
librepods
AirPods liberated from Apple's ecosystem.

AirPods liberated from Apple's ecosystem.

Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking

Disclosure of Accfly camera vulnerabilities: CVE-2020-25782, CVE-2020-25783, CVE-2020-25784, CVE-2020-25785.

🐬 A collection of awesome resources for the Flipper Zero device.

Reverse-engineered BLE protocol for the CMF Watch Pro 2, documenting GATT layout, AES-128-CBC encrypted command frames, authentication handshake, and…

Security analysis toolkit for proprietary car protocols

D-Link DSL-3782 Code Execution (Proof of Concept)

Toolkit for implant attack of IoT devices

Guide to building a virtual iPhone using VPHONE600AP components from Apple's PCC firmware, with firmware patching, bootchain modification, and kernel…

Run Radmin VPN on Linux via Wine — custom driver, TAP bridge, zero packet loss


BLE-based Fitbit research tool for authentication replay, encrypted activity dump decryption, memory/firmware extraction, and custom firmware…

Exploit and tooling for Amlogic-based Sonos devices: dumps OTP/eFUSE via an EL3 exploit, extracts LUKS decryption keys, and fetches/decrypts OTA…

Reverse Engineering and Observability toolkit for Draytek firewalls

Reverse-engineered Logi Options+ agent IPC protocol. Switch Logitech multi-host devices programmatically via Unix socket (macOS) or named pipe…

CVE-2018-11311 | mySCADA myPRO 7 Hardcoded FTP Username and Password Vulnerability

MOC3ingbird Exploit for Live2D (CVE-2023-27566)