
CVE-2018-1207-better
Reverse Shell CVE for iDRAC 7 & 8 with firmware 2.52.52.52 and below.

Reverse Shell CVE for iDRAC 7 & 8 with firmware 2.52.52.52 and below.

Ghidra plugin that automates UEFI firmware analysis by identifying known GUIDs, protocols, SMI handlers, and interrupt functions, with headless…

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

ESP32 firmware that sniffs PROBE REQUEST packets sent by smartphones searching for Wi-Fi connection to extract different types of information

Proof-of-concept exploit for CVE-2025-69515 demonstrating static GPS spoofing on JXL 9-inch Android infotainment units via SDR-based signal…

Parse BIOS/Intel ME/UEFI firmware related structures: Volumes, FileSystems, Files, etc

Research on CVE-2025-3052, an Insyde firmware vulnerability that exposes an arbitrary write primitive capable of modifying security-critical pointers.

Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers

Using CVE-2013-6282 to bypass Samsung kernel module authentication

This firmware is an alternative to the EvilCrowRF default firmware. Module: CC1101 - Compatible Flipper Zero file.

Linux kernel module implementing a zero-configuration, OTP-based firewall for IoT devices. Transparently authenticates network traffic using a…

PoC code of Shade BIOS (stripped) presented at Black Hat USA 2025

Sinilink XY-WFTX Wifi Remote Thermostat Module Temperature Controller

Pure Rust implementation of (draft) FIPS 203 Module-Lattice-based Key-Encapsulation Mechanism Standard for server, desktop, browser and embedded…

Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth…

Bitcoin Cryptanalysis: CVE-2025-27840 Vulnerability in ESP32 Microcontrollers Puts Billions of IoT Devices at Risk via Wi-Fi & Bluetooth

Automatically exported from code.google.com/p/firmware-mod-kit

Ghidra processor description module for NEC/Renesas v810 and v830 families