
ps5-uart
Interface for interacting with PlayStation 5 EMC and EFC

Interface for interacting with PlayStation 5 EMC and EFC

Full duplex 433 MHz Signal jammer, recorder, decoder and hacking multitool device based on ESP32 microcontroller and RFM69HW radios. This version of…

Concierge Toolkit: Physical Access Control Identification and Exploitation

Keystroke injection vulnerabilities in wireless presentation clickers

iPod Nano 7G bootrom exploit a bit too late

Welcome to the Doggie and EvilDoggie repository by Faraday Security! Doggie is a modular DIY CAN Bus to serial adapter (USB, BLE, UART) using the…

Proxmark3 Amiibo simulator as shown at Recon Montreal 2018

ST25TB / SRx NFC Emulator / Initiator based on TI TRF7970A with MSP430

A yet non-offical neighbor for the GreatFet One targeting the 433/868/915MHz bands

Hydrabus Shield for LIN and CAN Buses

Card calculator and Proxmark3 Plugin for writing and/or simulating every card type that Doppelgänger Community, Pro, Stealth, and MFAS support.

Automatically find and execute fault injection attacks

A coordinated disclosure and security advisory on Fermax Intercom DTML Injection vulneraiblity. Special thanks to Fermax International for prompt…

Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)

Exploit for CVE-2026-40003, an arbitrary memory write vulnerability in ZXIC/Sanechips ZX297520V3 SoC BootROM, enabling code execution via USB…

Library for WCH CH56x-based boards with tested USB3/USB2/HSPI/SerDes drivers, logging and deferred interrupts

Boots a custom Linux kernel on rooted LG webOS TVs via kexec, with reverse-engineered SoC watchdog support, framebuffer payloads, and an initramfs…

Research tooling to boot Linux on iPad mini 1 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads, including device tree port, kernel…