
rcm-modchips
Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)
embedded-systems-securityexploitationhardware-hacking+3
21

Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)

Boots a custom Linux kernel on rooted LG webOS TVs via kexec, with reverse-engineered SoC watchdog support, framebuffer payloads, and an initramfs…

Research tooling to boot Linux on iPad mini 1 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads, including device tree port, kernel…

Personally crafted Bash Bunny Payloads