
BlueSpy
PoC to record audio from a Bluetooth device

PoC to record audio from a Bluetooth device

Research tools for MouseJack vulnerabilities in nRF24L01 wireless devices, including device discovery, packet sniffing, network mapping, and firmware…

UPnP Pentest Toolkit for Windows

AirPods liberated from Apple's ecosystem.

Low-cost open-source software-defined radio platform with hardware designs and firmware for RF transmission, reception, and signal analysis from 1…

Program to decode radio transmissions from devices on the ISM bands (and other frequencies)

Guide to building a virtual iPhone using VPHONE600AP components from Apple's PCC firmware, with firmware patching, bootchain modification, and kernel…

Working POC of Mikrotik exploit from Vault 7 CIA Leaks

Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking

PIrateRF transforms your Raspberry Pi Zero W into a portable RF signal generator that spawns its own WiFi hotspot. Control everything from FM…

Hardened Android web browser forked from Mull/Firefox with privacy-focused patches, anti-fingerprinting, telemetry removal, and secure defaults for…

C library providing a portable API for acquiring signals from logic analyzers, oscilloscopes, multimeters, and other test instruments, with…

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

Telenet Enable for Netgear routers from svn checkout http://netgear-telnetenable.googlecode.com/svn/trunk/ netgear-telnetenable-read-only

Exploit for command injection vulnerability found in uhttpd binary from TP-Link Tapo c200 IP camera

RP2040 firmware that bridges a Toshiba MK4001MTD 0.85" SDIO microdrive as a USB mass storage device, implementing the full SDIO-ATA protocol stack…

A tool to listen on a KNX bus via TPUART and the Calimero Project suite and to dump the data from the packets into a Wireshark-Compatible file hex…

Results and device code from the DEF CON 29 presentation "You're Doing IoT RNG"