
IMSIsting
GTK4 and CLI cellular security toolkit with 57 modules for 2G GSM, 3G UMTS, 4G LTE and 5G NR air interface, core network, SIM identity, RF tracking,…

GTK4 and CLI cellular security toolkit with 57 modules for 2G GSM, 3G UMTS, 4G LTE and 5G NR air interface, core network, SIM identity, RF tracking,…

Predatory ESP32 Firmware

MOC3ingbird Exploit for Live2D (CVE-2023-27566)

Research-driven UPnP vulnerability scanner focusing on libupnp 1.6.19 and CVE-2012-5958.

PoC exploit for CVE-2025-5688: remote out-of-bounds write in FreeRTOS-Plus-TCP via crafted LLMNR/mDNS queries, causing crash or potential RCE on…

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

Fuzzing IoT Devices Using the Router TL-WR902AC as Example

Exploit for stack-based buffer overflow found in the conn-indicator binary in the TP-Link Archer AX50 router

Proof-of-concept exploit for a buffer overflow vulnerability (CVE-2024-44596) in Netis N5VN AC1200 routers, causing a denial of service by crashing…

Modbus Packet Injection on Advantech WISE 4060LAN / IoT Gateway for door control

A Software Defined Radio Attack Tool

Proof-of-concept exploit for authentication bypass via capture-replay in Dingtian DT-R002 relay, allowing unauthorized control of relays through HTTP…

This POC exploits a format validation vulnerability in the RTSP service of the Hipcam RealServer/V1.0, inducing a crash for approximately 45 seconds…

eeroOS Ethernet Interface Denial of Service Vulnerability (CVE-2023-5324)

ASUS RT-AC87U TFTP is vulnerable to Denial of Service(DoS) attack

IEEE 802.15.4/ZigBee Security Research Toolkit


This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the…