
mtkclient
Mediatek Flash and Repair Utility

Mediatek Flash and Repair Utility

Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

AI-powered MCP server for Flipper Zero. Control SubGHz, NFC, RFID, IR, BLE, GPIO, and more over WiFi using Claude or any MCP client.

The open-source wireless research platform for ESP32.

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW

Reverse engineering the BYD Dolphin head unit — CAN bus, AVAS, NFC keys, OTA, and more. DiLink 3 / Android 10.

Proof-of-concept exploit for CVE-2020-25749 targeting Rubetek cameras with hardcoded Telnet credentials, enabling remote root shell access and full…

ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32

UNIX-like reverse engineering framework and command-line toolset

Flipper Zero app for infrared electronic shelf-label (ESL) protocol research, featuring custom image transmission, NFC tag scanning, and a web-based…

Ghidra is a software reverse engineering (SRE) framework

Unlock Bootloader for Itel S23 (S665L) / Unisoc T606 using CVE-2022-38694

Top-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing

AirPods liberated from Apple's ecosystem.

IoT firmware identification and extraction

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot

Security research on a consumer IP camera built on the Fullhan FH8626V100 SoC (model AJL30PG0803).