𝔹𝕝𝕒𝕔𝕜𝕙𝕒𝕥𝕣𝕦𝕤𝕤𝕚𝕒
رفتن به کانال در Telegram
405
مشترکین
+424 ساعت
+437 روز
+12130 روز
تعداد پستها
در حال بارگیری داده...
واکنشها
نظرات
ستارههای تلگرام
بهترین پستها بر اساس
در حال بارگیری داده...
تجزیه و تحلیل انتشار
پست ها | ديناميک بازديد ها | |||||
Vulnerability CVE-2025-20702 or BLE, again twenty-five...
Boys and girls!
(Parapara-pam-pam)
And also their parents!
(Parapara-pam-pam)
On the air with a bare ass!
(Parapara-pam-pam)
Would you like to stay?
Living up to its name in the worst sense (Bluetooth), CVE-2025-20702 came as a New Year's gift from it in 2025. It affects EVERYTHING! Headphones, Aurocast devices, joysticks, everything that the glorious Chinese manufacturer Airoha has put its hand to. Which, in no less glorious Chinese tradition, forgot to disable debugging in the firmware and shipped the chips to tens of millions of devices.
The debugging protocol is called RACE (Realtek/Airoha Command Extension) and allows both reading memory directly (which includes encryption keys, a list of paired devices, location data, etc.) and writing to memory directly. That is, you can directly replace connections on the fly, eavesdrop, start calls without the user's knowledge. The more cunning ones can add an extra profile to a legitimate device, for example, HID as a keyboard, and launch serious attacks.
And now the icing on the cake...
RACE works WITHOUT ANY AUTHENTICATION!!!
Here's an incomplete list of devices that were found almost immediately
Sony: WH-1000XM4/5/6, WF-1000XM3/4/5, LinkBuds S, ULT Wear, CH-720N, WF-C500, WF-C510-GFP, WH-XB910N (and other models of the WH/WF series)
Marshall: Acton III, Major V, Minor IV, Motif II, Stanmore III, Woburn III
JBL: Live Buds 3, Endurance Race 2
Jabra: Elite 8 Active (and similar models in the Elite 10 series)
Bose: QuietComfort Earbuds
Beyerdynamic: Amiron 300
JLab: Epic Air Sport ANC
Teufel: Airy TWS 2
Xiaomi: Redmi Buds 5 Pro
MoerLabs: EchoBeatz
earis: earisMax Auracast Sender
Apple distinguished itself in a positive sense, as it develops its own firmware for its own chip and simply sits on the fence, watching the debauchery.
It's also important to add that a fix in the SDK was released on June 4, 2025. Since then, some brands have moved quickly. For example, Jabra released firmware updates for its models (Elite 8/10 and others) by September 2025 and officially mentioned CVE in the bulletin. Marshall also soon quietly updated the firmware and included the patch in the release notes. However, these companies were not eager to engage in direct contact with the researchers: Marshall remained silent to the letters, and Sony even turned on the "no comment" mode. Only after learning about the impending public debacle did Sony reluctantly acknowledge the problem and promise fixes. The rest - Bose, JBL, Xiaomi and others - also did not issue loud press releases, limiting themselves to quiet updates (and some still haven't released anything at all). By the end of 2025, the situation is as follows: patches are not available for many devices, and even where they are, it's not certain that users have applied them. Headset updates are usually installed through proprietary applications, which few people install, let alone regularly open. Budget and EOS models no longer receive updates at all. As usual, the vendor formally released a patch and covered its ass, and the users were left with nothing.
There's no particular need to panic, just check what's inside your headphones (vulnerable AB156x, AB157x, AB158x, AB159x and AB1627), go to 4pda, and check if there are updates. Maybe it's a good reason to update your sound and make your ears happy))). Or maybe even switch to wired ones.
That's the deal... | 125 | 0 | 0 | 0 | Loading... | |
Vulnerability CVE-2025-20702 or BLE, again twenty-five...
Boys and girls!
(Parapara-pam-pam)
And also their parents!
(Parapara-pam-pam)
On the air with a bare ass!
(Parapara-pam-pam)
Would you like to stay?
Living up to its name in the worst sense (Bluetooth), CVE-2025-20702 came as a New Year's gift from it in 2025. It affects EVERYTHING! Headphones, Aurocast devices, joysticks, everything that the glorious Chinese manufacturer Airoha has put its hand to. Which, in no less glorious Chinese tradition, forgot to disable debugging in the firmware and shipped the chips to tens of millions of devices.
The debugging protocol is called RACE (Realtek/Airoha Command Extension) and allows both reading memory directly (which includes encryption keys, a list of paired devices, location data, etc.) and writing to memory directly. That is, you can directly replace connections on the fly, eavesdrop, start calls without the user's knowledge. The more cunning ones can add an extra profile to a legitimate device, for example, HID as a keyboard, and launch serious attacks.
And now the icing on the cake...
RACE works WITHOUT ANY AUTHENTICATION!!!
Here's an incomplete list of devices that were found almost immediately
Sony: WH-1000XM4/5/6, WF-1000XM3/4/5, LinkBuds S, ULT Wear, CH-720N, WF-C500, WF-C510-GFP, WH-XB910N (and other models of the WH/WF series)
Marshall: Acton III, Major V, Minor IV, Motif II, Stanmore III, Woburn III
JBL: Live Buds 3, Endurance Race 2
Jabra: Elite 8 Active (and similar models in the Elite 10 series)
Bose: QuietComfort Earbuds
Beyerdynamic: Amiron 300
JLab: Epic Air Sport ANC
Teufel: Airy TWS 2
Xiaomi: Redmi Buds 5 Pro
MoerLabs: EchoBeatz
earis: earisMax Auracast Sender
Apple distinguished itself in a positive sense, as it develops its own firmware for its own chip and simply sits on the fence, watching the debauchery.
It's also important to add that a fix in the SDK was released on June 4, 2025. Since then, some brands have moved quickly. For example, Jabra released firmware updates for its models (Elite 8/10 and others) by September 2025 and officially mentioned CVE in the bulletin. Marshall also soon quietly updated the firmware and included the patch in the release notes. However, these companies were not eager to engage in direct contact with the researchers: Marshall remained silent to the letters, and Sony even turned on the "no comment" mode. Only after learning about the impending public debacle did Sony reluctantly acknowledge the problem and promise fixes. The rest - Bose, JBL, Xiaomi and others - also did not issue loud press releases, limiting themselves to quiet updates (and some still haven't released anything at all). By the end of 2025, the situation is as follows: patches are not available for many devices, and even where they are, it's not certain that users have applied them. Headset updates are usually installed through proprietary applications, which few people install, let alone regularly open. Budget and EOS models no longer receive updates at all. As usual, the vendor formally released a patch and covered its ass, and the users were left with nothing.
There's no particular need to panic, just check what's inside your headphones (vulnerable AB156x, AB157x, AB158x, AB159x and AB1627), go to 4pda, and check if there are updates. Maybe it's a good reason to update your sound and make your ears happy))). Or maybe even switch to wired ones.
That's the deal... | 2 | 0 | 0 | 0 | Loading... | |
■■■■■ 💻 Windows kernel exploitation series.
https://mdanilor.github.io/posts/hevd-0/
https://mdanilor.github.io/posts/hevd-1/
https://mdanilor.github.io/posts/hevd-2/
https://mdanilor.github.io/posts/hevd-3/
https://mdanilor.github.io/posts/hevd-4/ | 122 | 0 | 0 | 0 | Loading... | |
 dlman
This is a free and fast modern download manager, available for Windows, Mac, and Linux.
The program supports multi-threaded downloads, which significantly speeds up the process of downloading files.
The interface of dlman is intuitive and convenient, ensuring ease of use even for novice users.
Lang: TypeScript
https://github.com/novincode/dlman | 108 | 0 | 0 | 0 | Loading... | |
 StegoForge
StegoForge is a comprehensive tool for steganography and digital forensics, designed for hiding and extracting data in various media, such as images, audio, video, documents, and network packets.
It supports 11 advanced detection mechanisms, allowing the detection of hidden data in the specified file types.
The program provides both a command-line interface (CLI) and a graphical user interface (GUI), ensuring ease of use for different categories of users.
Lang: Python
https://github.com/Nour833/StegoForge | 87 | 0 | 0 | 0 | Loading... | |
 aya
This is a desktop application with a graphical interface, designed for managing Android devices, acting as a shell for ADB.
The program allows you to stream the device's screen with low latency, control it using a keyboard and mouse, and record and take screenshots.
With its help, you can view the device's file system, upload and download files, install and uninstall applications, manage processes, and monitor performance in real time.
The application also provides access to a terminal, similar to the ADB shell, with support for multiple sessions, and includes a graphical interface for viewing logs with the ability to filter and export them.
Lang: TypeScript
https://github.com/liriliri/aya
================ | 78 | 3 | 0 | 0 | Loading... | |
 dockerscan
Dockerscan is a tool for ensuring the security of Docker containers, designed to identify vulnerabilities and analyze configurations.
The program also identifies security issues in real time and detects hardcoded secrets, providing comprehensive protection for containerized applications.
Lang: Go
https://github.com/cr0hn/dockerscan | 70 | 0 | 0 | 0 | Loading... | |
 WifiForge
This is a tool developed by Black Hills InfoSec, designed to teach penetration testers various methods of attacking Wi-Fi networks and exploring the capabilities of wireless technologies.
It provides an environment for modeling and testing various attack vectors on wireless networks, including traffic interception, "evil twin" attacks, and others.
WifiForge supports integration with tools such as Aircrack-ng, Wifiphisher, which expands its functionality and allows for comprehensive security tests of Wi-Fi networks.
Lang: Python
https://github.com/blackhillsinfosec/WifiForge
================ | 75 | 1 | 0 | 0 | Loading... | |
L0p4Map
L0p4Map is a professional tool for network monitoring and visualization, designed for security specialists and administrators.
It combines high-speed host detection using ARP, full integration with nmap, and interactive real-time network topology.
The program supports scanning of local networks and remote IP addresses or websites.
L0p4Map provides host name resolution, operating system identification, and device role classification features.
The interface is developed using PyQt6, ensuring a modern and user-friendly experience.
Lang: Python
https://github.com/HaxL0p4/L0p4Map | 95 | 1 | 0 | 0 | Loading... | |
Abt yesterday typeshii just received abt an hour ago what's wrong with the block chain | 120 | 0 | 0 | 0 | Loading... | |
 https://www.blockchain.com/explorer/transactions/btc/975df0ea5bb07086c0740b04e4689e797e48c35fb0385a155de9924271a766bd | 120 | 0 | 0 | 1 | Loading... | |
 بدون متن... | 130 | 0 | 0 | 0 | Loading... | |
Fіltеrіх․ru 2026 dаtаbаѕе 🔥
Lіnеѕ: 20000+
Dаtа: Full_nаmе‚ Рhоnе‚ еmаіl‚ еtс․
👇👇👇👇👇👇👇👇
▬▬▬▬▬▬▬▬▬▬
© @eyescub3 ©
▬▬▬▬▬▬▬▬▬▬ | 28 | 0 | 0 | 0 | Loading... | |
Міllеnnіum‐рlаtfоrm․ru dаtаbаѕе🔥
Lіnеѕ: 440k+
Dаtа: ѕurnаmе‚ nаmе‚ раtrоnуmіс‚ рhоnе_numbеr‚ еmаіl‚ bіrth_dаtе‚ раѕѕроrt‚ раѕѕроrt_dаtе
👇👇👇👇👇👇👇👇
▬▬▬▬▬▬▬▬▬▬
© @eyescub3 ©
▬▬▬▬▬▬▬▬▬▬ | 175 | 15 | 7 | 2 | Loading... | |
Міхzір․ru dаtаbаѕе 🔥
Lіnеѕ: 296000+
Dаtа: Еmаіl‚ Νаmе‚ ѕum‚ іnfо‚ аddrеѕѕ‚ сіtу‚ рhоnе_numbеr‚ ѕtrееt‚ hоuѕе‚ flаt‚ оrg_nаmе‚ оrg_іnn‚ оrg_аddrеѕѕ‚ bіrth_dаtе‚ раѕѕwоrd_рlаіntехt‚ rеgіоn
👇👇👇👇👇👇👇👇
▬▬▬▬▬▬▬▬▬▬
© @eyescub3 ©
▬▬▬▬▬▬▬▬▬▬ | 171 | 14 | 0 | 1 | Loading... | |
 Stablecoin DEX Arbitrage Scanner
Stop wasting time checking DEXs manually.
Our Stablecoin Arbitrage Scanner automatically scans multiple blockchain networks and decentralized exchanges to identify the lowest buy price and the highest sell price for every supported token.
🔍 Features
✅ Scans multiple chains simultaneously
✅ Finds the cheapest DEX to buy
✅ Finds the most expensive DEX to sell
✅ Calculates the real arbitrage spread (%)
✅ Filters by minimum liquidity and 24h trading volume
✅ Export results to CSV and TXT instantly
✅ Fast, automated market scanning
Turn thousands of liquidity pools into actionable arbitrage opportunities in seconds.
Buy Low → Sell High → Repeat.
Perfect for:
Arbitrage traders
Stablecoin market makers
DeFi traders
Quant trading teams
MEV researchers
Scan smarter. Trade faster. Maximize your edge. | 160 | 0 | 0 | 0 | Loading... | |
correct yum n milin gy 2 rupy | 1 | 0 | 0 | 0 | Loading... | |
Portugal 🇵🇹 airport is that way😅 | 548 | 1 | 2 | 0 | Loading... | |
https://t.me/lazarus_hack | 196 | 2 | 0 | 0 | Loading... | |
New tools here | 196 | 0 | 0 | 0 | Loading... |
