
efiSeek
Ghidra plugin that automates UEFI firmware analysis by identifying known GUIDs, protocols, SMI handlers, and interrupt functions, with headless…

Ghidra plugin that automates UEFI firmware analysis by identifying known GUIDs, protocols, SMI handlers, and interrupt functions, with headless…

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

Downgrade attack for CVE-2025-48804

Hardware hacker’s flying probe automation stack for agent-driven target discovery, microscope mapping, safety-monitored CNC motion, probe review,…

ATAboy is a user-friendly bridge that allows legacy CHS only style IDE (PATA) hard drives to be connected to a modern computer as a standard USB Mass…

A low pin count sniffer for ICEStick - targeting TPM chips

Lenovo Diagnostics Driver EoP - Arbitrary R/W

PhyWhisperer-USB: Hardware USB Trigger

Software tools for Nordic Semiconductor nRF24-based devices like wireless keyboards, mice, and presenters

CVE-2022-31705 (Geekpwn 2022 Vmware EHCI OOB) POC

Latency x-ray for undocumented hardware

Interface for interacting with PlayStation 5 EMC and EFC

Rust AMD SVM hypervisor framework with customizable vmexit handlers (MSR, CPUID, RDTSC) and NPT hooking for kernel-level monitoring and research.

Concierge Toolkit: Physical Access Control Identification and Exploitation

A bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.

Wireless mouse/keyboard attack with replay/transmit poc

asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices

sniff HDMI DDC (I2C) traffic