AirScout

Right now only a dutch version of the app is available. English will follow soon. User Guide – Wi-Fi Passive Monitor ESSID + Band Filter Legal & Ethics Notice Educational Use For educational and authorized testing only. You are solely responsible for how you use this tool. Intentionally disruptin...

CVE-2025-63353

CVE-2025-63353 PoC - FiberHome HG6145F1 Predictable Default Wi-Fi PSK Educational research toolkit and multi-language PoC for CVE-2025-63353 , a critical predictable-default-PSK vulnerability affecting FiberHome HG6145F1 RP4423 GPON ONT devices. Summary The factory default Wi-Fi pre-shared key on...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

CVE-2022-28113

=============== Fantec MWiD25-DS Writeup for CVE-2022-28113 by @code-byter ========================== This is a writeup of exploiting the Fantec MWiD25-DS Travel Router Firmware version: 2.000.030. This vulnerability allows any unauthorized user to execute arbitrary commands as root user. A...

FuzzAP

FuzzAP A python script for obfuscating wireless networks ''' Warning: I am not a programmer by trade, nor would I consider myself one The common SSID list was pulled from https://wigle.net/gps/gps/Stat The OUI vendor list was parsed from http://standards.ieee.org/develop/regauth/oui/oui.txt for...

geowifi

📡💘🌎 | geowifi Search WiFi geolocation data by BSSID and SSID on different public databases. 💾 Databases Wigle| Apple| Google| Milnikov ---|---|---|--- WifiDB| Combain| Freifunk Carte| ❌ DiscontinuedOpenWifi ✔️Prerequisites Python3. In order to display emojis on Windows , it is recommended to...

Preferred-Network-List-Sniffer

Preferred Network List Sniffer - PNLS Preferred Network List Sniffer PNLS is a Red Team Wi-Fi auditing tool with a simple web interface that is capable of intercepting SSIDs^1 from the device's preferred network list PNL^2. This is achieved by sniffing out Probe Requests in the nearby vicinity,...

GenWiFiFaker

EN GenWiFiFaker is a tool for creating fake WiFi access points. It can be used for testing network security, performing demonstrations, or other educational purposes. This tool generates fake SSIDs and MAC addresses and broadcasts them over a specified WiFi interface. Features Generate Fake SSIDs...

CVE-2025-63353

CVE-2025-63353 A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID...

PiKarma

██████╗ ██╗██╗ ██╗ █████╗ ██████╗ ███╗ ███╗ █████╗ ██╔══██╗██║██║ ██╔╝██╔══██╗██╔══██╗████╗ ████║██╔══██╗ ██████╔╝██║█████╔╝ ███████║██████╔╝██╔████╔██║███████║ ██╔═══╝ ██║██╔═██╗ ██╔══██║██╔══██╗██║╚██╔╝██║██╔══██║ ██║ ██║██║ ██╗██║ ██║██║ ██║██║ ╚═╝ ██║██║ ██║ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═╝╚═╝...

AirWatch

AirWatch What is AirWatch? AirWatch is a simple menu bar app which helps prevent device snatching attacks. As an example, such an attack was carried out against Ross Ulbricht. An agent grabbed his device and ran, thus preventing him from rebooting it. How does it work? AirWatch monitors the curre...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

Netis-N5VN-AC1200-DOS

Exploit Title: Netis N5VN AC1200 - Buffer Overflow DOS Denial of Service Date: 05/03/2024 Exploit Author: Van Lam Nguyen Facebook: fb.com/vanlam1412 Vendor Homepage: Netis Systems Version: Netis N5VN AC1200 V1.0.1.1742 Tested on: Windows CVE : CVE-2024-44596 Overview There exist a buffer overflow...

Google-Nest-Cam-Bug-Disclosures

Google-Nest-Cam-Bug-Disclosures Affected: Dropcam Pro, Nest Cam Indoor/Outdoor models Latest Build Affected: 205-600052 Partial Fixed Build: 205-600055 UPDATE The latest fw version 205-600055 does not fix the WiFi dissassociation vulnerability in the Dropcam Pro. If the supplied WiFi network does...

CVE-2025-63353

FiberHome Wi-Fi Password Predictor CVE-2025-63353 A Python utility designed for security auditing and proof-of-concept demonstration of the deterministic password generation flaw found in FiberHome HG6145F1 RP4423 routers. 📋 Overview This script exploits CVE-2025-63353, a critical vulnerability...

kernel: Fix of 9 CVEs

rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 - xfs: fix freemap adjustments when adding xattrs to leaf blocks CVE-2026-43158 - xfs: delete attr leaf freemap entries when empty CVE-2026-43158 - ALSA: 6fire: fix use-after-free on disconnect CVE-2026-31581 - brcmfmac:...

CVE-2020-23590

CVE-2020-23590 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Vulnerability found in the "Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OPV3.3.1-191028" which allow an unauthenticated remote attacker to conduct a...

CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

Copeland XWEB and XWEB Pro Improper Neutralization of Special Elements Used in an OS Command (CVE-2026-25196)

An OS Command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the Wi- Fi SSID and/or password fields can lead to remote code execution when the configuration is...