
fusee-toy
Implementation of CVE-2018-6242 (AKA Fusée Gelée, AKA shofel2)

Implementation of CVE-2018-6242 (AKA Fusée Gelée, AKA shofel2)
Umap2 is the second revision of NCC Group's python based USB host security assessment tool.

Vulnerability research on Tesla Model 3/Y infotainment systems. 6 vulnerabilities, 4 CVEs (CVE-2022-42005 through CVE-2022-42008). Root shell,…

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

A rootless Android app that boots Alpine Linux: run containers (Podman/Docker/LXC) and GUI desktop apps.

Reverse engineering NVIDIA SASS instruction dictionary, kernel audits and pattern recognition across GPU architectures.

Technical articles detailing IoT vulnerability research, including WiFi communication flaws and firmware update weaknesses in connected devices, with…

Technical writeup analyzing CVE-2024-20154, a stack-based buffer overflow in MediaTek MT6769 NB-IoT baseband firmware, covering reverse engineering…

PrISM: A Scalable Probabilistic RowHammer Mitigation (ISCA 2026). Ramulator2 source code and evaluation scripts.

Free and Open-Source FRP Remover based on CVE-2022-38694

This repository contains a few vulnerabilities that were found and reported during vulnerability assessments.

Awesome-Cellular-Hacking

Hardware backdoors in x86 CPUs

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

A fully public exploit of the CVE-2020-0022 BlueFrag Android RCE Vulnerability (tested on Pixel 3 XL)

a list of BIOS/Firmware fixes adressing CVE-2017-5715, CVE-2017-5753, CVE-2017-5754

Backports of three published f_hid fixes (incl. CVE-2026-31721, CVE-2026-31606) to an EOL Linux 4.14.190 Android vendor kernel, with on-device…

AirPods liberated from Apple's ecosystem.