
ShiningAppMask-ReverseEngineering
Reverse Engineering of the Shining App Mask

Reverse Engineering of the Shining App Mask

Comprehensive reverse engineering and exploitation of CVE-2019-17147, a stack buffer overflow in TP-Link TL-WR841N routers. Includes firmware…

Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth…

The hardware engineering home of the Circuit Crafters first electronic badge project.

Documentation of CVE-2025-51643: physical SPI flash extraction on Meitrack T366G-L GPS tracker enabling firmware dump, plaintext credential…

Documentation of CVE-2025-67399: physical UART debug interface exploitation on AIRTH Smart Home AQI Monitor (BK7231N SoC) enabling unauthorized…

Intel Management Engine JTAG Proof of Concept

Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

Flipper Zero firmware source code

Affordable WiFi hacking platform for testing and learning

Hardware tool for RFID analysis, emulation, and penetration testing. Supports 125kHz, 13.56MHz protocols (MIFARE, iClass, ISO14443/15693) with key…

Breathe fresh life into your bricked Nest, now with 100% less evil!

Offline nested attack tool that recovers MIFARE Classic authentication keys using known default or user-supplied keys for assessing NFC/RFID card…

Implement your own USB device in Python, supported by a hardware peripheral such as Cynthion or GreatFET

A fully implemented kernel exploit for the PS4 on 5.05FW

Bluetooth experimentation framework for Broadcom and Cypress chips.

Open-source silicon RTL and simulation tools for the Baochip 1x SoC, featuring a VexRiscv CPU, Verilator-based verification, and documentation for…