pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

wifi-deauth

A DoS attack that disconnects all devices from a target wifi network. The network's password is not required Tested on Kali NetHunter Snapshot at the bottom IMPORTANT In some occasions, network APs might operate on both 5GHz and 2.4GHz under the same BSSID/SSID name. In order to truly bring the A...

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

coffeeMiner

CoffeeMiner 와이파이 네트워크에서 협력적 mitm 암호화폐 채굴 풀 경고: 이 프로젝트는 학술/연구 목적으로만 사용됩니다. 이 프로젝트에 대한 블로그 글은 여기에서 읽을 수 있습니다: http://arnaucode.com/blog/coffeeminer-hacking-wifi-cryptocurrency-miner.html 개념 선택된 모든 피해자에게 MITM 공격 수행 피해자가 요청한 모든 HTML 페이지에 js 스크립트 주입 주입된 js 스크립트에는 암호화폐 채굴기가 포함됨 LAN 네트워크에 연결된 모든 피해자 장치가...

roamr

roamr 지금 있는 곳에서 가장 좋은 WiFi 네트워크를 찾으세요. 연결을 끊지 않고. 여러 WiFi 네트워크가 있는 사무실또는 집에서는 이동에 따라 가장 좋은 네트워크가 바뀌며, "가장 좋음"은 단순히 신호 막대만으로 정해지지 않습니다. 네트워크가 신호 막대가 가득 차 보여도 느릴 수 있습니다: 혼잡한 2.4GHz, 오래된 WiFi 표준, 혼잡한 채널. roamr은 OS가 이미 알고 있는 주변의 모든 저장된 네트워크 정보를 읽어 실제 사용 품질로 점수를 매기고, 그 이유를 설명하며, 어떤 네트워크를 사용해야 하는지 알려줍니...

CVE-2026-22101

A sensitive information leak exists via an obfuscated service menu accessible with physical access . This vulnerability allows an attacker to view sensitive data, including serial numbers , MAC addresses , and WiFi network passwords . No specific software or hardware versions or remediation steps...

CVE-2026-82708

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...

CVE-2026-82585

The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of intercepting communications on the device's WiFi network could obtain stored recordings, live video, location information, images, diagnostic logs, or other...

CVE-2026-82585 Botslab G980H Dashcams Cleartext Transmission of Sensitive Information

The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of intercepting communications on the device's WiFi network could obtain stored recordings, live video, location information, images, diagnostic logs, or other...

EUVD-2026-86465

The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of intercepting communications on the device's WiFi network could obtain stored recordings, live video, location information, images, diagnostic logs, or other...

CVE-2026-82708 Botslab G980H Dashcams Improper Limitation of a Pathname to a Restricted Directory

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...

CVE-2026-82708

The Botslab G980H dash camera firmware contains a path traversal vulnerability within its HTTP server . An attacker with access to the device's WiFi network can submit a crafted request to bypass directory restrictions and access files on the device's removable storage . This could lead to the ex...

EUVD-2026-86463

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...

CVE-2026-82708: Improper Limitation of a Pathname to a Restricted Directory

The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...

PT-2026-58681

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has n...

CVE-2026-15757: Improper Input Validation

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has n...

CVE-2026-0419: Improper Input Validation

Insufficient input validation in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are...

ZTE H298A / H108N - Unauthenticated Credential Exposure

Exploit Title: ZTE H298A / H108N - Unauthenticated Credential Exposure via ETHCheat Parameter Date: 2026-05-20 Exploit Author: Mina Nageh Salalma Monx Research Vendor Homepage: https://www.zte.com.cn Software Link:...

FreeBSD : FreeBSD -- Remote code execution via installer Wi-Fi access point scans (039c0ab0-54b7-11f1-8d7a-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 039c0ab0-54b7-11f1-8d7a-bc241121aa0a advisory. When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of...

CVE-2026-25196

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the Wi-Fi SSID and/or password fields can lead to remote code execution when the configuration is...