
tcl-androidtv-root-attempts
Documents reverse engineering of a TCL Android TV factory layer: 56 kHz IR protocol, tclfactoryos daemon, kernel IR driver, and evidence that…

Documents reverse engineering of a TCL Android TV factory layer: 56 kHz IR protocol, tclfactoryos daemon, kernel IR driver, and evidence that…

Headless QEMU/OVMF harness that drives a PXE boot and fires oversized ICMP errors to reproduce the EDK II PxeBcSupport buffer overflow…

Educational lab that builds pinned EDK II/OVMF firmware, boots a UEFI VM in QEMU, and runs Python PoC scripts for a PXE network-boot DoS and…

Exploit tooling for the EDK II UEFI PXE ICMP error overflow (CVE-2026-97631): crafts spoofed ICMP packets, plants a counterfeit EFI_EVENT, and dumps…

Firmware diff analysis, root-cause writeup, and working PoC for the unauthenticated NetScaler ADC command injection (CVE-2026-88771) leading to root…

Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

Reverse engineering du NavCore 9.884 embarqué Renault (codename beaumont)

Pure-Rust reverse-engineering engine with 314 CLI/MCP inspection tools (disassembly, decompilation, strings, call graphs) that studies any app, site…

Technical analysis of a NetScaler nsppe HTTP/1.1 chunk-size integer-wrap request smuggling flaw, with disassembly, wire-level PoC flows, and firmware…

Experimental research code for analyzing d_olex firmware and performing preboot-stage attacks against firmware boot code.

MCP server exposing 180+ reverse-engineering tools that aggregate Ghidra, IDA, x64dbg, Frida and 56 other backends with native binary parsers and a…

Open research documentation and source review for ZTE MF904Q bootloader, firmware extraction, and reverse engineering.

EDK2 BrotliCustomDecompressLib security findings — coordinated disclosure

Patches Xiaomi router firmware images to enable SSH access and install custom firmware, with automated Windows and Linux/macOS launcher scripts.

Experimental Nikon Z7 camera firmware research lab: source patcher, QEMU emulation harness, and validation tooling for building and testing modified…

Research methods for reverse engineering encrypted firmware and software with AI-assisted analysis, independent validation, and public-source…

Disguised as an ASUS XG C100C network card and implement fake traffic communication function

Read and write IMEI records and WiFi/Bluetooth addresses in MediaTek NVRAM files or partition images. Includes interactive ADB tools for rooted…