
mtkclient
Mediatek Flash and Repair Utility

Mediatek Flash and Repair Utility

Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

Curated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…

Bluetooth 5 and 4.x LE sniffer for TI CC1352/CC26x2 hardware with support for extended advertising, all PHY modes, MAC/RSSI filtering, and PCAP…

Predatory ESP32 Firmware

Ghidra extension for PC firmware reverse engineering, providing loaders for PCI option ROMs, Intel Flash Descriptor, coreboot CBFS, and UEFI firmware…

Unlock Bootloader for Itel S23 (S665L) / Unisoc T606 using CVE-2022-38694

Flipper Zero firmware source code

Affordable WiFi hacking platform for testing and learning

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot

Open-source firmware for HydraBus, a multi-tool for embedded hardware debugging, hacking, and penetration testing, supporting protocols like SPI,…

Reverse Shell CVE for iDRAC 7 & 8 with firmware 2.52.52.52 and below.

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

Firmware Analysis and Comparison Tool

World's first hazard checker for NVIDIA Blackwell (sm_120), with an assembler and scheduler matched against their own compiler byte for byte. The…

PS5 exploit chain for firmware 7.00-13.60 combining a WebKit JSC info leak and typedarray corruption with an aio_multi_wait UAF race for kernel…

Reverse-engineered I2C/SMBus battery interface board for DJI Spark, replacing OEM smart battery with standard 3S LiPo. Includes protocol analysis,…