hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

GHOST

GHOST 汎用ハッキング＆監視セキュリティツール Adafruit ESP32-S3 Reverse TFT Feather 向けのスタンドアロンWPA/WPA2 ハンドシェイクキャプチャ ファームウェア。内蔵240×135 TFT と3ボタン を備え、通常使用にスマホアプリやブラウザは不要。キャプチャはLittleFS上に.pcapとして保存されます。Captures → Download AP では小さなWiFiネットワークを公開し、ファイルをリスト表示・ダウンロードできます。 教育目的および許可されたテスト専用です。...

esp32-wifi-penetration-tool

ESP32 Wi-Fi 침투 도구 이 프로젝트는 다양한 Wi-Fi 공격을 구현하기 위한 ESP32 플랫폼용 범용 도구를 소개합니다. Wi-Fi 공격에서 일반적으로 사용되는 몇 가지 공통 기능을 제공하며, 새로운 공격을 구현하는 것을 조금 더 간단하게 만듭니다. 또한 핸드셰이크에서 PMKID를 캡처하거나, 복제된 AP를 시작하거나 직접 인증 해제 프레임을 보내는 등의 다양한 방법으로 핸드셰이크 자체를 캡처하는 Wi-Fi 공격 자체를 포함합니다. 물론 크래킹은 이 프로젝트의 일부가 아닙니다. ESP32는 해시를 효과적인 방식으로...

CVE-2023-50809

In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code executio...

EUVD-2020-18489

Malware in sbrugna...

EUVD-2020-18487

Malware in sbrugna...

EUVD-2020-18490

Malware in sbrugna...

EUVD-2020-18486

Malware in sbrugna...

EUVD-2020-18488

Malware in sbrugna...

EUVD-2020-19815

Malware in sbrugna...

EUVD-2023-55542

Malicious code in bioql PyPI...

CVE-2020-25857

The function ClientEAPOLKeyRecvd in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker c...

CVE-2020-25853

The function CheckMic in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtmd5hmacveneer or rthmacsha1veneer, resulting in a stack buffer over-read which can be exploited for denial ...

CVE-2020-25856

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...

CVE-2020-25855

The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...

CVE-2020-27302

A stack buffer overflow in Realtek RTL8710 and other Ameba-based devices can lead to remote code execution via the "memcpy" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake...

CVE-2020-27301

A stack buffer overflow in Realtek RTL8710 and other Ameba-based devices can lead to remote code execution via the "AESUnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake...

CVE-2023-50809: Stack-based Buffer Overflow

In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code executio...

Default credentials

BlackVue DR750-2CH LTE v.1.0122022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted...

CVE-2023-27746

BlackVue DR750-2CH LTE v.1.0122022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted...