#1Firmware extraction, unpacking, emulation, vulnerability discovery, and binary analysis tools.
Kitploit recommended
oliviaholly/fusee-geleeAn implementation of the Fusee Gelee exploit (CVE-2018-6242) for the Nintendo Switch, along with a custom payload.
zhazhalove/osquery_cve-2024-23443Osqery extension HP BIOS WMI
t4e-3/cve-2025-63296KERUI K259 5MP Wi-Fi (Tuya Smart Security Camera) contains a code execution vulnerability
alxsourin/firmware-cve-2025-7545Exploit setup for CVE-2025-7545 targeting vulnerable Binutils in firmware environments, including environment configuration and PDF documentation.
zgsnj123/cve-2025-45467Proof-of-concept exploit for CVE-2025-45467, demonstrating remote code execution on Unitree Go1 robotic dogs via insecure MD5-based firmware…
luismirandaacebedo/cve-2025-65855Security advisory for CVE-2025-65855 - Multiple vulnerabilities in HelpFlash IoT OTA update mechanism
3dluvr/new-lib3mf.dll-for-meshmixerPrecompiled lib3mf.dll for MeshMixer which includes a backported patch for CVE-2021-21772 and zlib 1.3.1
0xxa/google-pocThis repo contains instructions to reproduce CVE-2025-13425: Null Pointer dereference / Array over-indexing vulnerability that I found in Google's…
nastycrow/cve-2025-51643Documentation of CVE-2025-51643: physical SPI flash extraction on Meitrack T366G-L GPS tracker enabling firmware dump, plaintext credential…
fadingminibus69/advisory001Proof-of-concept exploit for CVE-2026-52504 targeting Exein Pulsar, with detailed vulnerability description and exploitation methodology.
rupeshsurve04/cve-2025-67399Documentation of CVE-2025-67399: physical UART debug interface exploitation on AIRTH Smart Home AQI Monitor (BK7231N SoC) enabling unauthorized…
mretallack/dronecameraDrone HASAKEE FPV video app for Android
nitinronge91/extracting-user-credentials-for-web-portal-and-wifi-ap-for-hathway-router-cve-2024-44815-CVE-2024-44815
dersecure/cve-2024-33676Technical disclosure of CVE-2024-33676: weak authentication on Enel X JuiceBox EV chargers enabling PII extraction, settings manipulation, and OS…
sumeetit/cve-2022-20607In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with…
mercul1ninna/mips-cve-2014-9222Lets have fun by digging into a Zyxel router firmware and MIPS Arch
siltyy/cve-2025-54505-fixImplements the mitigation for CVE-2025-54505 as described by AMD-SB-7053
abandon1337/cve-2024-0762Proof-of-concept exploit for CVE-2024-0762, a buffer overflow vulnerability in UEFI firmware, demonstrating exploitation techniques for security…
