
CVE-2024-33676
Technical disclosure of CVE-2024-33676: weak authentication on Enel X JuiceBox EV chargers enabling PII extraction, settings manipulation, and OS…

Technical disclosure of CVE-2024-33676: weak authentication on Enel X JuiceBox EV chargers enabling PII extraction, settings manipulation, and OS…

Protocol client and CLI framework for interacting with wireless hacking devices, enabling security researchers to explore, test, and automate…

First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM…

Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards

Exploring possibilities of ESP32 platform to attack on nearby Wi-Fi networks.

Playground (and dump) of stuff I make or modify for the Flipper Zero


FPGA-based 12-channel AM radio broadcast system with formal verification of a hardware watchdog for fail-safe emergency alert transmission in…

Proof-of-concept demonstrating a microarchitectural data leak in Loongson LA464/LA664 processors via undefined upper bits of LASX vector registers,…

Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).

TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules

Concierge Toolkit: Physical Access Control Identification and Exploitation

Proof-of-concept exploit suite for U-Boot bootloader vulnerabilities, including insecure update mechanisms, hardcoded credentials, debugging…

Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.


Voltage fault-injection modchip for black-box security evaluation of Starlink terminals, bypassing bootloader signature verification to execute…

unleash the full power of your BES-based headphones! :)
