https://github.com/chorankates/h4ck

a collection of writeups and tools related to ~embedded device ~hacking
https://github.com/chorankates/h4ck

Last synced: 3 months ago
JSON representation

a collection of writeups and tools related to ~embedded device ~hacking

• Host: GitHub
• URL: https://github.com/chorankates/h4ck
• Owner: chorankates
• Created: 2016-07-01T01:38:22.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2018-05-23T05:08:37.000Z (about 6 years ago)
• Last Synced: 2024-01-21T07:36:34.646Z (5 months ago)
• Language: Shell
• Homepage:
• Size: 66.6 MB
• Stars: 137
• Watchers: 15
• Forks: 23
• Open Issues: 2
• Metadata Files:
  • Readme: README.md

Lists

• awesome-security-collection - **97**星

README

        
# h4ck

a collection of writeups and tools related to ~embedded device ~hacking

shiny devices are fun, finding and poking holes in their interface is a _lot_ of fun

## devices

name | description | url

-----|-------------|-----

[CUJO](http://trycujo.com) | purposeful MiTM device for internet 'security' | [cujo](cujo)

[LG webOS](http://www.lge.com) | HTTP phone home is never a good idea | [lg-webOS](lg_webOS)

[HooToo TripMate series](http://www.hootoo.com) | there are lots of problems, some end up at root access | [hootoo](hootoo)

[TriCascade i-Bright7x](http://www.tricascade.com/i-bright7x-smart-surge-protector/) | work in progress, SSID password from MAC address, telnet but no access | [i-Bright7x](i-Bright7x)

[Lametric Time](http://lametric.com) | WiFi/internet enabled clock/LED display, unnecessary services exposed, root access obtainable | [lametric](lametric)

[Philips Hue](http://www.meethue.com) | device communication insecure, Ruby library/CLI to control via REST HTTP | [hued](https://github.com/chorankates/hued)

[RAV FileHub](http://www.ravpower.com/ravpower-rp-wd02-filehub-6000mah-power-bank.html) | a HooToo by any other name.. but with a twist | [rav-filehub](rav-filehub)

[RevoLabs flx UC1000](http://www.revolabs.com/products/conference-phones/wired-conference-phones/flx-uc-phones/flx-uc-1000-speakerphone) | more than just brute forcing the PIN | [revolabs-flx_uc_1000](revolabs-flx_uc_1000)

[Ubiquiti mFi mPower](https://www.ubnt.com/mfi/mpower/) | root access trivially obtained, credential leakage, unnecessary services exposed | [ubiquiti/mFi](ubiquiti/mfi)

[Belkin Weemo Mini](http://www.belkin.com/us/p/P-F7C063/) | work in progress, recon mostly done | [weemo](weemo)