
mtkclient
Mediatek Flash and Repair Utility

Mediatek Flash and Repair Utility

Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

Curated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…

Bluetooth 5 and 4.x LE sniffer for TI CC1352/CC26x2 hardware with support for extended advertising, all PHY modes, MAC/RSSI filtering, and PCAP…

Predatory ESP32 Firmware

Flipper Zero firmware source code

Ghidra extension for PC firmware reverse engineering, providing loaders for PCI option ROMs, Intel Flash Descriptor, coreboot CBFS, and UEFI firmware…

Unlock Bootloader for Itel S23 (S665L) / Unisoc T606 using CVE-2022-38694

Affordable WiFi hacking platform for testing and learning

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot

Open-source firmware for HydraBus, a multi-tool for embedded hardware debugging, hacking, and penetration testing, supporting protocols like SPI,…

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

Reverse Shell CVE for iDRAC 7 & 8 with firmware 2.52.52.52 and below.

Firmware Analysis and Comparison Tool

Temporary root (uid 0) on a bootloader-locked ASUS Zenfone 9 via CVE-2025-21479 + a perf-based physical-address leak. GPLv3.

PS5 exploit chain for firmware 7.00-13.60 combining a WebKit JSC info leak and typedarray corruption with an aio_multi_wait UAF race for kernel…

World's first hazard checker for NVIDIA Blackwell (sm_120), with an assembler and scheduler matched against their own compiler byte for byte. The…