Firmware Analysis

o7-machinehum/phantomdrive

Seemingly normal USB drive with a hidden security feature

medusalix/freemdu

Open hardware and software tools for communicating with Miele appliances via their optical diagnostic interface

owasp/iotgoat

Deliberately insecure OpenWrt-based firmware for hands-on IoT security training. Features vulnerability challenges mapped to the OWASP IoT Top 10 for…

clearbluejar/pyghidra-mcp

Python Command-Line Ghidra MCP

firmwire/firmwire

FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares

intellabs/kafl

A fuzzer for full VM kernel/driver targets

elderlypirate/bus_pirate

Multi-protocol firmware for a hardware hacking tool supporting SPI, I2C, JTAG, UART, 1-Wire, bus sniffing, logic analysis, and microcontroller…

baochip/baochip-1x

Open-source silicon RTL and simulation tools for the Baochip 1x SoC, featuring a VexRiscv CPU, Verilator-based verification, and documentation for…

ebrandi/fdd-book

FreeBSD Device Driver Book

francozappa/bluffs

Toolkit for testing Bluetooth session establishment against forward and future secrecy attacks, using firmware patching, PCAP analysis, and automated…

seemoo-lab/internalblue

Bluetooth experimentation framework for Broadcom and Cypress chips.

rhboot/shim-review

Reviews of shim

uofw/uofw

The unofficial Official FirmWare, a complete latest PSP firmware reverse engineering project

ucsb-seclab/karonte

Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware

mrphrazer/obfuscation_detection

Binary Ninja plugin to identify obfuscated code and other interesting code constructs

pixel-props/build.prop

Bash script to build your own system.prop