
BlueSpy
PoC to record audio from a Bluetooth device

PoC to record audio from a Bluetooth device

A reconnaissance tool for capturing and displaying SSIDs from device's Preferred Network List.

Small tool to capture packets from wlan devices.

C library for decoding Bluetooth baseband packets and extracting piconet information from Ubertooth and USRP hardware for wireless analysis.

My Aircrack-ng contribution with Thomas d'Otreppe

Complete suite for WiFi network security auditing, including packet capture, injection attacks, deauthentication, fake AP creation, and WEP/WPA PSK…

Research tools for MouseJack vulnerabilities in nRF24L01 wireless devices, including device discovery, packet sniffing, network mapping, and firmware…

Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).

Packet injection for wifi; simplified.

PoC of CVE-2019-15126 kr00k vulnerability

Script and hardware kit to automatically deauth 802.11 clients en masse. Captures packets for later nefariousness.

Proof-of-concept exploit for CVE-2022-47522 demonstrating Wi-Fi frame interception via deauthentication attack and MAC address spoofing to capture…

Proof-of-concept exploit for CVE-2025-32407: TLS certificate validation bypass in Samsung Internet for Galaxy Watch, enabling Man-in-the-Middle…

Realtek RTL8852AE / rtw89 Monitor Mode and Packet Injection (Raw TX) patch for Linux / Kali Linux

The famous WPA precomputed cracker, Migrated from Google.

KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs…

AirPods liberated from Apple's ecosystem.