
unleashed-firmware
Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499

AI-powered MCP server for Flipper Zero. Control SubGHz, NFC, RFID, IR, BLE, GPIO, and more over WiFi using Claude or any MCP client.

Proof-of-concept exploit for CVE-2020-25749 targeting Rubetek cameras with hardcoded Telnet credentials, enabling remote root shell access and full…

Your ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥

Flipper Zero app for infrared electronic shelf-label (ESL) protocol research, featuring custom image transmission, NFC tag scanning, and a web-based…

IoT firmware identification and extraction

AirPods liberated from Apple's ecosystem.

Affordable WiFi hacking platform for testing and learning

Security research on a consumer IP camera built on the Fullhan FH8626V100 SoC (model AJL30PG0803).

Implement your own USB device in Python, supported by a hardware peripheral such as Cynthion or GreatFET

Run Radmin VPN on Linux via Wine — custom driver, TAP bridge, zero packet loss

Exploitation Framework for Embedded Devices

GTK4 and CLI cellular security toolkit with 57 modules for 2G GSM, 3G UMTS, 4G LTE and 5G NR air interface, core network, SIM identity, RF tracking,…

Firmware Analysis and Comparison Tool

One-click root kit for vivo iQOO Neo9S Pro (MT6989) exploiting CVE-2026-43499 futex PI UAF via MCAST transport, with scripts and analysis docs.

DJI Drone DUML Command Injection over Bluetooth — Proof of Concept for CVE-2026-78306

EMBA - The firmware security analyzer