#1Hardware hacking, modding, JTAG, UART, SPI, and embedded device exploitation tools.
Kitploit recommended
imnot-ye/cve-2019-17147Comprehensive reverse engineering and exploitation of CVE-2019-17147, a stack buffer overflow in TP-Link TL-WR841N routers. Includes firmware…
kaleth4/cve-2021-4045Command injection exploit for TP-Link Tapo C200 camera (CVE-2021-4045) providing root shell access via UART and reverse-engineered uhttpd binary…
george0papasotiriou/cve-2026-22013-hardware-wallet-usb-descriptor-buffer-overflowStack buffer overflow PoC for a hardware wallet USB descriptor parser (CVE-2026-22013), showing return-address overwrite and code execution via…
jasonw88/esp32-cve-2025-27840-power-trace-experimentFirmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth…
x41sec/cve-2021-34600Proof-of-concept exploit for CVE-2021-34600, demonstrating a key generation vulnerability in Telenot access control systems using Proxmark3 RFID…
azhariramadhan/cve-2025-45512Proof-of-concept exploit suite for U-Boot bootloader vulnerabilities, including insecure update mechanisms, hardcoded credentials, debugging…
fcunnane/atomicmemoryAtomic Memory™
hoangrealer/cve-2023-27216Newbie's approach to firmware hacking
victorique-123/cve-2023-38829-netis-wf2409e_report对NETIS WF2409E路由器进行的一次完整硬件安全分析研究。通过对设备进行拆解分析、调试接口识别、固件提取等工作，记录了硬件分析的全过程、漏洞细节以及相应的安全建议，希望能帮助提高物联网设备的安全性。
l0lsec/tapo-c260-rcePoC exploit chain for TP-Link Tapo C260 camera — CVE-2026-0651/0652/0653. Research by @spaceraccoon.
fehr-gmbh/blackleakCVE-2024-30212
cryptoadvocate/dcsgonebadgeThe hardware engineering home of the Circuit Crafters first electronic badge project.
creased/arduckyArducky - Arduino Ducky Script Interpreter
resi-le/nxloaderAn app that enables payload injection into a Switch console from an Android device by exploiting the CVE-2018-6242 vulnerability
aprkr/cve-2023-48034Weak encryption in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject wireless…
whitej3rry/cve-2025-65731Advisory for CVE-2025-65731
rxerium/bash-bunny-payloadsPersonally crafted Bash Bunny Payloads
nastycrow/cve-2025-51643Documentation of CVE-2025-51643: physical SPI flash extraction on Meitrack T366G-L GPS tracker enabling firmware dump, plaintext credential…
