#1Tools for analyzing and securing firmware, microcontrollers, and low-level hardware components.
Kitploit recommended
boginw/zyxel-vmg8825-keygenA key generator for Zyxel VMG8825-T50
msm8916-mainline/cve-2022-22063Security issue in the hypervisor firmware of some older Qualcomm chipsets
jasondoyle/google-nest-cam-bug-disclosuresPoC vulnerability disclosures for consumer IoT cameras, detailing BLE buffer overflow and WiFi disassociation attacks that can take devices offline.
lord-feistel/power_analysisProof-of-concept demonstrating a power analysis side-channel attack against a vulnerable RSA implementation on Arduino (Atmega328P), with detailed…
baiyibai/pico-usb-wifiFirmware for Raspberry Pi Pico W that creates a driverless USB Wi-Fi adapter with transparent layer-2 bridging, WPA2/WPA3 authentication, and…
vulncheck-oss/cisco-ios-xe-implant-scannerGo-based scanner that detects implanted Cisco IOS XE systems by sending crafted HTTP requests to identify compromised devices and vulnerable versions.
fundacion-sadosky/vbox_cve_2017_10235[CVE-2017-10235] Description and PoC of VirtualBox E1000 device Buffer Overflow
synacktiv/cve-2021-27246_pwn2own2020Exploit code for CVE-2021-27246 targeting TPLink Archer routers, demonstrated at Pwn2Own 2020 Tokyo. Includes proof-of-concept for remote code…
kraxel/virt-firmwareToolkit for decoding, inspecting, and modifying UEFI firmware volumes and variable stores. Supports secure boot certificate enrollment, PE binary…
nccgroup/cecsterA GUI-based tool to perform security testing against the HDMI CEC (Consumer Electronics Control) and HEC (HDMI Ethernet Channel) protocols
davidbuchanan314/wampageWAMpage - A WebOS root LPE exploit chain (CVE-2022-23731)
m4cs/digiduck-frameworkFramework for Digiduck Development Boards running ATTiny85 processors and micronucleus bootloader!
hacefresko/forticrack_v8Decrypt and extract FortiOS 8.0.0 firmware images.
blasty/printer-cracktroDisplays an old-school crack-intro animation on compromised Canon and Lexmark printers, with SDL2 and WebAssembly builds for portability and study.
momalab/icsfuzzInstrumented fuzzer for PLC-based ICS control applications, targeting Codesys runtime on Wago controllers to uncover memory corruption and…
psycostea/pi-zero-2w-bad-usbConfigure your Pi Zero 2W to be a BadUSB
synacktiv/canon-mf644Exploit and firmware analysis toolkit for Canon MF644 printer vulnerabilities, including Python exploits, ARM shellcode, and IDA Pro loader scripts…
synacktiv/yealink_toolsReverse engineering scripts designed for extracting Yealink VOIP upgrade files
