
mtkclient
Mediatek Flash and Repair Utility

Mediatek Flash and Repair Utility

Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

Curated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…

Unlock Bootloader for Itel S23 (S665L) / Unisoc T606 using CVE-2022-38694

Affordable WiFi hacking platform for testing and learning

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot

Gentoo overlay for security tools as well as the heart of the Pentoo Livecd

Reverse Shell CVE for iDRAC 7 & 8 with firmware 2.52.52.52 and below.

Firmware Analysis and Comparison Tool

Temporary root (uid 0) on a bootloader-locked ASUS Zenfone 9 via CVE-2025-21479 + a perf-based physical-address leak. GPLv3.

PS5 exploit chain for firmware 7.00-13.60 combining a WebKit JSC info leak and typedarray corruption with an aio_multi_wait UAF race for kernel…

EMBA - The firmware security analyzer

World's first hazard checker for NVIDIA Blackwell (sm_120), with an assembler and scheduler matched against their own compiler byte for byte. The…

CVE-2025-21479 proof-of-concept, I think

Reverse-engineered I2C/SMBus battery interface board for DJI Spark, replacing OEM smart battery with standard 3S LiPo. Includes protocol analysis,…

Intercepts and analyzes USB Mass Storage traffic at the block and file level, emulates USB devices, and supports custom Python stubs for security…

Patching and hooking the Linux kernel with only a stripped Linux kernel image.

Bootloader unlock (CVE-2022-38694) & root guide for Realme C53 / RMX3760 (Unisoc T612)