
mtkclient
Mediatek Flash and Repair Utility

Mediatek Flash and Repair Utility

Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

ESP32 and nRF24 based 2.4GHz jammer that disrupts Bluetooth, BLE, WiFi, and RC channels via noise and packet flooding for controlled security testing.

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

AI-powered MCP server for Flipper Zero. Control SubGHz, NFC, RFID, IR, BLE, GPIO, and more over WiFi using Claude or any MCP client.

The open-source wireless research platform for ESP32.

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…

Bluetooth 5 and 4.x LE sniffer for TI CC1352/CC26x2 hardware with support for extended advertising, all PHY modes, MAC/RSSI filtering, and PCAP…

Reverse engineering the BYD Dolphin head unit — CAN bus, AVAS, NFC keys, OTA, and more. DiLink 3 / Android 10.

Predatory ESP32 Firmware

shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing

Proof-of-concept exploit for CVE-2020-25749 targeting Rubetek cameras with hardcoded Telnet credentials, enabling remote root shell access and full…

AirPods liberated from Apple's ecosystem.

UNIX-like reverse engineering framework and command-line toolset

Flipper Zero app for infrared electronic shelf-label (ESL) protocol research, featuring custom image transmission, NFC tag scanning, and a web-based…

Ghidra is a software reverse engineering (SRE) framework

ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32