nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
7fc419787b71a253a3f19e5b2fda7984aa614d65
PoC-in-GitHub/2025/CVE-2025-36911.json
T

398 lines
14 KiB
JSON
Raw Blame History

[
{
"id": 1136048004,
"name": "DIY_WhisperPair",
"full_name": "SpectrixDev\/DIY_WhisperPair",
"owner": {
"login": "SpectrixDev",
"id": 29328207,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29328207?v=4",
"html_url": "https:\/\/github.com\/SpectrixDev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SpectrixDev\/DIY_WhisperPair",
"description": "Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit",
"fork": false,
"created_at": "2026-01-17T01:18:36Z",
"updated_at": "2026-11-02T12:23:47Z",
"pushed_at": "2026-05-28T08:12:40Z",
"stargazers_count": 108,
"watchers_count": 108,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bluetooth",
"cve-2025-36911",
"cybersecurity",
"python",
"whisperpair"
],
"visibility": "public",
"forks": 17,
"watchers": 108,
"score": 0,
"subscribers_count": 4
},
{
"id": 1136093040,
"name": "CVE-2025-36911_scan",
"full_name": "Cedric-Martz\/CVE-2025-36911_scan",
"owner": {
"login": "Cedric-Martz",
"id": 114771385,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114771385?v=4",
"html_url": "https:\/\/github.com\/Cedric-Martz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Cedric-Martz\/CVE-2025-36911_scan",
"description": "This script can be used to check if a Bluetooth device is vulnerable to CVE-2025-36911.",
"fork": false,
"created_at": "2026-01-17T03:48:47Z",
"updated_at": "2026-09-20T12:29:07Z",
"pushed_at": "2026-01-17T03:55:26Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1136124411,
"name": "wpair-app",
"full_name": "zalexdev\/wpair-app",
"owner": {
"login": "zalexdev",
"id": 73614708,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73614708?v=4",
"html_url": "https:\/\/github.com\/zalexdev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zalexdev\/wpair-app",
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-11-02T17:17:43Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 865,
"watchers_count": 865,
"has_discussions": false,
"forks_count": 98,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 98,
"watchers": 865,
"score": 0,
"subscribers_count": 23
},
{
"id": 1136290406,
"name": "CVE-2025-36911-Wisper_Pair_Target_Finder",
"full_name": "SteamPunk424\/CVE-2025-36911-Wisper_Pair_Target_Finder",
"owner": {
"login": "SteamPunk424",
"id": 32554693,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32554693?v=4",
"html_url": "https:\/\/github.com\/SteamPunk424",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SteamPunk424\/CVE-2025-36911-Wisper_Pair_Target_Finder",
"description": "This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages!",
"fork": false,
"created_at": "2026-01-17T12:21:30Z",
"updated_at": "2026-08-16T21:21:55Z",
"pushed_at": "2026-01-18T03:54:13Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1137565232,
"name": "wpair-cli",
"full_name": "markmysler\/wpair-cli",
"owner": {
"login": "markmysler",
"id": 104447445,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104447445?v=4",
"html_url": "https:\/\/github.com\/markmysler",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/markmysler\/wpair-cli",
"description": "Defensive scanner for CVE-2025-36911, the Google Fast Pair Bluetooth vulnerability.",
"fork": false,
"created_at": "2026-01-19T14:36:43Z",
"updated_at": "2026-10-23T16:30:54Z",
"pushed_at": "2026-01-19T14:50:58Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bluetooth",
"cve",
"cybersecurity",
"python",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1138002588,
"name": "FrostedFastPair",
"full_name": "PivotChip\/FrostedFastPair",
"owner": {
"login": "PivotChip",
"id": 250757727,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/250757727?v=4",
"html_url": "https:\/\/github.com\/PivotChip",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/PivotChip\/FrostedFastPair",
"description": "WhisperPair (CVE-2025-36911) POC for ESP32 device ",
"fork": false,
"created_at": "2026-01-20T05:50:37Z",
"updated_at": "2026-09-23T07:54:30Z",
"pushed_at": "2026-01-31T03:16:06Z",
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ble",
"bluetooth",
"cve-2025-36911",
"cybersecurity",
"esp32",
"whisperpair"
],
"visibility": "public",
"forks": 2,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
{
"id": 1138816494,
"name": "whisper-pair",
"full_name": "ap425q\/whisper-pair",
"owner": {
"login": "ap425q",
"id": 40756185,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40756185?v=4",
"html_url": "https:\/\/github.com\/ap425q",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ap425q\/whisper-pair",
"description": "A Vulnerablity Scanner for Whisper Pair (CVE-2025-36911)",
"fork": false,
"created_at": "2026-01-21T06:40:16Z",
"updated_at": "2026-08-15T05:01:49Z",
"pushed_at": "2026-01-23T10:06:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1142002086,
"name": "whisperpair-poc-tool",
"full_name": "aalex954\/whisperpair-poc-tool",
"owner": {
"login": "aalex954",
"id": 6628565,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6628565?v=4",
"html_url": "https:\/\/github.com\/aalex954",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aalex954\/whisperpair-poc-tool",
"description": "A security research tool that identifies and demonstrates the CVE-2025-36911: Fast Pair Pairing Mode Bypass vulnerability",
"fork": false,
"created_at": "2026-01-25T19:48:05Z",
"updated_at": "2026-08-27T11:17:47Z",
"pushed_at": "2026-01-25T20:52:36Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
{
"id": 1143228184,
"name": "CVE-2025-36911-exploit",
"full_name": "PentHertz\/CVE-2025-36911-exploit",
"owner": {
"login": "PentHertz",
"id": 59710120,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59710120?v=4",
"html_url": "https:\/\/github.com\/PentHertz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/PentHertz\/CVE-2025-36911-exploit",
"description": "Exploit of the CVE-2025-36911 vulnerability in Python for testing our own equipment",
"fork": false,
"created_at": "2026-01-27T10:18:07Z",
"updated_at": "2026-08-27T11:16:37Z",
"pushed_at": "2026-01-28T17:42:44Z",
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2025-36911",
"pentesting"
],
"visibility": "public",
"forks": 2,
"watchers": 27,
"score": 0,
"subscribers_count": 1
},
{
"id": 1196320461,
"name": "WhisperPair",
"full_name": "KULeuven-COSIC\/WhisperPair",
"owner": {
"login": "KULeuven-COSIC",
"id": 23198622,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23198622?v=4",
"html_url": "https:\/\/github.com\/KULeuven-COSIC",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KULeuven-COSIC\/WhisperPair",
"description": "The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.",
"fork": false,
"created_at": "2026-03-30T15:29:04Z",
"updated_at": "2026-11-01T22:33:28Z",
"pushed_at": "2026-09-21T23:20:55Z",
"stargazers_count": 114,
"watchers_count": 114,
"has_discussions": true,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bluetooth",
"bluetooth-security",
"security",
"whisperpair",
"wireless-security"
],
"visibility": "public",
"forks": 13,
"watchers": 114,
"score": 0,
"subscribers_count": 2
},
{
"id": 1292552968,
"name": "Whisper_Bully",
"full_name": "Ymsniper\/Whisper_Bully",
"owner": {
"login": "Ymsniper",
"id": 190832399,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190832399?v=4",
"html_url": "https:\/\/github.com\/Ymsniper",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ymsniper\/Whisper_Bully",
"description": "Three-stage Bluetooth BDADDR extraction, DoS & hijack on Fast Pair devices; unpatched primitives outside CVE-2025-36911 scope (no Ubertooth needed)",
"fork": false,
"created_at": "2026-07-07T16:09:58Z",
"updated_at": "2026-11-02T06:08:17Z",
"pushed_at": "2026-07-13T00:58:01Z",
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bluetooth",
"dos-attack",
"hijack",
"whisperpair"
],
"visibility": "public",
"forks": 1,
"watchers": 40,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink