darkflippers/unleashed-firmwareCustom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.
jet-pentest/cve-2020-25749Proof-of-concept exploit for CVE-2020-25749 targeting Rubetek cameras with hardcoded Telnet credentials, enabling remote root shell access and full…
nccgroup/sniffleBluetooth 5 and 4.x LE sniffer for TI CC1352/CC26x2 hardware with support for extended advertising, all PHY modes, MAC/RSSI filtering, and PCAP…
al3xtjames/ghidra-firmware-utilsGhidra extension for PC firmware reverse engineering, providing loaders for PCI option ROMs, Intel Flash Descriptor, coreboot CBFS, and UEFI firmware…
mrhenrike/embedxpl-forgeEmbedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…
amiraliuks/ip-camera-researchSecurity research on a consumer IP camera built on the Fullhan FH8626V100 SoC (model AJL30PG0803).
flipperdevices/flipperzero-firmwareFlipper Zero firmware source code
dsecurity/efiseekGhidra plugin that automates UEFI firmware analysis by identifying known GUIDs, protocols, SMI handlers, and interrupt functions, with headless…
elevenpaths/devicepairedtoolTool for testing and auditing Bluetooth device pairing security, identifying vulnerabilities in wireless pairing protocols and hardware IoT…
threat9/routersploitExploitation Framework for Embedded Devices
msnightmare/greensectionProof-of-concept for NVIDIA GreenSection memory corruption 0day, demonstrating out-of-bounds write via shared memory section, enabling cross-user…
electroniccats/catsniffer-firmwareFirmware repository for CatSniffer, a multi-protocol IoT security research board supporting BLE, Zigbee, Sub-1 GHz, and more, with version-specific…
ggfuchsi-oss/lg-webos-kexecBoots a custom Linux kernel on rooted LG webOS TVs via kexec, with reverse-engineered SoC watchdog support, framebuffer payloads, and an initramfs…
george0papasotiriou/cve-2026-1122-iot-firmware-update-signature-bypass-via-low-order-point-injectionDemonstrates CVE-2026-1122 Ed25519 signature bypass via low-order point injection, forging malicious IoT firmware updates with Python and C verifier…
alessandrocarminati/provisionerProvisioning and sharing system for SBCs
seemoo-lab/nexmonThe C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
robertguetzkow/cve-2021-37740PoC for DoS vulnerability CVE-2021-37740 in firmware v3.0.3 of SCN-IP100.03 and SCN-IP000.03 by MDT. The bug has been fixed in firmware v3.0.4.
adamlaurie/rfidiotPython library and tools for exploring RFID/NFC tags and readers: read, write, clone, and analyze supported ACG serial hardware for research and…
