#1Tools for testing and securing Internet of Things (IoT) devices, protocols, and platforms.
Kitploit recommended
therealsaumil/static-arm-binsStatically compiled ARM binaries for debugging and runtime analysis
superkhung/luadec-tplinkModified luadec version to decompile TP-Link Archer C7 LUA firmware.
wheregoes/byd-dolphin-hackingReverse engineering the BYD Dolphin head unit — CAN bus, AVAS, NFC keys, OTA, and more. DiLink 3 / Android 10.
karaaslanlabs/kl-security-keyExperimental RP2040 FIDO2/WebAuthn authenticator with packed attestation and documented Windows/Entra interoperability
turretsec/disclosure-thinkware-u3000Three unauthenticated vulnerabilities in the Thinkware U3000 dashcam's local WiFi control protocol: arbitrary file write, arbitrary file read, and…
turretsec/u3000pyPython client for the Thinkware U3000 dashcam's local WiFi control protocol, reverse-engineered from the official Android app. PoC tooling behind…
heapframe/seetong-ts81xxd3x-rceCVE-2026-100886 | Unauthenticated Remote Code Execution toolkit.
murrez/cve-2026-100740Python PoC for CVE-2026-100740, an L2TP Host Name AVP out-of-bounds write in D-Link DIR-895L A1_102b07 tunnel_set_params. Fingerprints the device and…
murrez/cve-2026-13249Unauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040–before F10.22.030745) leading to RCE. Python check/exploit…
wuyou6956-glitch/cve-2026-1668-pocProof-of-concept exploit for CVE-2026-1668 in TP-Link switch firmware, delivering a MIPS payload that yields a root shell on vulnerable devices.
ejfkdev/reyee_decryptDecrypt Ruijie ReyeeOS firmware (v1/v2) and encrypted config backups; recover plaintext passwords
nmatt0/moriaIoT firmware identification and extraction
wrongbaud/spidumpTool for reconstructing SPI flash images via logic analyzer captures
aeromodes/8cryptdoReverse-engineered docs and tools for 8BitDo firmware encryption methods
florentineprinzessinzusachsen/badbox-h713-projectorAnalysis and cleanup guide for BadBox malware on Allwinner H713 Android projectors: ADB access, infection proof, firmware backup, dropper removal,…
mrhenrike/embedxpl-forgeEmbedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…
d6fault/cve-2026-95675Python PoC exploiting CVE-2026-95675, an unauthenticated root command injection in D-Link DAP-1360 RevB firmware via a hardcoded auth-bypass and the…
khaleedbt/netis-cve-2026-36539Python script that checks Netis routers for CVE-2026-36539, detecting vulnerable devices on a network.
