Tools

szymonh/zephyr_cve-2021-3625

CVE-2021-3625 - Sample exploits for Zephyr

finngineering/ch55x_firmware_extractor

Firmware extractor for CH55x microprocessors

dgh05t/zer0con_2026_attacking_apple_dcp

Research repository detailing exploitation techniques against Apple's Display Co-Processor (DCP), including firmware analysis and hardware-level…

supermagnum/galdralag-firmware

A cryptographic framework for Baochip-1x .

secforce/cve-2021-37748

Exploit code for CVE-2021-37748 targeting Grandstream HT801 ATA, demonstrating remote code execution via crafted HTTP requests.

jeromeyoung/cve-2021-40154

POC to test the BootROM vulnerability found in LPC55S69 and K82 Series

themalwareguardian/cve-2022-34302

Demonstrates CVE-2022-34302, a Secure Boot bypass via the New Horizon Datasys signed bootloader whose built-in custom PE/COFF loader executes…

christopher-leese/cve-2015-1187-dir820l-firmware-reverse-engineering

Static firmware reverse engineering of CVE-2015-1187: unauthenticated command injection in D-Link DIR-820L. MIPS root filesystem extraction with…

qcomms/cqptoolkit

Framework for controlling QKD devices and managing symmetric keys. See the [project page here](https://qcomms.gitlab.io/cqptoolkit/)

manucuf/cve202015808

A proof of concept of CVE-2020-15808 vulnerability exploit on STM32F4 Discovery board

themalwareguardian/uefi-security-research-howyar-sysreturn-netcopy

Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept…

yt2w/cve-2025-9961

Exploit for TP-Link AX10/AX1500 stack buffer overflow in CWMP (TR-069) enabling remote code execution via ret2libc with ASLR bypass. Includes…

retr0reg/tenda-ac8v4-rop

Exploits for Tenda Ac8v4 stack-based overflow to Remote-Code Execution via Mipsel Ropping (CVE-2023-33669 - CVE-2023-33675)

engrbilal992/deaddialect

A session-unique RISC-V ISA — every boot speaks a different dialect. Old binaries become invalid. Malware cannot persist.

nikitapbst/cve-2019-6260

Low-level hardware debugging and security assessment tool for ASPEED BMC AHB interfaces. Probes PCIe, LPC, and UART interfaces to read/write…

pqsec/uboatdemo

A demo server for CVE-2016-3955 (UBOAT)

sunrayvision/vision-msi-thermal-control

MSI Modern 15H AI C1MGT-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold

austinhartzheim/fusee-gelee

Rust implementation of the Fusée Gelée exploit (CVE-2018-6242) for Tegra processors.