


Experimental Nikon Z7 camera firmware research lab: source patcher, QEMU emulation harness, and validation tooling for building and testing modified…

Tool for reconstructing SPI flash images via logic analyzer captures

Reverse-engineered Logi Options+ agent IPC protocol. Switch Logitech multi-host devices programmatically via Unix socket (macOS) or named pipe…

A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing (mostly Iot…

Interface for interacting with PlayStation 5 EMC and EFC

A very very very very very very very long interrupt

Unlocking _everything_ on the CPU with DRAM scrambling

Playground (and dump) of stuff I make or modify for the Flipper Zero

uhubctl - USB hub per-port power control

A list of public attacks on BitLocker

ATAboy is a user-friendly bridge that allows legacy CHS only style IDE (PATA) hard drives to be connected to a modern computer as a standard USB Mass…

Implement your own USB device in Python, supported by a hardware peripheral such as Cynthion or GreatFET

CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver

Documentation of CVE-2025-51643: physical SPI flash extraction on Meitrack T366G-L GPS tracker enabling firmware dump, plaintext credential…

PoC code of Shade BIOS (stripped) presented at Black Hat USA 2025

This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.

Personally crafted Bash Bunny Payloads