
TEE-reversing
A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

Analysis and cleanup guide for BadBox malware on Allwinner H713 Android projectors: ADB access, infection proof, firmware backup, dropper removal,…

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

Unlocking _everything_ on the CPU with DRAM scrambling

Tiny cute emulator plugin for IDA based on unicorn.

Hybrid kernel combining Mach, FreeBSD, and IOKit for macOS and iOS. Provides core OS services, driver framework, and security policy enforcement on…

Framework for compiling and executing Go applications on bare metal processors, enabling secure firmware development with reduced attack surface…

A complete browser-based reverse engineering platform built on Rizin, running entirely client-side via WebAssembly.

Official Intel microcode data files for updating processor firmware to mitigate security vulnerabilities and address functional issues on Linux…

Tools for controlling webcam LED on ThinkPad X230

An interactive disassembler for the CPU 6502, focused on Commodore 8-bit computers. Features a TUI with modern features like x-ref, undo/redo, flow…

RISC-V emulator in Rust that boots Linux with JIT on ARM64/x86_64 and Sv39 virtual memory

BLE-based Fitbit research tool for authentication replay, encrypted activity dump decryption, memory/firmware extraction, and custom firmware…

Linux libfprint driver for the Focal-systems FT9201 (2808:93a9) USB fingerprint reader — runs FocalTech's own Windows matching engine natively on…

Proof-of-concept exploit for CVE-2023-20126 targeting Cisco SPA phone adapters. Uploads malicious firmware to gain a root shell on port 23000/tcp via…

Pure Python assembler toolkit for creating shellcode, dynamically patching binaries, and instrumenting firmware images for debugging and fuzzing on…

Boots a custom Linux kernel on rooted LG webOS TVs via kexec, with reverse-engineered SoC watchdog support, framebuffer payloads, and an initramfs…

Research tooling to boot Linux on iPad mini 1 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads, including device tree port, kernel…