Tools

seemoo-lab/nexmon

The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more

e-m-b-a/emba

EMBA - The firmware security analyzer

openocd-org/openocd

Official OpenOCD Read-Only Mirror (no pull requests)

pwndbg/pwndbg

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

geo-tp/esp32-bit-pirate

A Hardware Hacking Tool with Web-Based CLI That Speaks Every Protocol

saimanish1/logitech-ipc-protocol

Reverse-engineered Logi Options+ agent IPC protocol. Switch Logitech multi-host devices programmatically via Unix socket (macOS) or named pipe…

emsec/hal

HAL – The Hardware Analyzer

fkie-cad/fact_core

Firmware Analysis and Comparison Tool

nnonickreal/openqore

unleash the full power of your BES-based headphones! :)

gadorach/vankyo-s30-bootloader-unlock

Vankyo MatrixPad S30 (Unisoc SC9863A) — Bootloader unlock via CVE-2022-38694 FDL1 method

badchemical/iot-vulnerability-research-public

Independent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws.

nickdaria/wyze-bulb-color-pwned

No-open firmware exploit for the Wyze WLPA19CV2 color bulb

teutekeune/ibssloader

Research tooling to boot Linux on iPad mini 1 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads, including device tree port, kernel…

v33ru/awesome-connected-things-sec

A Curated list of Security Resources for all connected things

ggfuchsi-oss/lg-webos-kexec

Boots a custom Linux kernel on rooted LG webOS TVs via kexec, with reverse-engineered SoC watchdog support, framebuffer payloads, and an initramfs…

xcracker000/cve-2024-56426

CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F

danyw24/zyxel-p870hn-hardware-hacking

From a bare PCB to root: hardware-hacking a ZyXEL P-870HN (BCM6368) over UART — CVE-2025-0890 + CVE-2024-40891, on my own hardware.

xoreaxeaxeax/skitter-creek-bath-salts

Unlocking _everything_ on the CPU with DRAM scrambling