From 1445a1bc58d2d422b29414df3ae19b4e67e3d70c Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 15 Oct 2026 12:35:37 +0000 Subject: [PATCH] Move IoT docs into root iot directory Co-authored-by: Mr-xn <18260135+Mr-xn@users.noreply.github.com> --- README.md | 91 +++++++++++++++++++ ...成本搭建摄像头漏洞挖掘环境.md | 0 .../2021年物联网设备CVE天梯榜.md | 0 .../2021强网杯赛题Mi Route复现.md | 0 ...2 祥云杯 Misc super_electric WriteUp.md | 0 ...联网安全大赛复赛-工控Writeup.md | 0 ...电行业赛道 writeup by Mini-Venom.md | 0 .../AFL源码分析系列——afl-fuzz(3).md | 0 ...分析系列（三）-- afl-llvm-mode.md | 0 .../Asus 路由器栈溢出漏洞分析.md | 0 ...析，逆向工程，仿真和模糊化.md | 0 ...简单使用，以CVE-2018-5767为例.md | 0 .../iot => iot}/Brother VC-500W 打印机.md | 0 {books/iot => iot}/README.md | 0 .../boofuzz 源码笔记（一）.md | 0 .../boofuzz 源码笔记（三）.md | 0 .../boofuzz 源码笔记（二）.md | 0 ...的RCE远程代码执行攻击白皮书.md | 0 ...一文读懂ARM架构下的漏洞利用.md | 0 .../一种加密固件的解密思路.md | 0 .../iot => iot}/从1day分析到0day挖掘.md | 0 .../从一道CTF题目看DNS服务漏洞.md | 0 .../从三道CTF赛题看arm栈溢出.md | 0 ...单0day漏洞挖>后的简单0day挖掘.md | 0 ...始的NetGear RAX50 模拟环境搭建.md | 0 ...障注入绕过瑞萨 RH850的读保护.md | 0 ...电压故障注入提取nrf52840固件.md | 0 ...地址对齐问题及验证固件分析.md | 0 ...越漏洞对某光猫进行固件提取.md | 0 ...为HG532 - CVE-2017-17215漏洞简析.md | 0 ...AC系列固件重打包与后门植入.md | 0 ...硕RT-AC68U系列漏洞复现（一）.md | 0 ...硕RT-AC68U系列漏洞复现（二）.md | 0 .../卫星通信GSE封装解析.md | 0 ...卫星黑客挑战赛 | IIC协议破解.md | 0 .../固件CGI分析手法（三）.md | 0 .../固件CGI分析手法（二）.md | 0 .../固件安全-函数劫持以及patch.md | 0 ...于CVE-2022-1388的F5 BIG-IP后渗透.md | 0 ...PCILeech和MemProcFS的DMA攻击浅谈.md | 0 ...模拟环境构建方法及自动脚本.md | 0 .../如何hack掉一台空气净化器^^.md | 0 ...如何手搓一个Wi-Fi协议栈（1）.md | 0 ...如何手搓一个Wi-Fi协议栈（2）.md | 0 ...测试模式获得EL3提取固件密钥.md | 0 .../对施耐德NOE77101固件浅析.md | 0 ...9000路由器CVE-2023-26315漏洞复现.md | 0 ...器0day漏洞挖掘（水漏洞版）.md | 0 ...ips架构下固件分析与漏洞挖掘.md | 0 ...rnet Printing Protocol(IPP)协议分析.md | 0 .../打印机漏洞研究入门.md | 0 .../探究vxworks文件名恢复.md | 0 .../iot => iot}/提取共享单车固件.md | 0 ...三magicR100存在DOS攻击漏洞分析.md | 0 {books/iot => iot}/无人机安全简介.md | 0 .../无人机通信协议MAVLink简介.md | 0 .../无线遥控信号逆向分析.md | 0 .../iot => iot}/智能电视漏洞汇总.md | 0 ...位探索硬件、固件、app和云端.md | 0 .../某T摄像头固件提取分析.md | 0 ...某品牌智能墙壁插座协议分析.md | 0 ...存在通用未授权命令执行漏洞.md | 0 ...某米路由器命令执行漏洞分析.md | 0 .../某网络设备解密的两种思路.md | 0 ...析与多种栈溢出利用方法探究.md | 0 .../模拟固件下的patch与hook.md | 0 ...析cgi与lighttpd之间的调用过程.md | 0 .../浅谈路由器漏洞挖掘.md | 0 .../漏洞复现到简单0day漏洞挖掘.md | 0 .../iot => iot}/物联网MQTT协议分析.md | 0 .../物联网安全之Unicorn框架初探.md | 0 .../物联网安全之qiling框架初探.md | 0 ...全从零开始-BIG-IP CVE漏洞分析.md | 0 ...始-BIG-IP(CVE-2023-22374)漏洞分析.md | 0 .../电信天翼网关3.0分析（上）.md | 0 .../组播路由介绍以及攻击实战.md | 0 ...款路由网关设备存在多个漏洞.md | 0 ...Sophos UTM 固件反编译 Perl 源码.md | 0 .../腾达AC1200路由器漏洞分析.md | 0 .../花式固件提取之韩国KT固件.md | 0 .../花式解密Zyxel加密固件包.md | 0 ...设备通杀未授权RCE的挖掘经历.md | 0 ...记一次固件解密学习--X软路由.md | 0 .../记一次酒店wifi设备分析.md | 0 .../设备漏洞战记之固件提取篇.md | 0 ...万Zyxel设备被曝存在高危漏洞.md | 0 .../路由器TP-Link WR740后门漏洞.md | 0 ...洞分析及复现（CVE-2022-30065）.md | 0 .../逆向硬件，手搓SDR射频设备.md | 0 ...进行upnp漏洞分析之CVE-2022-25106.md | 0 ...执行漏洞复现（CVE-2023-45866 ）.md | 0 ...06 路由器固件解密及模拟实战.md | 0 92 files changed, 91 insertions(+) rename {books/iot => iot}/0成本搭建摄像头漏洞挖掘环境.md (100%) rename {books/iot => iot}/2021年物联网设备CVE天梯榜.md (100%) rename {books/iot => iot}/2021强网杯赛题Mi Route复现.md (100%) rename {books/iot => iot}/2022 祥云杯 Misc super_electric WriteUp.md (100%) rename {books/iot => iot}/2022河南工业互联网安全大赛复赛-工控Writeup.md (100%) rename {books/iot => iot}/2024中国工业互联网安全大赛智能家电行业赛道 writeup by Mini-Venom.md (100%) rename {books/iot => iot}/AFL源码分析系列——afl-fuzz(3).md (100%) rename {books/iot => iot}/AFL源码分析系列（三）-- afl-llvm-mode.md (100%) rename {books/iot => iot}/Asus 路由器栈溢出漏洞分析.md (100%) rename {books/iot => iot}/Atmel SAM Cortex-M7 MCU rom 分析，逆向工程，仿真和模糊化.md (100%) rename {books/iot => iot}/BooFuzz的简单使用，以CVE-2018-5767为例.md (100%) rename {books/iot => iot}/Brother VC-500W 打印机.md (100%) rename {books/iot => iot}/README.md (100%) rename {books/iot => iot}/boofuzz 源码笔记（一）.md (100%) rename {books/iot => iot}/boofuzz 源码笔记（三）.md (100%) rename {books/iot => iot}/boofuzz 源码笔记（二）.md (100%) rename {books/iot => iot}/“入侵5G手机”（一）Black Hat USA 2021：通过无线基带-针对5G智能手机的RCE远程代码执行攻击白皮书.md (100%) rename {books/iot => iot}/一文读懂ARM架构下的漏洞利用.md (100%) rename {books/iot => iot}/一种加密固件的解密思路.md (100%) rename {books/iot => iot}/从1day分析到0day挖掘.md (100%) rename {books/iot => iot}/从一道CTF题目看DNS服务漏洞.md (100%) rename {books/iot => iot}/从三道CTF赛题看arm栈溢出.md (100%) rename {books/iot => iot}/从看<漏洞复现到简单0day漏洞挖>后的简单0day挖掘.md (100%) rename {books/iot => iot}/从零开始的NetGear RAX50 模拟环境搭建.md (100%) rename {books/iot => iot}/使用故障注入绕过瑞萨 RH850的读保护.md (100%) rename {books/iot => iot}/侧信道电压故障注入提取nrf52840固件.md (100%) rename {books/iot => iot}/关于thumb2指令下函数运行地址对齐问题及验证固件分析.md (100%) rename {books/iot => iot}/利用目录穿越漏洞对某光猫进行固件提取.md (100%) rename {books/iot => iot}/华为HG532 - CVE-2017-17215漏洞简析.md (100%) rename {books/iot => iot}/华硕AC系列固件重打包与后门植入.md (100%) rename {books/iot => iot}/华硕RT-AC68U系列漏洞复现（一）.md (100%) rename {books/iot => iot}/华硕RT-AC68U系列漏洞复现（二）.md (100%) rename {books/iot => iot}/卫星通信GSE封装解析.md (100%) rename {books/iot => iot}/卫星黑客挑战赛 | IIC协议破解.md (100%) rename {books/iot => iot}/固件CGI分析手法（三）.md (100%) rename {books/iot => iot}/固件CGI分析手法（二）.md (100%) rename {books/iot => iot}/固件安全-函数劫持以及patch.md (100%) rename {books/iot => iot}/基于CVE-2022-1388的F5 BIG-IP后渗透.md (100%) rename {books/iot => iot}/基于PCILeech和MemProcFS的DMA攻击浅谈.md (100%) rename {books/iot => iot}/多种架构模拟环境构建方法及自动脚本.md (100%) rename {books/iot => iot}/如何hack掉一台空气净化器^^.md (100%) rename {books/iot => iot}/如何手搓一个Wi-Fi协议栈（1）.md (100%) rename {books/iot => iot}/如何手搓一个Wi-Fi协议栈（2）.md (100%) rename {books/iot => iot}/如何通过测试模式获得EL3提取固件密钥.md (100%) rename {books/iot => iot}/对施耐德NOE77101固件浅析.md (100%) rename {books/iot => iot}/小米AX9000路由器CVE-2023-26315漏洞复现.md (100%) rename {books/iot => iot}/思科企业级路由器0day漏洞挖掘（水漏洞版）.md (100%) rename {books/iot => iot}/手把手带你分析mips架构下固件分析与漏洞挖掘.md (100%) rename {books/iot => iot}/打印机之Internet Printing Protocol(IPP)协议分析.md (100%) rename {books/iot => iot}/打印机漏洞研究入门.md (100%) rename {books/iot => iot}/探究vxworks文件名恢复.md (100%) rename {books/iot => iot}/提取共享单车固件.md (100%) rename {books/iot => iot}/新华三magicR100存在DOS攻击漏洞分析.md (100%) rename {books/iot => iot}/无人机安全简介.md (100%) rename {books/iot => iot}/无人机通信协议MAVLink简介.md (100%) rename {books/iot => iot}/无线遥控信号逆向分析.md (100%) rename {books/iot => iot}/智能电视漏洞汇总.md (100%) rename {books/iot => iot}/智能门锁安全分析：多方位探索硬件、固件、app和云端.md (100%) rename {books/iot => iot}/某T摄像头固件提取分析.md (100%) rename {books/iot => iot}/某品牌智能墙壁插座协议分析.md (100%) rename {books/iot => iot}/某摄像头存在通用未授权命令执行漏洞.md (100%) rename {books/iot => iot}/某米路由器命令执行漏洞分析.md (100%) rename {books/iot => iot}/某网络设备解密的两种思路.md (100%) rename {books/iot => iot}/某路由器漏洞分析与多种栈溢出利用方法探究.md (100%) rename {books/iot => iot}/模拟固件下的patch与hook.md (100%) rename {books/iot => iot}/浅析cgi与lighttpd之间的调用过程.md (100%) rename {books/iot => iot}/浅谈路由器漏洞挖掘.md (100%) rename {books/iot => iot}/漏洞复现到简单0day漏洞挖掘.md (100%) rename {books/iot => iot}/物联网MQTT协议分析.md (100%) rename {books/iot => iot}/物联网安全之Unicorn框架初探.md (100%) rename {books/iot => iot}/物联网安全之qiling框架初探.md (100%) rename {books/iot => iot}/物联网安全从零开始-BIG-IP CVE漏洞分析.md (100%) rename {books/iot => iot}/物联网安全从零开始-BIG-IP(CVE-2023-22374)漏洞分析.md (100%) rename {books/iot => iot}/电信天翼网关3.0分析（上）.md (100%) rename {books/iot => iot}/组播路由介绍以及攻击实战.md (100%) rename {books/iot => iot}/维盟wayos多款路由网关设备存在多个漏洞.md (100%) rename {books/iot => iot}/网络设备分析实战之Sophos UTM 固件反编译 Perl 源码.md (100%) rename {books/iot => iot}/腾达AC1200路由器漏洞分析.md (100%) rename {books/iot => iot}/花式固件提取之韩国KT固件.md (100%) rename {books/iot => iot}/花式解密Zyxel加密固件包.md (100%) rename {books/iot => iot}/记一次全设备通杀未授权RCE的挖掘经历.md (100%) rename {books/iot => iot}/记一次固件解密学习--X软路由.md (100%) rename {books/iot => iot}/记一次酒店wifi设备分析.md (100%) rename {books/iot => iot}/设备漏洞战记之固件提取篇.md (100%) rename {books/iot => iot}/超十万Zyxel设备被曝存在高危漏洞.md (100%) rename {books/iot => iot}/路由器TP-Link WR740后门漏洞.md (100%) rename {books/iot => iot}/车联网开源组件BusyBox漏洞分析及复现（CVE-2022-30065）.md (100%) rename {books/iot => iot}/逆向硬件，手搓SDR射频设备.md (100%) rename {books/iot => iot}/通过Fap进行upnp漏洞分析之CVE-2022-25106.md (100%) rename {books/iot => iot}/零点击代码执行漏洞复现（CVE-2023-45866 ）.md (100%) rename {books/iot => iot}/魔数障眼法：Tenda-4G06 路由器固件解密及模拟实战.md (100%) diff --git a/README.md b/README.md index 3466e2f..bb0051c 100644 --- a/README.md +++ b/README.md @@ -89,6 +89,97 @@ - [Tsec-Salon：腾讯安全沙龙历届活动材料](https://github.com/Yeti-791/Tsec-Salon)|[BLACKHAT_Asia2026: Black Hat Asia 2026 议题资料汇总](https://github.com/Mr-xn/BLACKHAT_Asia2026)|[Java Ghost Bits - Black Hat Asia 2026 演讲PDF(幽灵比特位:高位截断)](https://i.blackhat.com/Asia-26/Presentations/Asia-26-Bai-Cast-Attack-Ghost-Bits-4.23.pdf)|[GBitsTools: Ghost Bits攻击工具(Python GUI/CLI)](https://github.com/shiyeshu/GBitsTools)|[GbitsGen: Ghost Bits字符生成工具](https://github.com/qi4L/GbitsGen)|[ghost-bits-lab: Ghost Bits交互式安全实验靶机(Java)](https://github.com/Xc1Ym/ghost-bits-lab) - [CVE-2026-34908-check：UniFi OS Server 身份验证绕过与未授权远程代码执行(RCE)检测工具](https://github.com/BishopFox/CVE-2026-34908-check) | [相关技术分析：Popping Root on UniFi OS Server](https://bishopfox.com/blog/popping-root-on-unifi-os-server-unauthenticated-rce-chain-detection-analysis) +- [0成本搭建摄像头漏洞挖掘环境.md](./iot/0成本搭建摄像头漏洞挖掘环境.md) +- [2021年物联网设备CVE天梯榜.md](./iot/2021年物联网设备CVE天梯榜.md) +- [2021强网杯赛题Mi Route复现.md](./iot/2021强网杯赛题Mi%20Route复现.md) +- [2022 祥云杯 Misc super_electric WriteUp.md](./iot/2022%20祥云杯%20Misc%20super_electric%20WriteUp.md) +- [2022河南工业互联网安全大赛复赛-工控Writeup.md](./iot/2022河南工业互联网安全大赛复赛-工控Writeup.md) +- [2024中国工业互联网安全大赛智能家电行业赛道 writeup by Mini-Venom.md](./iot/2024中国工业互联网安全大赛智能家电行业赛道%20writeup%20by%20Mini-Venom.md) +- [AFL源码分析系列——afl-fuzz(3).md](./iot/AFL源码分析系列——afl-fuzz(3).md) +- [AFL源码分析系列（三）-- afl-llvm-mode.md](./iot/AFL源码分析系列（三）--%20afl-llvm-mode.md) +- [Asus 路由器栈溢出漏洞分析.md](./iot/Asus%20路由器栈溢出漏洞分析.md) +- [Atmel SAM Cortex-M7 MCU rom 分析，逆向工程，仿真和模糊化.md](./iot/Atmel%20SAM%20Cortex-M7%20MCU%20rom%20分析，逆向工程，仿真和模糊化.md) +- [BooFuzz的简单使用，以CVE-2018-5767为例.md](./iot/BooFuzz的简单使用，以CVE-2018-5767为例.md) +- [Brother VC-500W 打印机.md](./iot/Brother%20VC-500W%20打印机.md) +- [boofuzz 源码笔记（一）.md](./iot/boofuzz%20源码笔记（一）.md) +- [boofuzz 源码笔记（三）.md](./iot/boofuzz%20源码笔记（三）.md) +- [boofuzz 源码笔记（二）.md](./iot/boofuzz%20源码笔记（二）.md) +- [“入侵5G手机”（一）Black Hat USA 2021：通过无线基带-针对5G智能手机的RCE远程代码执行攻击白皮书.md](./iot/“入侵5G手机”（一）Black%20Hat%20USA%202021：通过无线基带-针对5G智能手机的RCE远程代码执行攻击白皮书.md) +- [一文读懂ARM架构下的漏洞利用.md](./iot/一文读懂ARM架构下的漏洞利用.md) +- [一种加密固件的解密思路.md](./iot/一种加密固件的解密思路.md) +- [从1day分析到0day挖掘.md](./iot/从1day分析到0day挖掘.md) +- [从一道CTF题目看DNS服务漏洞.md](./iot/从一道CTF题目看DNS服务漏洞.md) +- [从三道CTF赛题看arm栈溢出.md](./iot/从三道CTF赛题看arm栈溢出.md) +- [从看<漏洞复现到简单0day漏洞挖>后的简单0day挖掘.md](./iot/从看<漏洞复现到简单0day漏洞挖>后的简单0day挖掘.md) +- [从零开始的NetGear RAX50 模拟环境搭建.md](./iot/从零开始的NetGear%20RAX50%20模拟环境搭建.md) +- [使用故障注入绕过瑞萨 RH850的读保护.md](./iot/使用故障注入绕过瑞萨%20RH850的读保护.md) +- [侧信道电压故障注入提取nrf52840固件.md](./iot/侧信道电压故障注入提取nrf52840固件.md) +- [关于thumb2指令下函数运行地址对齐问题及验证固件分析.md](./iot/关于thumb2指令下函数运行地址对齐问题及验证固件分析.md) +- [利用目录穿越漏洞对某光猫进行固件提取.md](./iot/利用目录穿越漏洞对某光猫进行固件提取.md) +- [华为HG532 - CVE-2017-17215漏洞简析.md](./iot/华为HG532%20-%20CVE-2017-17215漏洞简析.md) +- [华硕AC系列固件重打包与后门植入.md](./iot/华硕AC系列固件重打包与后门植入.md) +- [华硕RT-AC68U系列漏洞复现（一）.md](./iot/华硕RT-AC68U系列漏洞复现（一）.md) +- [华硕RT-AC68U系列漏洞复现（二）.md](./iot/华硕RT-AC68U系列漏洞复现（二）.md) +- [卫星通信GSE封装解析.md](./iot/卫星通信GSE封装解析.md) +- [卫星黑客挑战赛 | IIC协议破解.md](./iot/卫星黑客挑战赛%20|%20IIC协议破解.md) +- [固件CGI分析手法（三）.md](./iot/固件CGI分析手法（三）.md) +- [固件CGI分析手法（二）.md](./iot/固件CGI分析手法（二）.md) +- [固件安全-函数劫持以及patch.md](./iot/固件安全-函数劫持以及patch.md) +- [基于CVE-2022-1388的F5 BIG-IP后渗透.md](./iot/基于CVE-2022-1388的F5%20BIG-IP后渗透.md) +- [基于PCILeech和MemProcFS的DMA攻击浅谈.md](./iot/基于PCILeech和MemProcFS的DMA攻击浅谈.md) +- [多种架构模拟环境构建方法及自动脚本.md](./iot/多种架构模拟环境构建方法及自动脚本.md) +- [如何hack掉一台空气净化器^^.md](./iot/如何hack掉一台空气净化器^^.md) +- [如何手搓一个Wi-Fi协议栈（1）.md](./iot/如何手搓一个Wi-Fi协议栈（1）.md) +- [如何手搓一个Wi-Fi协议栈（2）.md](./iot/如何手搓一个Wi-Fi协议栈（2）.md) +- [如何通过测试模式获得EL3提取固件密钥.md](./iot/如何通过测试模式获得EL3提取固件密钥.md) +- [对施耐德NOE77101固件浅析.md](./iot/对施耐德NOE77101固件浅析.md) +- [小米AX9000路由器CVE-2023-26315漏洞复现.md](./iot/小米AX9000路由器CVE-2023-26315漏洞复现.md) +- [思科企业级路由器0day漏洞挖掘（水漏洞版）.md](./iot/思科企业级路由器0day漏洞挖掘（水漏洞版）.md) +- [手把手带你分析mips架构下固件分析与漏洞挖掘.md](./iot/手把手带你分析mips架构下固件分析与漏洞挖掘.md) +- [打印机之Internet Printing Protocol(IPP)协议分析.md](./iot/打印机之Internet%20Printing%20Protocol(IPP)协议分析.md) +- [打印机漏洞研究入门.md](./iot/打印机漏洞研究入门.md) +- [探究vxworks文件名恢复.md](./iot/探究vxworks文件名恢复.md) +- [提取共享单车固件.md](./iot/提取共享单车固件.md) +- [新华三magicR100存在DOS攻击漏洞分析.md](./iot/新华三magicR100存在DOS攻击漏洞分析.md) +- [无人机安全简介.md](./iot/无人机安全简介.md) +- [无人机通信协议MAVLink简介.md](./iot/无人机通信协议MAVLink简介.md) +- [无线遥控信号逆向分析.md](./iot/无线遥控信号逆向分析.md) +- [智能电视漏洞汇总.md](./iot/智能电视漏洞汇总.md) +- [智能门锁安全分析：多方位探索硬件、固件、app和云端.md](./iot/智能门锁安全分析：多方位探索硬件、固件、app和云端.md) +- [某T摄像头固件提取分析.md](./iot/某T摄像头固件提取分析.md) +- [某品牌智能墙壁插座协议分析.md](./iot/某品牌智能墙壁插座协议分析.md) +- [某摄像头存在通用未授权命令执行漏洞.md](./iot/某摄像头存在通用未授权命令执行漏洞.md) +- [某米路由器命令执行漏洞分析.md](./iot/某米路由器命令执行漏洞分析.md) +- [某网络设备解密的两种思路.md](./iot/某网络设备解密的两种思路.md) +- [某路由器漏洞分析与多种栈溢出利用方法探究.md](./iot/某路由器漏洞分析与多种栈溢出利用方法探究.md) +- [模拟固件下的patch与hook.md](./iot/模拟固件下的patch与hook.md) +- [浅析cgi与lighttpd之间的调用过程.md](./iot/浅析cgi与lighttpd之间的调用过程.md) +- [浅谈路由器漏洞挖掘.md](./iot/浅谈路由器漏洞挖掘.md) +- [漏洞复现到简单0day漏洞挖掘.md](./iot/漏洞复现到简单0day漏洞挖掘.md) +- [物联网MQTT协议分析.md](./iot/物联网MQTT协议分析.md) +- [物联网安全之Unicorn框架初探.md](./iot/物联网安全之Unicorn框架初探.md) +- [物联网安全之qiling框架初探.md](./iot/物联网安全之qiling框架初探.md) +- [物联网安全从零开始-BIG-IP CVE漏洞分析.md](./iot/物联网安全从零开始-BIG-IP%20CVE漏洞分析.md) +- [物联网安全从零开始-BIG-IP(CVE-2023-22374)漏洞分析.md](./iot/物联网安全从零开始-BIG-IP(CVE-2023-22374)漏洞分析.md) +- [电信天翼网关3.0分析（上）.md](./iot/电信天翼网关3.0分析（上）.md) +- [组播路由介绍以及攻击实战.md](./iot/组播路由介绍以及攻击实战.md) +- [维盟wayos多款路由网关设备存在多个漏洞.md](./iot/维盟wayos多款路由网关设备存在多个漏洞.md) +- [网络设备分析实战之Sophos UTM 固件反编译 Perl 源码.md](./iot/网络设备分析实战之Sophos%20UTM%20固件反编译%20Perl%20%20源码.md) +- [腾达AC1200路由器漏洞分析.md](./iot/腾达AC1200路由器漏洞分析.md) +- [花式固件提取之韩国KT固件.md](./iot/花式固件提取之韩国KT固件.md) +- [花式解密Zyxel加密固件包.md](./iot/花式解密Zyxel加密固件包.md) +- [记一次全设备通杀未授权RCE的挖掘经历.md](./iot/记一次全设备通杀未授权RCE的挖掘经历.md) +- [记一次固件解密学习--X软路由.md](./iot/记一次固件解密学习--X软路由.md) +- [记一次酒店wifi设备分析.md](./iot/记一次酒店wifi设备分析.md) +- [设备漏洞战记之固件提取篇.md](./iot/设备漏洞战记之固件提取篇.md) +- [超十万Zyxel设备被曝存在高危漏洞.md](./iot/超十万Zyxel设备被曝存在高危漏洞.md) +- [路由器TP-Link WR740后门漏洞.md](./iot/路由器TP-Link%20WR740后门漏洞.md) +- [车联网开源组件BusyBox漏洞分析及复现（CVE-2022-30065）.md](./iot/车联网开源组件BusyBox漏洞分析及复现（CVE-2022-30065）.md) +- [逆向硬件，手搓SDR射频设备.md](./iot/逆向硬件，手搓SDR射频设备.md) +- [通过Fap进行upnp漏洞分析之CVE-2022-25106.md](./iot/通过Fap进行upnp漏洞分析之CVE-2022-25106.md) +- [零点击代码执行漏洞复现（CVE-2023-45866 ）.md](./iot/零点击代码执行漏洞复现（CVE-2023-45866%20）.md) +- [魔数障眼法：Tenda-4G06 路由器固件解密及模拟实战.md](./iot/魔数障眼法：Tenda-4G06%20路由器固件解密及模拟实战.md) + ## Web APP - [ShowDoc <= v3.9.2 registerByVerify 未授权PHP代码注入致远程代码执行漏洞](./web/ShowDoc-registerByVerify-username-rce.md) diff --git a/books/iot/0成本搭建摄像头漏洞挖掘环境.md b/iot/0成本搭建摄像头漏洞挖掘环境.md similarity index 100% rename from books/iot/0成本搭建摄像头漏洞挖掘环境.md rename to iot/0成本搭建摄像头漏洞挖掘环境.md diff --git a/books/iot/2021年物联网设备CVE天梯榜.md b/iot/2021年物联网设备CVE天梯榜.md similarity index 100% rename from books/iot/2021年物联网设备CVE天梯榜.md rename to iot/2021年物联网设备CVE天梯榜.md diff --git a/books/iot/2021强网杯赛题Mi Route复现.md b/iot/2021强网杯赛题Mi Route复现.md similarity index 100% rename from books/iot/2021强网杯赛题Mi Route复现.md rename to iot/2021强网杯赛题Mi Route复现.md diff --git a/books/iot/2022 祥云杯 Misc super_electric WriteUp.md b/iot/2022 祥云杯 Misc super_electric WriteUp.md similarity index 100% rename from books/iot/2022 祥云杯 Misc super_electric WriteUp.md rename to iot/2022 祥云杯 Misc super_electric WriteUp.md diff --git a/books/iot/2022河南工业互联网安全大赛复赛-工控Writeup.md b/iot/2022河南工业互联网安全大赛复赛-工控Writeup.md similarity index 100% rename from books/iot/2022河南工业互联网安全大赛复赛-工控Writeup.md rename to iot/2022河南工业互联网安全大赛复赛-工控Writeup.md diff --git a/books/iot/2024中国工业互联网安全大赛智能家电行业赛道 writeup by Mini-Venom.md b/iot/2024中国工业互联网安全大赛智能家电行业赛道 writeup by Mini-Venom.md similarity index 100% rename from books/iot/2024中国工业互联网安全大赛智能家电行业赛道 writeup by Mini-Venom.md rename to iot/2024中国工业互联网安全大赛智能家电行业赛道 writeup by Mini-Venom.md diff --git a/books/iot/AFL源码分析系列——afl-fuzz(3).md b/iot/AFL源码分析系列——afl-fuzz(3).md similarity index 100% rename from books/iot/AFL源码分析系列——afl-fuzz(3).md rename to iot/AFL源码分析系列——afl-fuzz(3).md diff --git a/books/iot/AFL源码分析系列（三）-- afl-llvm-mode.md b/iot/AFL源码分析系列（三）-- afl-llvm-mode.md similarity index 100% rename from books/iot/AFL源码分析系列（三）-- afl-llvm-mode.md rename to iot/AFL源码分析系列（三）-- afl-llvm-mode.md diff --git a/books/iot/Asus 路由器栈溢出漏洞分析.md b/iot/Asus 路由器栈溢出漏洞分析.md similarity index 100% rename from books/iot/Asus 路由器栈溢出漏洞分析.md rename to iot/Asus 路由器栈溢出漏洞分析.md diff --git a/books/iot/Atmel SAM Cortex-M7 MCU rom 分析，逆向工程，仿真和模糊化.md b/iot/Atmel SAM Cortex-M7 MCU rom 分析，逆向工程，仿真和模糊化.md similarity index 100% rename from books/iot/Atmel SAM Cortex-M7 MCU rom 分析，逆向工程，仿真和模糊化.md rename to iot/Atmel SAM Cortex-M7 MCU rom 分析，逆向工程，仿真和模糊化.md diff --git a/books/iot/BooFuzz的简单使用，以CVE-2018-5767为例.md b/iot/BooFuzz的简单使用，以CVE-2018-5767为例.md similarity index 100% rename from books/iot/BooFuzz的简单使用，以CVE-2018-5767为例.md rename to iot/BooFuzz的简单使用，以CVE-2018-5767为例.md diff --git a/books/iot/Brother VC-500W 打印机.md b/iot/Brother VC-500W 打印机.md similarity index 100% rename from books/iot/Brother VC-500W 打印机.md rename to iot/Brother VC-500W 打印机.md diff --git a/books/iot/README.md b/iot/README.md similarity index 100% rename from books/iot/README.md rename to iot/README.md diff --git a/books/iot/boofuzz 源码笔记（一）.md b/iot/boofuzz 源码笔记（一）.md similarity index 100% rename from books/iot/boofuzz 源码笔记（一）.md rename to iot/boofuzz 源码笔记（一）.md diff --git a/books/iot/boofuzz 源码笔记（三）.md b/iot/boofuzz 源码笔记（三）.md similarity index 100% rename from books/iot/boofuzz 源码笔记（三）.md rename to iot/boofuzz 源码笔记（三）.md diff --git a/books/iot/boofuzz 源码笔记（二）.md b/iot/boofuzz 源码笔记（二）.md similarity index 100% rename from books/iot/boofuzz 源码笔记（二）.md rename to iot/boofuzz 源码笔记（二）.md diff --git a/books/iot/“入侵5G手机”（一）Black Hat USA 2021：通过无线基带-针对5G智能手机的RCE远程代码执行攻击白皮书.md b/iot/“入侵5G手机”（一）Black Hat USA 2021：通过无线基带-针对5G智能手机的RCE远程代码执行攻击白皮书.md similarity index 100% rename from books/iot/“入侵5G手机”（一）Black Hat USA 2021：通过无线基带-针对5G智能手机的RCE远程代码执行攻击白皮书.md rename to iot/“入侵5G手机”（一）Black Hat USA 2021：通过无线基带-针对5G智能手机的RCE远程代码执行攻击白皮书.md diff --git a/books/iot/一文读懂ARM架构下的漏洞利用.md b/iot/一文读懂ARM架构下的漏洞利用.md similarity index 100% rename from books/iot/一文读懂ARM架构下的漏洞利用.md rename to iot/一文读懂ARM架构下的漏洞利用.md diff --git a/books/iot/一种加密固件的解密思路.md b/iot/一种加密固件的解密思路.md similarity index 100% rename from books/iot/一种加密固件的解密思路.md rename to iot/一种加密固件的解密思路.md diff --git a/books/iot/从1day分析到0day挖掘.md b/iot/从1day分析到0day挖掘.md similarity index 100% rename from books/iot/从1day分析到0day挖掘.md rename to iot/从1day分析到0day挖掘.md diff --git a/books/iot/从一道CTF题目看DNS服务漏洞.md b/iot/从一道CTF题目看DNS服务漏洞.md similarity index 100% rename from books/iot/从一道CTF题目看DNS服务漏洞.md rename to iot/从一道CTF题目看DNS服务漏洞.md diff --git a/books/iot/从三道CTF赛题看arm栈溢出.md b/iot/从三道CTF赛题看arm栈溢出.md similarity index 100% rename from books/iot/从三道CTF赛题看arm栈溢出.md rename to iot/从三道CTF赛题看arm栈溢出.md diff --git a/books/iot/从看<漏洞复现到简单0day漏洞挖>后的简单0day挖掘.md b/iot/从看<漏洞复现到简单0day漏洞挖>后的简单0day挖掘.md similarity index 100% rename from books/iot/从看<漏洞复现到简单0day漏洞挖>后的简单0day挖掘.md rename to iot/从看<漏洞复现到简单0day漏洞挖>后的简单0day挖掘.md diff --git a/books/iot/从零开始的NetGear RAX50 模拟环境搭建.md b/iot/从零开始的NetGear RAX50 模拟环境搭建.md similarity index 100% rename from books/iot/从零开始的NetGear RAX50 模拟环境搭建.md rename to iot/从零开始的NetGear RAX50 模拟环境搭建.md diff --git a/books/iot/使用故障注入绕过瑞萨 RH850的读保护.md b/iot/使用故障注入绕过瑞萨 RH850的读保护.md similarity index 100% rename from books/iot/使用故障注入绕过瑞萨 RH850的读保护.md rename to iot/使用故障注入绕过瑞萨 RH850的读保护.md diff --git a/books/iot/侧信道电压故障注入提取nrf52840固件.md b/iot/侧信道电压故障注入提取nrf52840固件.md similarity index 100% rename from books/iot/侧信道电压故障注入提取nrf52840固件.md rename to iot/侧信道电压故障注入提取nrf52840固件.md diff --git a/books/iot/关于thumb2指令下函数运行地址对齐问题及验证固件分析.md b/iot/关于thumb2指令下函数运行地址对齐问题及验证固件分析.md similarity index 100% rename from books/iot/关于thumb2指令下函数运行地址对齐问题及验证固件分析.md rename to iot/关于thumb2指令下函数运行地址对齐问题及验证固件分析.md diff --git a/books/iot/利用目录穿越漏洞对某光猫进行固件提取.md b/iot/利用目录穿越漏洞对某光猫进行固件提取.md similarity index 100% rename from books/iot/利用目录穿越漏洞对某光猫进行固件提取.md rename to iot/利用目录穿越漏洞对某光猫进行固件提取.md diff --git a/books/iot/华为HG532 - CVE-2017-17215漏洞简析.md b/iot/华为HG532 - CVE-2017-17215漏洞简析.md similarity index 100% rename from books/iot/华为HG532 - CVE-2017-17215漏洞简析.md rename to iot/华为HG532 - CVE-2017-17215漏洞简析.md diff --git a/books/iot/华硕AC系列固件重打包与后门植入.md b/iot/华硕AC系列固件重打包与后门植入.md similarity index 100% rename from books/iot/华硕AC系列固件重打包与后门植入.md rename to iot/华硕AC系列固件重打包与后门植入.md diff --git a/books/iot/华硕RT-AC68U系列漏洞复现（一）.md b/iot/华硕RT-AC68U系列漏洞复现（一）.md similarity index 100% rename from books/iot/华硕RT-AC68U系列漏洞复现（一）.md rename to iot/华硕RT-AC68U系列漏洞复现（一）.md diff --git a/books/iot/华硕RT-AC68U系列漏洞复现（二）.md b/iot/华硕RT-AC68U系列漏洞复现（二）.md similarity index 100% rename from books/iot/华硕RT-AC68U系列漏洞复现（二）.md rename to iot/华硕RT-AC68U系列漏洞复现（二）.md diff --git a/books/iot/卫星通信GSE封装解析.md b/iot/卫星通信GSE封装解析.md similarity index 100% rename from books/iot/卫星通信GSE封装解析.md rename to iot/卫星通信GSE封装解析.md diff --git a/books/iot/卫星黑客挑战赛 | IIC协议破解.md b/iot/卫星黑客挑战赛 | IIC协议破解.md similarity index 100% rename from books/iot/卫星黑客挑战赛 | IIC协议破解.md rename to iot/卫星黑客挑战赛 | IIC协议破解.md diff --git a/books/iot/固件CGI分析手法（三）.md b/iot/固件CGI分析手法（三）.md similarity index 100% rename from books/iot/固件CGI分析手法（三）.md rename to iot/固件CGI分析手法（三）.md diff --git a/books/iot/固件CGI分析手法（二）.md b/iot/固件CGI分析手法（二）.md similarity index 100% rename from books/iot/固件CGI分析手法（二）.md rename to iot/固件CGI分析手法（二）.md diff --git a/books/iot/固件安全-函数劫持以及patch.md b/iot/固件安全-函数劫持以及patch.md similarity index 100% rename from books/iot/固件安全-函数劫持以及patch.md rename to iot/固件安全-函数劫持以及patch.md diff --git a/books/iot/基于CVE-2022-1388的F5 BIG-IP后渗透.md b/iot/基于CVE-2022-1388的F5 BIG-IP后渗透.md similarity index 100% rename from books/iot/基于CVE-2022-1388的F5 BIG-IP后渗透.md rename to iot/基于CVE-2022-1388的F5 BIG-IP后渗透.md diff --git a/books/iot/基于PCILeech和MemProcFS的DMA攻击浅谈.md b/iot/基于PCILeech和MemProcFS的DMA攻击浅谈.md similarity index 100% rename from books/iot/基于PCILeech和MemProcFS的DMA攻击浅谈.md rename to iot/基于PCILeech和MemProcFS的DMA攻击浅谈.md diff --git a/books/iot/多种架构模拟环境构建方法及自动脚本.md b/iot/多种架构模拟环境构建方法及自动脚本.md similarity index 100% rename from books/iot/多种架构模拟环境构建方法及自动脚本.md rename to iot/多种架构模拟环境构建方法及自动脚本.md diff --git a/books/iot/如何hack掉一台空气净化器^^.md b/iot/如何hack掉一台空气净化器^^.md similarity index 100% rename from books/iot/如何hack掉一台空气净化器^^.md rename to iot/如何hack掉一台空气净化器^^.md diff --git a/books/iot/如何手搓一个Wi-Fi协议栈（1）.md b/iot/如何手搓一个Wi-Fi协议栈（1）.md similarity index 100% rename from books/iot/如何手搓一个Wi-Fi协议栈（1）.md rename to iot/如何手搓一个Wi-Fi协议栈（1）.md diff --git a/books/iot/如何手搓一个Wi-Fi协议栈（2）.md b/iot/如何手搓一个Wi-Fi协议栈（2）.md similarity index 100% rename from books/iot/如何手搓一个Wi-Fi协议栈（2）.md rename to iot/如何手搓一个Wi-Fi协议栈（2）.md diff --git a/books/iot/如何通过测试模式获得EL3提取固件密钥.md b/iot/如何通过测试模式获得EL3提取固件密钥.md similarity index 100% rename from books/iot/如何通过测试模式获得EL3提取固件密钥.md rename to iot/如何通过测试模式获得EL3提取固件密钥.md diff --git a/books/iot/对施耐德NOE77101固件浅析.md b/iot/对施耐德NOE77101固件浅析.md similarity index 100% rename from books/iot/对施耐德NOE77101固件浅析.md rename to iot/对施耐德NOE77101固件浅析.md diff --git a/books/iot/小米AX9000路由器CVE-2023-26315漏洞复现.md b/iot/小米AX9000路由器CVE-2023-26315漏洞复现.md similarity index 100% rename from books/iot/小米AX9000路由器CVE-2023-26315漏洞复现.md rename to iot/小米AX9000路由器CVE-2023-26315漏洞复现.md diff --git a/books/iot/思科企业级路由器0day漏洞挖掘（水漏洞版）.md b/iot/思科企业级路由器0day漏洞挖掘（水漏洞版）.md similarity index 100% rename from books/iot/思科企业级路由器0day漏洞挖掘（水漏洞版）.md rename to iot/思科企业级路由器0day漏洞挖掘（水漏洞版）.md diff --git a/books/iot/手把手带你分析mips架构下固件分析与漏洞挖掘.md b/iot/手把手带你分析mips架构下固件分析与漏洞挖掘.md similarity index 100% rename from books/iot/手把手带你分析mips架构下固件分析与漏洞挖掘.md rename to iot/手把手带你分析mips架构下固件分析与漏洞挖掘.md diff --git a/books/iot/打印机之Internet Printing Protocol(IPP)协议分析.md b/iot/打印机之Internet Printing Protocol(IPP)协议分析.md similarity index 100% rename from books/iot/打印机之Internet Printing Protocol(IPP)协议分析.md rename to iot/打印机之Internet Printing Protocol(IPP)协议分析.md diff --git a/books/iot/打印机漏洞研究入门.md b/iot/打印机漏洞研究入门.md similarity index 100% rename from books/iot/打印机漏洞研究入门.md rename to iot/打印机漏洞研究入门.md diff --git a/books/iot/探究vxworks文件名恢复.md b/iot/探究vxworks文件名恢复.md similarity index 100% rename from books/iot/探究vxworks文件名恢复.md rename to iot/探究vxworks文件名恢复.md diff --git a/books/iot/提取共享单车固件.md b/iot/提取共享单车固件.md similarity index 100% rename from books/iot/提取共享单车固件.md rename to iot/提取共享单车固件.md diff --git a/books/iot/新华三magicR100存在DOS攻击漏洞分析.md b/iot/新华三magicR100存在DOS攻击漏洞分析.md similarity index 100% rename from books/iot/新华三magicR100存在DOS攻击漏洞分析.md rename to iot/新华三magicR100存在DOS攻击漏洞分析.md diff --git a/books/iot/无人机安全简介.md b/iot/无人机安全简介.md similarity index 100% rename from books/iot/无人机安全简介.md rename to iot/无人机安全简介.md diff --git a/books/iot/无人机通信协议MAVLink简介.md b/iot/无人机通信协议MAVLink简介.md similarity index 100% rename from books/iot/无人机通信协议MAVLink简介.md rename to iot/无人机通信协议MAVLink简介.md diff --git a/books/iot/无线遥控信号逆向分析.md b/iot/无线遥控信号逆向分析.md similarity index 100% rename from books/iot/无线遥控信号逆向分析.md rename to iot/无线遥控信号逆向分析.md diff --git a/books/iot/智能电视漏洞汇总.md b/iot/智能电视漏洞汇总.md similarity index 100% rename from books/iot/智能电视漏洞汇总.md rename to iot/智能电视漏洞汇总.md diff --git a/books/iot/智能门锁安全分析：多方位探索硬件、固件、app和云端.md b/iot/智能门锁安全分析：多方位探索硬件、固件、app和云端.md similarity index 100% rename from books/iot/智能门锁安全分析：多方位探索硬件、固件、app和云端.md rename to iot/智能门锁安全分析：多方位探索硬件、固件、app和云端.md diff --git a/books/iot/某T摄像头固件提取分析.md b/iot/某T摄像头固件提取分析.md similarity index 100% rename from books/iot/某T摄像头固件提取分析.md rename to iot/某T摄像头固件提取分析.md diff --git a/books/iot/某品牌智能墙壁插座协议分析.md b/iot/某品牌智能墙壁插座协议分析.md similarity index 100% rename from books/iot/某品牌智能墙壁插座协议分析.md rename to iot/某品牌智能墙壁插座协议分析.md diff --git a/books/iot/某摄像头存在通用未授权命令执行漏洞.md b/iot/某摄像头存在通用未授权命令执行漏洞.md similarity index 100% rename from books/iot/某摄像头存在通用未授权命令执行漏洞.md rename to iot/某摄像头存在通用未授权命令执行漏洞.md diff --git a/books/iot/某米路由器命令执行漏洞分析.md b/iot/某米路由器命令执行漏洞分析.md similarity index 100% rename from books/iot/某米路由器命令执行漏洞分析.md rename to iot/某米路由器命令执行漏洞分析.md diff --git a/books/iot/某网络设备解密的两种思路.md b/iot/某网络设备解密的两种思路.md similarity index 100% rename from books/iot/某网络设备解密的两种思路.md rename to iot/某网络设备解密的两种思路.md diff --git a/books/iot/某路由器漏洞分析与多种栈溢出利用方法探究.md b/iot/某路由器漏洞分析与多种栈溢出利用方法探究.md similarity index 100% rename from books/iot/某路由器漏洞分析与多种栈溢出利用方法探究.md rename to iot/某路由器漏洞分析与多种栈溢出利用方法探究.md diff --git a/books/iot/模拟固件下的patch与hook.md b/iot/模拟固件下的patch与hook.md similarity index 100% rename from books/iot/模拟固件下的patch与hook.md rename to iot/模拟固件下的patch与hook.md diff --git a/books/iot/浅析cgi与lighttpd之间的调用过程.md b/iot/浅析cgi与lighttpd之间的调用过程.md similarity index 100% rename from books/iot/浅析cgi与lighttpd之间的调用过程.md rename to iot/浅析cgi与lighttpd之间的调用过程.md diff --git a/books/iot/浅谈路由器漏洞挖掘.md b/iot/浅谈路由器漏洞挖掘.md similarity index 100% rename from books/iot/浅谈路由器漏洞挖掘.md rename to iot/浅谈路由器漏洞挖掘.md diff --git a/books/iot/漏洞复现到简单0day漏洞挖掘.md b/iot/漏洞复现到简单0day漏洞挖掘.md similarity index 100% rename from books/iot/漏洞复现到简单0day漏洞挖掘.md rename to iot/漏洞复现到简单0day漏洞挖掘.md diff --git a/books/iot/物联网MQTT协议分析.md b/iot/物联网MQTT协议分析.md similarity index 100% rename from books/iot/物联网MQTT协议分析.md rename to iot/物联网MQTT协议分析.md diff --git a/books/iot/物联网安全之Unicorn框架初探.md b/iot/物联网安全之Unicorn框架初探.md similarity index 100% rename from books/iot/物联网安全之Unicorn框架初探.md rename to iot/物联网安全之Unicorn框架初探.md diff --git a/books/iot/物联网安全之qiling框架初探.md b/iot/物联网安全之qiling框架初探.md similarity index 100% rename from books/iot/物联网安全之qiling框架初探.md rename to iot/物联网安全之qiling框架初探.md diff --git a/books/iot/物联网安全从零开始-BIG-IP CVE漏洞分析.md b/iot/物联网安全从零开始-BIG-IP CVE漏洞分析.md similarity index 100% rename from books/iot/物联网安全从零开始-BIG-IP CVE漏洞分析.md rename to iot/物联网安全从零开始-BIG-IP CVE漏洞分析.md diff --git a/books/iot/物联网安全从零开始-BIG-IP(CVE-2023-22374)漏洞分析.md b/iot/物联网安全从零开始-BIG-IP(CVE-2023-22374)漏洞分析.md similarity index 100% rename from books/iot/物联网安全从零开始-BIG-IP(CVE-2023-22374)漏洞分析.md rename to iot/物联网安全从零开始-BIG-IP(CVE-2023-22374)漏洞分析.md diff --git a/books/iot/电信天翼网关3.0分析（上）.md b/iot/电信天翼网关3.0分析（上）.md similarity index 100% rename from books/iot/电信天翼网关3.0分析（上）.md rename to iot/电信天翼网关3.0分析（上）.md diff --git a/books/iot/组播路由介绍以及攻击实战.md b/iot/组播路由介绍以及攻击实战.md similarity index 100% rename from books/iot/组播路由介绍以及攻击实战.md rename to iot/组播路由介绍以及攻击实战.md diff --git a/books/iot/维盟wayos多款路由网关设备存在多个漏洞.md b/iot/维盟wayos多款路由网关设备存在多个漏洞.md similarity index 100% rename from books/iot/维盟wayos多款路由网关设备存在多个漏洞.md rename to iot/维盟wayos多款路由网关设备存在多个漏洞.md diff --git a/books/iot/网络设备分析实战之Sophos UTM 固件反编译 Perl 源码.md b/iot/网络设备分析实战之Sophos UTM 固件反编译 Perl 源码.md similarity index 100% rename from books/iot/网络设备分析实战之Sophos UTM 固件反编译 Perl 源码.md rename to iot/网络设备分析实战之Sophos UTM 固件反编译 Perl 源码.md diff --git a/books/iot/腾达AC1200路由器漏洞分析.md b/iot/腾达AC1200路由器漏洞分析.md similarity index 100% rename from books/iot/腾达AC1200路由器漏洞分析.md rename to iot/腾达AC1200路由器漏洞分析.md diff --git a/books/iot/花式固件提取之韩国KT固件.md b/iot/花式固件提取之韩国KT固件.md similarity index 100% rename from books/iot/花式固件提取之韩国KT固件.md rename to iot/花式固件提取之韩国KT固件.md diff --git a/books/iot/花式解密Zyxel加密固件包.md b/iot/花式解密Zyxel加密固件包.md similarity index 100% rename from books/iot/花式解密Zyxel加密固件包.md rename to iot/花式解密Zyxel加密固件包.md diff --git a/books/iot/记一次全设备通杀未授权RCE的挖掘经历.md b/iot/记一次全设备通杀未授权RCE的挖掘经历.md similarity index 100% rename from books/iot/记一次全设备通杀未授权RCE的挖掘经历.md rename to iot/记一次全设备通杀未授权RCE的挖掘经历.md diff --git a/books/iot/记一次固件解密学习--X软路由.md b/iot/记一次固件解密学习--X软路由.md similarity index 100% rename from books/iot/记一次固件解密学习--X软路由.md rename to iot/记一次固件解密学习--X软路由.md diff --git a/books/iot/记一次酒店wifi设备分析.md b/iot/记一次酒店wifi设备分析.md similarity index 100% rename from books/iot/记一次酒店wifi设备分析.md rename to iot/记一次酒店wifi设备分析.md diff --git a/books/iot/设备漏洞战记之固件提取篇.md b/iot/设备漏洞战记之固件提取篇.md similarity index 100% rename from books/iot/设备漏洞战记之固件提取篇.md rename to iot/设备漏洞战记之固件提取篇.md diff --git a/books/iot/超十万Zyxel设备被曝存在高危漏洞.md b/iot/超十万Zyxel设备被曝存在高危漏洞.md similarity index 100% rename from books/iot/超十万Zyxel设备被曝存在高危漏洞.md rename to iot/超十万Zyxel设备被曝存在高危漏洞.md diff --git a/books/iot/路由器TP-Link WR740后门漏洞.md b/iot/路由器TP-Link WR740后门漏洞.md similarity index 100% rename from books/iot/路由器TP-Link WR740后门漏洞.md rename to iot/路由器TP-Link WR740后门漏洞.md diff --git a/books/iot/车联网开源组件BusyBox漏洞分析及复现（CVE-2022-30065）.md b/iot/车联网开源组件BusyBox漏洞分析及复现（CVE-2022-30065）.md similarity index 100% rename from books/iot/车联网开源组件BusyBox漏洞分析及复现（CVE-2022-30065）.md rename to iot/车联网开源组件BusyBox漏洞分析及复现（CVE-2022-30065）.md diff --git a/books/iot/逆向硬件，手搓SDR射频设备.md b/iot/逆向硬件，手搓SDR射频设备.md similarity index 100% rename from books/iot/逆向硬件，手搓SDR射频设备.md rename to iot/逆向硬件，手搓SDR射频设备.md diff --git a/books/iot/通过Fap进行upnp漏洞分析之CVE-2022-25106.md b/iot/通过Fap进行upnp漏洞分析之CVE-2022-25106.md similarity index 100% rename from books/iot/通过Fap进行upnp漏洞分析之CVE-2022-25106.md rename to iot/通过Fap进行upnp漏洞分析之CVE-2022-25106.md diff --git a/books/iot/零点击代码执行漏洞复现（CVE-2023-45866 ）.md b/iot/零点击代码执行漏洞复现（CVE-2023-45866 ）.md similarity index 100% rename from books/iot/零点击代码执行漏洞复现（CVE-2023-45866 ）.md rename to iot/零点击代码执行漏洞复现（CVE-2023-45866 ）.md diff --git a/books/iot/魔数障眼法：Tenda-4G06 路由器固件解密及模拟实战.md b/iot/魔数障眼法：Tenda-4G06 路由器固件解密及模拟实战.md similarity index 100% rename from books/iot/魔数障眼法：Tenda-4G06 路由器固件解密及模拟实战.md rename to iot/魔数障眼法：Tenda-4G06 路由器固件解密及模拟实战.md