breaktoprotect/cve-2017-16778-intercom-dtmf-injectionA coordinated disclosure and security advisory on Fermax Intercom DTML Injection vulneraiblity. Special thanks to Fermax International for prompt…
qkaiser/awind-researchThis repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and…
dougives/wispScript and hardware kit to automatically deauth 802.11 clients en masse. Captures packets for later nefariousness.
hanianis/cve-2025-63353A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted…
tw-d/wifi-pineapple-mk7_evil-portalRogue access point toolkit for WiFi penetration testing, deploying evil portal phishing payloads to capture credentials and perform social…
benadia/an-integrated-wireless-network-forensic-analysis-frameworkThis framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…
kevinmitchell-oswp-cissp/cve-2023-52709-pocPoC for 2023-52709 - TI Bluetooth stack can fail to generate a resolvable Random Private Address (RPA) leading to DoS for already bonded peer devices.
salgio/esptouchcatchereWeLinkESPT is a tool that automatically decodes and decrypts the WiFi network credentials transmitted to a supported ESP-based IoT device by the…
keldnorman/cve-2024-0230-blueHelper script to POC of CVE-2024-0230 Bluetooth
rat5ak/cve-2026-41285-openbsd-v6daemons-go-brrrOne IPv6 ND option with length zero. One missing check. Daemon walks backward and lives in the loop. Reported to OpenBSD, fixed, CVE assigned.
j4ck3lsyn-gen2/cve-2026-58457PoC tools for CVE-2026-58457: Unauthenticated OS Command Injection leading to remote root on Shenzhen Aitemi M300 Wi-Fi Repeater (MT02). Includes…
d3adp3nguin/cve-2023-33105-transient-dos-in-wlan-host-and-firmwareThis repository contains the exploit code for CVE-2023-33105, a vulnerability identified in Qualcomm devices. The exploit leverages authentication…
nsm-barii/cve-2025-15474A denial-of-service vulnerability in the AuntyFey BLE smart padlock allows unauthenticated connection floods to lock out legitimate users. …
hegaz0y/-bulEDSEC_BKIF is a keystroke injection tool for Android, Linux, and iOS. With the help of CVE-2023-45866, it grants users unprecedented control over…
cipherx1802/cve-2025-69821-beat-xp-vega-smartwatch-security-assessmentA security assessment of the Beat XP VEGA Smartwatch (Firmware RB303ATV006229) focused on Bluetooth Low Energy (BLE) connectivity revealed a design…
magicbytes/magicarchMagicArch is a comprehensive post-installation script built with Ansible, designed to transform a basic Arch Linux installation into a fully equipped…
mastercode112/upgraded_bluebourne-cve-2017-0785-upgraded of BlueBourne CVE-2017-0785 to python3
aprkr/cve-2023-48034Weak encryption in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject wireless…
