
binbloom
Raw binary firmware analysis software

Raw binary firmware analysis software

DoS against Belkin smart plugs via crafted firmware injection

Hardware Hacking Cheatsheet

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS…

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router (CVE-2022-43973)

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

UNIX-like reverse engineering framework and command-line toolset

Ghidra plugin that automates UEFI firmware analysis by identifying known GUIDs, protocols, SMI handlers, and interrupt functions, with headless…

TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules

Exploit and tooling for Amlogic-based Sonos devices: dumps OTP/eFUSE via an EL3 exploit, extracts LUKS decryption keys, and fetches/decrypts OTA…

Reverse Engineering and Observability toolkit for Draytek firewalls

Proof-of-concept exploit suite for U-Boot bootloader vulnerabilities, including insecure update mechanisms, hardcoded credentials, debugging…

Platform security assessment tool for dumping and analyzing UEFI/SMM registers, PCI config space, physical memory, SPI flash, and S3 bootscripts with…

The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303.


Voltage fault-injection modchip for black-box security evaluation of Starlink terminals, bypassing bootloader signature verification to execute…

A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices