Firmware Analysis

xchwarze/magic-extractor

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

badmonkey7/cve-2021-34730

Cisco RV110w UPnP stack overflow

takahiroharuyama/spimitm

SPI flash read MitM attack PoC

msm8916-mainline/cve-2022-22063

Security issue in the hypervisor firmware of some older Qualcomm chipsets

coremaze/me2-writeup

Reconstructing a Dead USB Protocol: A Handheld's Secrets Unlocked by a Hot Knife, a multi-disciplinary journey to reviving a forgotten USB interface

daniel224455/katana

Let's hijack our bootchain - CVE-2021-30327

baiyibai/pico-usb-wifi

Firmware for Raspberry Pi Pico W that creates a driverless USB Wi-Fi adapter with transparent layer-2 bridging, WPA2/WPA3 authentication, and…

icicle-emu/icicle-python

Python bindings for the Icicle emulator, enabling grey-box firmware fuzzing, binary emulation, and reverse-engineering workflows across x64 and ARM64…

kraxel/virt-firmware

Toolkit for decoding, inspecting, and modifying UEFI firmware volumes and variable stores. Supports secure boot certificate enrollment, PE binary…

hacefresko/forticrack_v8

Decrypt and extract FortiOS 8.0.0 firmware images.

synacktiv/canon-mf644

Exploit and firmware analysis toolkit for Canon MF644 printer vulnerabilities, including Python exploits, ARM shellcode, and IDA Pro loader scripts…

park07/amradio

FPGA-based 12-channel AM radio broadcast system with formal verification of a hardware watchdog for fail-safe emergency alert transmission in…

synacktiv/yealink_tools

Reverse engineering scripts designed for extracting Yealink VOIP upgrade files

bicurico/vaxd

Lightweight Windows disassembler, PE inspection and patch-assistance tool for native EXE/DLL files.

grecandrei/ida-pro-mcp

Local-first, deterministic MCP server for IDA Pro/Home: 109 strict-schema reverse-engineering operations, evidence-backed findings, and policy-gated…

superkhung/luadec-tplink

Modified luadec version to decompile TP-Link Archer C7 LUA firmware.