
TEE-reversing
A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.


Broadpwn bug (CVE-2017-9417)

Proof-of-concept exploit for CVE-2025-31931 demonstrating arbitrary shared library loading in Intel ITT API on Android, affecting OpenCV 4.10.

A proof-of-concept for CVE-2020-12753

USB device fuzzing on Android Phone

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS…

Experimenting with CVE-2022-20120 (Pixel Bootloader / ABL) using Unicorn, derived from eShard's emulator at…

Unlock Bootloader for Itel S23 (S665L) / Unisoc T606 using CVE-2022-38694

Unlock Bootloader for Itel S23 (S665L) / Unisoc T606 using CVE-2022-38694

Bootloader unlock using CVE-2022-38694 for Retroid Pocket 3+