• 🎯 Introduction
• 🚀 Getting Started
• 📚 Learning Path
• 🔒 Core Topics
• 🛠️ Tools & Frameworks
• 📄 Research Papers & Conference Talks
• 🎓 Training & Certifications
• 📖 Books & Guides
• 🎮 CTFs & Practice Labs
• 👥 Community & Resources
• ⚖️ Legal & Ethical Considerations
• 🔬 Advanced Topics
• 📊 Vulnerability Database
• 🧪 Lab Exercises
• 📺 Video Resources
• 🔧 Hardware Recommendations
• 🤝 Contributing
• 📜 Disclaimer
• 📚 References

This repository is a curated, comprehensive collection of resources for security researchers, penetration testers, and enthusiasts interested in drone/UAV security. The emphasis is on offensive security techniques to understand, exploit, and mitigate vulnerabilities in unmanned aerial systems (UAS).

graph TD
    A[Drone/UAV] --> B[Wireless Communication]
    A --> C[Hardware Components]
    A --> D[Firmware/Software]
    A --> E[Mobile Apps/Backend]
    
    B --> B1[RF Links]
    B --> B2[GPS/GNSS]
    B --> B3[Wi-Fi/Bluetooth]
    B --> B4[MAVLink Protocol]
    
    C --> C1[Flight Controller]
    C --> C2[Sensors - IMU/GPS]
    C --> C3[Debug Ports - UART/JTAG]
    C --> C4[Side-Channel Leaks]
    
    D --> D1[Firmware Updates]
    D --> D2[Authentication]
    D --> D3[Encryption]
    D --> D4[Backdoors]
    
    E --> E1[Ground Control Station]
    E --> E2[Cloud Services]
    E --> E3[API Vulnerabilities]
    E --> E4[Data Leakage]

Essential Knowledge:

• Basic electronics and embedded systems
• Wireless protocols (Wi-Fi, Bluetooth, RF)
• Linux/Unix command line
• Python/C++ programming
• Networking fundamentals

Hardware Setup (Optional but Recommended):

1. Start with Fundamentals (1-2 weeks)

   • Drone Security Fundamentals - Free course
   • A Beginner's Guide to Understanding Drones

2. Set up Virtual Environment (1 week)

   • ArduPilot SITL (Software In The Loop)
   • Damn Vulnerable Drone

3. Practice with Tools (2-4 weeks)

   • Wireshark for packet analysis
   • GNU Radio for SDR
   • Ghidra for reverse engineering

Focus: Understanding drone architecture and basic security concepts

• ✅ Drone components and communication protocols
• ✅ MAVLink protocol basics
• ✅ Wireless security fundamentals
• ✅ Virtual testing environment setup

Resources:

• Complete Drone Security Bundle - Comprehensive training
• ArduPilot Documentation
• MAVLink Developer Guide

Focus: Hands-on attack techniques and analysis

• ✅ Wireless attacks (deauth, MITM)
• ✅ GPS vulnerabilities and spoofing
• ✅ Protocol analysis and fuzzing
• ✅ Firmware extraction and analysis

Resources:

• Drone Security and Countermeasures Training - CISA/NICCS
• Class Central Drone Security Courses

Focus: Reverse engineering and advanced exploitation

• ✅ ARM/MIPS firmware analysis
• ✅ SDR signal generation and analysis
• ✅ Advanced GPS spoofing techniques
• ✅ Exploit development

Focus: Research and specialization

• ✅ Side-channel attacks (power/EM analysis)
• ✅ RF exploitation and protocol reversing
• ✅ Original research and bug bounties
• ✅ Conference presentations and publications

graph LR
    A[Ground Control Station] --> B[Radio Link]
    B --> C[Flight Controller]
    C --> D[ESCs]
    C --> E[Sensors]
    C --> F[Companion Computer]
    
    D --> G[Motors]
    E --> H[IMU]
    E --> I[GPS]
    E --> J[Camera]
    
    F --> K[AI/ML Processing]
    F --> L[Additional Sensors]

Key Components:

• Flight Controller (FC): ArduPilot, PX4, DJI proprietary
• ESCs: Electronic Speed Controllers for motor control
• Sensors: IMU, GPS, barometer, magnetometer
• Communication: MAVLink, DroneCAN, proprietary protocols

• Dronesploit Analysis: DroneSec Blog
• Drone Operation and Demolition Guide: Medium Guide
• Airspace Mapper: Tool for tracing drone communications

Hardware Recommendations:

Software Stack:

• GNU Radio - Signal processing framework
• GQRX - Spectrum analyzer
• SDRangel - Multi-purpose SDR application
• URH - Universal Radio Hacker

# Firmware extraction
binwalk -e firmware.bin

# Static analysis
ghidra firmware.bin

# Dynamic analysis
qemu-system-arm -M versatilepb -kernel firmware.bin

# Protocol analysis
wireshark capture.pcap

• DEF CON Media Server
• Black Hat Archives
• Aerospace Village
• DEF CON 19-25 Archives (search "drone")
• Chaos Communication Congress
• USENIX Security
• NDSS Symposium
• IEEE UAV Workshops

• Udemy/Coursera/Cybrary: UAV security courses
• YouTube Channels: Null Byte, LiveOverflow, HackerSploit, DroneSec
• TryHackMe: IoT paths adaptable to drones
• Class Central: Aggregated drone security courses

1. "Basics of Hacking and Penetration Testing" (Engebretson): Ethical foundations
2. "Practical IoT Hacking" (Chantzis et al.): Drone chapter
3. "Hardware Hacking Handbook" (van Woudenberg/O'Flynn): Side-channels

• ArduPilot/PX4/MAVLink/Ghidra documentation
• ArduPilot Developer Documentation
• PX4 Developer Guide
• DroneCode Project
• MAVLink Developer Guide

• OWASP Drone Security Cheat Sheet
• NIST Guidelines (in development)
• EU EASA/FAA Remote ID regulations
• "UAV Exploitation: A New Domain for Cyber Power" (CCDCOE PDF): Military UAV risks. Download
• "Drone Security: Issues and Challenges" (ResearchGate PDF). PDF
• "Drone Vulnerabilities: Offensive Introduction" (SecQuest Whitepaper): Protocol exploits in commercial drones. Link

• DroneSec CTF: Regular drone security challenges
• DEF CON Aerospace Village CTF: Annual competition
• Hack The Drone: Specialized drone hacking CTF
• General CTFs: HackTheBox, TryHackMe IoT paths

Virtual Labs:

• Damn Vulnerable Drone (DVD): Docker-based vulnerable UAV
• ArduPilot SITL: Software-in-the-loop simulation
• DroneKit-SITL: Python-based MAVLink testing

Physical Labs:

• Budget Setup ($500-1000): DJI Tello + Alfa + RTL-SDR
• Intermediate ($1000-3000): HackRF + Parrot Bebop
• Professional ($3000+): USRP + ChipWhisperer + DJI Mavic

• ArduPilot Forum: discuss.ardupilot.org
• DroneSec Discord/Slack: Professional community
• Reddit: r/Multicopter, r/drones, r/netsec, r/UAVsecurity
• GitHub: awesome-drone-hacking

Twitter/X Accounts:

• @DroneSec, @nozominetworks, @MalwareTechBlog
• @samykamkar, @troyhunt, @hackerfantastic

News Sources:

• DroneSec.com, Threatpost, Hacker News
• Ars Technica, Krebs on Security

1. Responsible Disclosure: Report to manufacturer first
2. Controlled Testing: Use your own equipment or authorized environments
3. No Interference: Never disrupt emergency or critical operations
4. Privacy Respect: Focus on security, not surveillance
5. Legal Compliance: Follow local laws and regulations

graph TD
    A[Counter-Drone System] --> B[Detection]
    A --> C[Mitigation]
    
    B --> B1[RF Detection]
    B --> B2[Radar]
    B --> B3[Acoustic]
    B --> B4[Optical]
    B --> B5[Hybrid]
    
    C --> C1[Spoofing]
    C --> C2[Jamming]
    C --> C3[Net Capture]
    C --> C4[Laser]
    C --> C5[Cyber Takeover]

Emerging Threats:

• Coordinated swarm attacks
• AI-powered autonomous swarms
• Consensus algorithm exploits
• Leader targeting attacks

Offensive Applications:

• Automated vulnerability discovery
• Adaptive spoofing techniques
• Machine learning-based protocol analysis

Defensive Applications:

• Anomaly detection systems
• Predictive threat modeling
• Behavioral analysis

• 2009 MQ-1 Predator: Unencrypted video feed interception
• 2011 RQ-170: GPS spoofing capture by Iran
• 2011 Drone Keylogger: Keylogger infected ground-control station at Creech AFB
• 2018 DJI Account Hijacking: Check Point discovery
• 2024 Ukraine Operations: Coordinated drone attacks
• 2024-2025 Recent Incidents:
  • Ukraine Operation Spider Web (June 2025): Coordinated attack on Russian bombers; 20 aircraft damaged
  • Paris Olympics 2024: Canadian spy drones
  • Nashville Power Grid (2024): Substation attempt
  • US Bases (2024): 350+ incursions
  • Green Day Concert (2024): Unauthorized drone halt
  • Tower 22 (2024): Iraqi drone kills 3 US soldiers
• Historical Context:
  • Gatwick (2018): Shutdown from sightings
  • Venezuela Maduro Attempt (2018): Assassination drone
  • Syria ISIS (2016-2017): Weaponized commercial drones

# CVE search
curl -s "https://cve.circl.lu/api/search/drone" | jq

# Exploit database
searchsploit dji

# GitHub vulnerability search
site:github.com drone vulnerability

1. SITL Setup

   # Install ArduPilot SITL
   git clone https://github.com/ArduPilot/ardupilot.git
   cd ardupilot
   ./Tools/environment_install/install-prereqs-ubuntu.sh

2. Wi-Fi Reconnaissance

   # Monitor mode
   airmon-ng start wlan0
   airodump-ng -c [channel] --bssid [target] -w capture wlan0mon

3. MAVLink Analysis

   # Capture MAVLink traffic
   tcpdump -i any -w mavlink.pcap port 14550

1. GPS Simulation

   # Generate GPS signal
   ./gps-sdr-sim -b 8 -s 2600000 -e brdc3540.14n -l 37.7749,-122.4194,100
   
   # Transmit
   hackrf_transfer -t gpssim.bin -f 1575420000 -s 2600000 -a 1 -x 40 -R

2. Firmware Extraction

   # Extract firmware
   binwalk -e firmware.bin
   
   # Analyze filesystem
   file extracted_files/*

1. Exploit Development

   • Buffer overflow PoC development
   • ROP chain construction
   • Shellcode injection

2. SDR Signal Analysis

   • Custom GNU Radio blocks
   • Protocol reverse engineering
   • Signal modulation analysis

• DEF CON Media Server: media.defcon.org
• Black Hat YouTube: Conference presentations
• USENIX Security: Academic research videos
• Chaos Communication Congress: Privacy and activism focus

Additions:

• HackRF One ($300) - Full TX/RX capability
• Parrot Bebop 2 ($250) - Advanced testing platform
• Wi-Fi Pineapple ($100) - Professional Wi-Fi testing
• Logic Analyzer ($50) - Digital signal analysis

Advanced Equipment:

• USRP B200 ($1100) - Professional SDR
• ChipWhisperer Pro ($1500) - Side-channel analysis
• Spectrum Analyzer ($1000+) - RF analysis
• DJI Mavic 3 ($1500+) - High-end test platform
• Oscilloscope ($500+) - Signal analysis

We welcome contributions! Here's how you can help:

1. Fork the repository
2. Create a feature branch: git checkout -b feature/amazing-resource
3. Add your resource: Follow the existing format
4. Test your links: Ensure all links are working
5. Submit a pull request: Describe your changes

• ✅ High-quality, verified resources only
• ✅ Working links and up-to-date information
• ✅ No promotional or commercial content
• ✅ Ethical and legal compliance
• ✅ Proper categorization

• Tools: New penetration testing frameworks
• Papers: Recent research publications
• Talks: Conference presentations and slides
• Tutorials: Step-by-step guides
• CTFs: Practice challenges and labs
• Bug Bounties: Vulnerability disclosure programs
• Communities: Active discussion forums

⚠️ EDUCATIONAL PURPOSES ONLY ⚠️

Important Legal Notice:

• This repository is for educational and research purposes only
• All activities must comply with local laws and regulations
• Test only on your own equipment or with explicit permission
• GPS jamming/spoofing is illegal in most jurisdictions
• RF interference requires proper licensing
• Drone hijacking may constitute criminal activity
• Always practice responsible disclosure

No Liability:

• The authors are not responsible for any misuse of this information
• Users assume full responsibility for their actions
• Always verify legal compliance before conducting any security research

• OWASP Drone Security Project
• DroneSec Training
• DroneCode Foundation
• ArduPilot Community

• UT Austin: GPS spoofing research
• Virginia Tech: Wireless UAV security
• Carnegie Mellon: CyLab security research
• MIT: Aerospace security studies

• IOActive: Hardware security research
• Check Point: Drone vulnerability research
• Nozomi Networks: Industrial drone security
• D-Fend Solutions: Counter-drone technology

• GitHub Discussions: Share ideas and ask questions
• DroneSec Discord: Join the professional community
• Twitter/X: Follow #DroneHacking #UAVSecurity
• Reddit: Participate in r/netsec, r/AskNetsec

• GitHub Issues: Bug reports and feature requests
• Pull Requests: Contribute improvements
• Discussions: General questions and ideas

Special thanks to:

• ArduPilot/PX4 communities for open-source contributions
• DroneSec training for educational resources
• Security researchers who responsibly disclosed vulnerabilities
• Open-source contributors who built amazing tools
• Conference organizers (DEF CON, Black Hat) for knowledge sharing
• Academic researchers advancing the field

• ✅ Merged comprehensive resources from multiple sources
• ✅ Added offensive security focus and advanced techniques
• ✅ Updated research papers and conference talks to 2025
• ✅ Structured learning path with clear progression
• ✅ Added practical lab exercises and hardware recommendations
• ✅ Enhanced legal and ethical guidelines

This project is licensed under the MIT License - see the LICENSE file for details.

You are free to:

• ✅ Share and distribute
• ✅ Modify and adapt
• ✅ Use commercially
• ✅ Include in proprietary software

Requirements:

• 📝 Include copyright notice
• 📝 Include license text
• 📝 No warranty provided