
spd_dump-macos
UNISOC BootROM/FDL flasher for macOS: patched spd_dump with CVE-2022-38694 exec_addr2, protocol reference, partition rules, backup verification…

UNISOC BootROM/FDL flasher for macOS: patched spd_dump with CVE-2022-38694 exec_addr2, protocol reference, partition rules, backup verification…

Unlock Bootloader for Itel S23 (S665L) / Unisoc T606 using CVE-2022-38694

AOSP Bluetooth stack with a patch for CVE-2021-0589, providing a vulnerable version for security research and exploit development.

Proof-of-concept exploit for CVE-2024-0023 in Android's frameworks/av, implemented in C++ to demonstrate the media framework vulnerability.

Exploit or analysis for CVE-2021-0520 in Android's media framework (frameworks/av) on AOSP 10 r33, targeting a vulnerability in audio/video…






cve-2020-0022

Exploit for CVE-2020-0136, a use-after-free vulnerability in Android's libhwbinder, demonstrating memory corruption and potential privilege…

Temproot for Bravia TV via CVE-2019-2215.

Bootloader unlock using CVE-2022-38694 for Retroid Pocket 3+

Reverse engineering research and custom firmware for Allwinner V3-based IoT cameras, including firmware parsers, an AVIOCTRL client, and a…

Tools for analyzing and reverse engineering MediaTek baseband firmware, including file extraction, symbol parsing, and Ghidra integration for modem…

Reverse Engineering of the Shining App Mask

Technical writeup analyzing CVE-2024-20154, a stack-based buffer overflow in MediaTek MT6769 NB-IoT baseband firmware, covering reverse engineering…