
iBSSloader
Research tooling to boot Linux on iPad mini 1 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads, including device tree port, kernel…
embedded-systems-securityexploitationfirmware-analysis+3
6

Research tooling to boot Linux on iPad mini 1 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads, including device tree port, kernel…

Boots a custom Linux kernel on rooted LG webOS TVs via kexec, with reverse-engineered SoC watchdog support, framebuffer payloads, and an initramfs…

Personally crafted Bash Bunny Payloads

Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)