452 matches found
iotmap
IoTMap IoTMap is a tool that models IoT networks using one or multiple protocols simultaneously. This is work in progress, as a part of a PhD thesis on Internet Of Things security. This repository is regularly updated as new results are obtained. This project supports 3 protocol as this time : BL...
killerbee
KillerBee KillerBee is a Framework and Tools for Testing & Auditing ZigBee and IEEE 802.15.4 Networks Notice usb0.x support is being deprecated/removed Apimote v1 support is being deprected/removed If you require these features please create an issue to explain your usecase and requirements...
IoT-Pentest-devices-and-purpose
IoT Pentest Devices and Their Purpose - 2025 Edition This document outlines the latest tools and hardware for IoT security testing in 2025, covering different protocols and technologies. It includes cutting-edge attacks, newly discovered vulnerabilities, and updated hardware and software tools wi...
CVE-2021-27289
🐝 CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices 📑 Table of Contents Before We Get Serious The Story Behind This CVE Vulnerability Affected Devices Technical Details Attack Scenario Impact Proof of Concept Demo Videos Original Blog Post Researcher Zigbee Basics Background and...
killerbee
KillerBee ================ KillerBee — это платформа и инструменты для тестирования и аудита сетей ZigBee и IEEE 802.15.4 Уведомление Поддержка usb0.x устаревает/удаляется Поддержка Apimote v1 устаревает/удаляется Если вам нужны эти функции, пожалуйста, создайте issue, чтобы объяснить ваш вариант...
CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit
CVE-2026-21006 – Zigbee Light Link 공장 초기화 익스플로잇 프로그램 코드 Python Zigbee 시뮬레이션 root@kitploit: zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself, cmdid: if cmdid == 0x00:...
zigdiggity
ZigDiggity 버전 2 ZigDiggity 2.0 을 소개합니다. Bishop Fox의 Matt Gleason과 Francis Brown이 만든 ZigBee 침투 테스트 프레임워크입니다. Caleb Marion에게 특별한 감사를 드립니다! ZigDiggity 버전 2는 원래 패키지를 대대적으로 개편한 것으로, 사이버보안 전문가, 감사자, 개발자가 단일 장치를 사용하여 ZigBee 네트워크와 복잡한 상호 작용을 실행할 수 있도록 하는 것을 목표로 합니다. 2019 - Black Hat USA 2019 및 DEF CON 27...
EUVD-2026-67300
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...
CVE-2026-17610
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...
PT-2026-82755
In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...
Astra Linux – Vulnerability in Wireshark
MONGO and ZigBee TLV dissector have infinite loops in Wireshark versions 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22. These bugs allow for denial of service through packet injection or with properly crafted capture files...
EUVD-2026-39396
In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed...
CVE-2026-4526 Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed...
The vulnerability of the decrypt_data() function in the ZigBee protocol analyzer of Wireshark allows a hacker to cause a service failure.
The vulnerability of the decryptdata function in the Kismet protocol of the Wireshark network traffic analyzer involves buffer overflow in the stack. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2026-6537
A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the ZigBee protocol dissector by crafting a malicious packet. This could lead to a crash of the Wireshark application, resulting in a denial of service DoS for the user. Mitigation To mitigate this issue, users can...
SUSE CVE-2026-6537
ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...
CVE-2026-6537
ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...
AZL-85130 CVE-2026-6537 affecting package wireshark 4.4.7-2
ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...