
IoT-PT-v1
A Virtual environment for Pentesting IoT Devices

EMBA - The firmware security analyzer

Centralized firmware scanning and reporting platform with a web UI, REST API, and automated analysis workflows for securing embedded/IoT devices.

EmbedOS - Embedded security testing virtual machine

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router (CVE-2022-43973)

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…

Attify OS - Distro for pentesting IoT devices

Ghidra is a software reverse engineering (SRE) framework

UNIX-like reverse engineering framework and command-line toolset

Boot and manage virtual iPhones on Apple Silicon with firmware patching, jailbreak variants, and security research features for iOS testing and…

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

A curated list of awesome Android Reverse Engineering training, resources, and tools.

Mediatek Flash and Repair Utility

A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

Reverse engineering framework with disassembly, decompilation, taint analysis, version diffing and semantic search, plus LLM-driven autonomous binary…

BootStomp: a bootloader vulnerability finder

Bash script to build your own system.prop

CVE-2025-21479 proof-of-concept, I think