
Concierge
Concierge Toolkit: Physical Access Control Identification and Exploitation

Concierge Toolkit: Physical Access Control Identification and Exploitation

Keystroke injection vulnerabilities in wireless presentation clickers

iPod Nano 7G bootrom exploit a bit too late

Welcome to the Doggie and EvilDoggie repository by Faraday Security! Doggie is a modular DIY CAN Bus to serial adapter (USB, BLE, UART) using the…

Proxmark3 Amiibo simulator as shown at Recon Montreal 2018

ST25TB / SRx NFC Emulator / Initiator based on TI TRF7970A with MSP430

A yet non-offical neighbor for the GreatFet One targeting the 433/868/915MHz bands

Hydrabus Shield for LIN and CAN Buses

Card calculator and Proxmark3 Plugin for writing and/or simulating every card type that Doppelgänger Community, Pro, Stealth, and MFAS support.

Automatically find and execute fault injection attacks

A coordinated disclosure and security advisory on Fermax Intercom DTML Injection vulneraiblity. Special thanks to Fermax International for prompt…

Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)

Exploit for CVE-2026-40003, an arbitrary memory write vulnerability in ZXIC/Sanechips ZX297520V3 SoC BootROM, enabling code execution via USB…

Library for WCH CH56x-based boards with tested USB3/USB2/HSPI/SerDes drivers, logging and deferred interrupts

Boots a custom Linux kernel on rooted LG webOS TVs via kexec, with reverse-engineered SoC watchdog support, framebuffer payloads, and an initramfs…

Research tooling to boot Linux on iPad mini 1 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads, including device tree port, kernel…

MSI Modern 15H AI C1MGT-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold

Syma X5SW Telemetry and Transmissor