Firmware extraction, unpacking, emulation, vulnerability discovery, and binary analysis tools.
helgesverre/sony-vp-extractDecrypt and extract voice guidance MP3 prompts from Sony WH-1000XM4 encrypted voice packs. AES key extracted via Bluetooth firmware dump of the…
badchemical/iot-vulnerability-research-publicIndependent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws.
deepquantum/dconstructA disassembler & experimental decompiler for TLOU2 DC Scripts.
malwaretech/msdia-x64Enable Microsoft PDB support in Ghidra without installing Visual Studio
omgrant/ft9201-libfprintLinux libfprint driver for the Focal-systems FT9201 (2808:93a9) USB fingerprint reader — runs FocalTech's own Windows matching engine natively on…
xenokovah/inteltxe-pocIntel Management Engine JTAG Proof of Concept - 2022 Instructions
ebux/cable-modemsBlack-box security evaluation of five ISP cable modem/router gateways, analyzing firmware images and documenting 35+ vulnerabilities including…
wuxx/cve-2020-8004Exploit tool for CVE-2020-8004 targeting STM32F1 microcontrollers, enabling firmware extraction via OpenOCD and Python scripts to bypass readout…
iss4cf0ng/elfinaMulti-architecture ELF loader and analysis toolkit with probing, disassembly, hexdump, entropy calculation, and mmap/memfd execution for x86 and…
zb3/tiandy-researchThis repository contains the results of my August 2020 research of Tiandy's IPC/NVR firmware. I found two vulnerabilities that could be used to…
leecher1337/pixmaTools for analyzing Canon Pixma printer firmware
therealdreg/hcon2026hwctfHardware Hacking CTF hcon2026hwctf - RISCV Hazard3 (@Wren6991) Exploiting by @b1n4ri0 @antoniovazquezblanco & @therealdreg
fahreddinaykut/sparkaltbatteryboardReverse-engineered I2C/SMBus battery interface board for DJI Spark, replacing OEM smart battery with standard 3S LiPo. Includes protocol analysis,…
jatinkapilaq1/intel-me-researchTalk to your Intel Management Engine directly — zero-dependency Python tool. Finds memory leaks, partition manifest, live MKHI probing. First public…
bishopfox/sonicrackDecrypt encrypted SonicOSX firmware images
fullspectrumdev/rancidcriscoProof-of-concept exploit for CVE-2023-20126 targeting Cisco SPA phone adapters. Uploads malicious firmware to gain a root shell on port 23000/tcp via…
hadimed/dsl-2750u-full-chainCVE-2021-3707 , CVE-2021-3708
embedi/smm_usbrt_pocCVE-2017-5721 Proof-of-Concept
