#1Tools for analyzing and securing firmware, microcontrollers, and low-level hardware components.
Kitploit recommended

Exploit used against the Netgear R6700v3 during Pwn2Own Austin 2021
CVE-2024-40617 Exploit PoC

CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F

Three unauthenticated vulnerabilities in the Thinkware U3000 dashcam's local WiFi control protocol: arbitrary file write, arbitrary file read, and…

The firmware engineering home of the Circuit Crafters first electronic badge project.

Vulnerability research on Tesla Model 3/Y infotainment systems. 6 vulnerabilities, 4 CVEs (CVE-2022-42005 through CVE-2022-42008). Root shell,…

Documents and reproduces a fail-open authentication flaw in SONiC gNMI where an empty UserAuth map allows unauthenticated gNMI Set and gNOI writes,…

Security advisory for TOTOLINK a720r buffer overflow vulnerability

A proof of concept of CVE-2020-15808 vulnerability exploit on STM32F4 Discovery board

Framework for controlling QKD devices and managing symmetric keys. See the [project page here](https://qcomms.gitlab.io/cqptoolkit/)

Demonstrate some functionalities of Morion by generating an exploit for CVE-2022-27646 (stack buffer overflow on Netgear R6700v3 routers).

Experimenting with CVE-2022-20120 (Pixel Bootloader / ABL) using Unicorn, derived from eShard's emulator at…

ESP32 firmware that emulates a Bluetooth HID keyboard to auto-pair with Android phones and inject scripted keystrokes for authorized security testing.

OWASP guide defining a standardized penetration testing methodology for humanoid, industrial, and autonomous robots, covering ROS/ROS2, DDS, CAN bus,…

CVE-2022-20009 - Description and sample exploit for Android USB Gadgets

This is a collection of Unisoc BootROMs dumped from various Unisoc chipsets via CVE-2022-38694

Security advisories for CVE-2021-43716/43717/43718 (Epson EH-TW5350)

CVE-2022-38181 POC for FireTV 3rd gen Cube (gazelle)