。其有效范围大约为一个街区半径，但具体取决于你的无线网卡强度。可以微调以干扰所有人，甚至只干扰一个客户端。（无法同时进行 WiFi 干扰和监视）...

RFCrack

/ | | | / | | | | / \ ' - / \ / - | / \ V V / ' / \ || - /||// /| ///|. //, / / |/ | /| | | || | / | | '/ /| / / | || || , | \ root@kitploit: 欢迎使用 RFCrack — 一款软件定义无线电攻击工具 开发者：@Ficti0n - http://ConsoleCowboys.com CCLabs：http://cclabs.io 博客：console-cowboys.blogspot.com...

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

btlejack

BtleJack：一款新的蓝牙低能耗瑞士军刀 BtleJack 提供了嗅探、干扰和劫持蓝牙低能耗（BLE）设备所需的一切功能。它依靠一个或多个运行专用固件的 BBC Micro:Bit 设备。你也可以使用 Adafruit 的 Bluefruit LE Sniffer 或 nRF51822 评估套件 ，因为我们已经添加了对这些设备的支持。 当前版本（2.0）支持 BLE 4.x 和 5.x。BLE 5.x 支持有限，仅支持 1Mbps 非编码 PHY，且不支持信道映射更新。 要求 你需要一个基于 UNIX 的系统（例如 Raspberry Pi）。如果使用 BBC...

Characterization-and-Detection-of-Cross-Router-Covert-Channels

跨路由器隐蔽信道的特征化与检测 本仓库包含论文《跨路由器隐蔽信道的特征化与检测》中使用的源代码。如需访问论文，请前往 Oren 博士的实验室网站：orenlab。 论文中使用的完整数据可通过此链接访问。 攻击 论文提出了两种网络时序隐蔽信道，它们打破了由单个共享路由器托管的两个网络之间的逻辑隔离：CRCC 和 Wi-Fi 微干扰攻击。 通过使用这些隐蔽信道，我们能够在两个网络之间泄露信息，即使显式通信已被阻断。 两种攻击都会根据泄露的信息比特故意耗尽路由器的物理资源。通过这样做，宿主网络中的机器可以向客户网络中定期测量路由器响应时间的机器传递信息。正常响应时间与 '0'...

KawaiiDeauther

KawaiiDeauther Kawaii Deauther 是一个渗透测试工具包，旨在对 WiFi 客户端/路由器执行干扰，并发送大量虚假 AP 以进行测试。 依赖项 macchanger mdk3 nmcli 安装 依赖项将自动安装。 root@kitploit: $ git clone https://github.com/aryanrtm/KawaiiDeauther $ cd KawaiiDeauther && sudo ./install.sh $ sudo KawaiiDeauther.sh 演示 已测试环境 操作系统| 版本 ---|--- Linux Mint| 19....

Investigation of STEEP for Secure Communications over SIMO and MISO Channels Subject to Full-Duplex Jamming and Eavesdropping

Secure communications over SIMO and MISO channels between wireless nodes are commonly encountered in applications and widely considered in the literature. This paper investigates such a problem by considering a newly proposed scheme called secrecy-message transmission by echoing encrypted probes...

TinyML-Driven Cybersecurity for Autonomous Spacecraft: Latency-Accuracy Analysis for SPARTA RF and Cyber Threat Detection

Autonomous spacecraft require rapid, lightweight, and reliable onboard detection of cyber-RF threats. Using the SPARTA attack model, we analyze the latency-accuracy trade-offs of TinyML-compatible classical models -- Random Forest, Logistic Regression, SVM, and MLP -- for detecting uplink jamming...

Security Implications of 5G Communication in Industrial Systems

Traditionally, industrial control systems ICS were designed without security in mind, prioritizing availability and real-time communication. As these systems increasingly become targets of powerful adversaries, security can no longer be neglected. Driven by flexibility and automation needs, ICS a...

Systematic Security Analysis of the Iridium Satellite Radio Link

The Iridium Low Earth Orbit LEO satellite constellation remains a unique provider of global communications for critical industries, governments, and private users, serving over 2.5 million active subscribers despite recent market competition. In contrast to terrestrial wireless standards such as...

Deep Learning-Driven Friendly Jamming for Secure Multicarrier ISAC under Channel Uncertainty

Integrated sensing and communication ISAC systems promise efficient spectrum utilization by jointly supporting radar sensing and wireless communication. This paper presents a deep learning-driven framework for enhancing physical-layer security in multicarrier ISAC systems under imperfect channel...

Jamming Attacks on the Random Access Channel in 5G and B5G Networks

Random Access Channel RACH jamming poses a critical security threat to 5G and beyond B5G networks. This paper presents an analytical model for predicting the impact of Msg1 jamming attacks on RACH performance. We use the OpenAirInterface OAI open-source user equipment UE to implement a Msg1 jammi...

A Survey of Security Challenges and Solutions for Advanced Air Mobility and EVTOL Aircraft

This survey reviews the existing and envisioned security vulnerabilities and defense mechanisms relevant to Advanced Air Mobility AAM systems, with a focus on electric vertical takeoff and landing eVTOL aircraft. Drawing from vulnerabilities in the avionics in commercial aviation and the automate...

CVE-2025-65553

D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is susceptible to RF jamming on the 433 MHz alarm sensor channel. An attacker within RF range can transmit continuous interference to block sensor transmissions, resulting in missed alarms and loss of security monitoring. The device lacks jamming...

CVE-2025-65553

D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is susceptible to RF jamming on the 433 MHz alarm sensor channel. An attacker within RF range can transmit continuous interference to block sensor transmissions, resulting in missed alarms and loss of security monitoring. The device lacks jamming...

CVE-2025-65553

D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is susceptible to RF jamming on the 433 MHz alarm sensor channel. An attacker within RF range can transmit continuous interference to block sensor transmissions, resulting in missed alarms and loss of security monitoring. The device lacks jamming...