#1Firmware extraction, unpacking, emulation, vulnerability discovery, and binary analysis tools.
Kitploit recommended
jaden-bowers/tenda-router-vr-and-exploitWriteup for Tenda AC15 router firmware rehosting and remote command execution (CVE-2020-10987) exploit replication.
donfanning/mips-cve-2014-9222Lets have fun by digging into a Zyxel router firmware and MIPS Arch
myasnik/hardware-hacking-cheatsheetHardware Hacking Cheatsheet
spiralbl0ck/sigint_through_brother_printersExploit vulnerable Brother printers via CVE-2017-7588, collect data, and develop custom firmware implants for attack simulation.
hessandrew/cve-2020-0557_intel-sa-00338https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00338.html
spiralbl0ck/bios-stuff-related-programmingFinal OBJECTIVE:BIOS ROOTKIT AND RSHELL USING BIOS NETWORKING STACK
dudux/routerfirmwaresA bunch of routers firmware images. Principally those that are not available and they do need to be extracted via JTAG, UART, desoldering flash or…
veereshgadige/aziot-cctv-cve-2025-50777CVE-2025-50777: Root Access and Plaintext Credential Exposure in AZIOT Smart CCTV
scorpion-security-labs/cve-2020-12124Proof-of-concept exploit for CVE-2020-12124 targeting Wavlink AC1200 router, demonstrating unauthenticated command injection and stack buffer…
kaisersource/cve-2021-3166Proof-of-concept exploit for CVE-2021-3166 targeting ASUS DSL-N14U routers via malicious firmware upload, triggering a denial-of-service condition.
christopher-pace/cve-2023-51073Firmware Update Server Verification Vulnerability on Buffalo LS210D Version 1.78-0.03
justinsteven/cve-2020-10759-pocProof of Concept for CVE-2020-10759 (fwupd signature validation bypass)
fallenskill1/cve-2024-22853D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root…
risuxx/cve-2023-34853Disclosure of CVE-2023-34853: a stack overflow vulnerability in Supermicro X12DPG-QR BIOS firmware allowing local privilege escalation to DXE Runtime…
nitinronge91/sensitive-information-disclosure-via-spi-flash-firmware-for-hathway-router-cve-2024-46383CVE-2024-46383
nevercodecorrect/lede-17.01.3Version-contains-cve-2019-12272
tadash10/detect-cve-2024-0762Detecting vulnerabilities like CVE-2024-0762, particularly in UEFI firmware, is quite challenging due to the low-level nature
