
ExtractKeyMaster
Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431

Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431

CVE-2025-21479 proof-of-concept, I think

Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.

Reverse engineering the BYD Dolphin head unit — CAN bus, AVAS, NFC keys, OTA, and more. DiLink 3 / Android 10.

Glass - a fast and free IDA Pro alternative

Broadpwn bug (CVE-2017-9417)

Qualcomm TrustZone kernel privilege escalation

Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.

Low-level kernel modules and device tree source for the OnePlus 11 (sm8550), enabling hardware bring-up, driver analysis, and embedded system…

Read and write IMEI records and WiFi/Bluetooth addresses in MediaTek NVRAM files or partition images. Includes interactive ADB tools for rooted…

A proof-of-concept for CVE-2020-12753

Patches and hooks the Linux kernel using only a stripped kernel image, extracting symbols and injecting code for inline and syscall hooking on arm64.

Breakdown of a c2-network of chinese beamers - SilentSDK-Analysis

USB device fuzzing on Android Phone

Proof-of-concept for CVE-2025-48593


CVE-2026-43499 GhostLock root exploit for Chromecast with Google TV (sabrina)

CVE-2022-38181 POC for FireTV 2nd gen Cube (raven)