Tools

e-m-b-a/emba

EMBA - The firmware security analyzer

yeet-src/usbsnoop

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no…

hunt-benito/go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

PoC for CVE-2026-67822 stack overflow in Tenda W6-S /goform/wifiSSIDset: DoS reproducer, QEMU MIPS shim, and conceptual RCE payload skeleton.

fkie-cad/fact_core

Firmware Analysis and Comparison Tool

bishopfox/sparkplugfuzzer

Fuzzer for the Sparkplug B IIoT protocol

onekey-sec/firmware-workshop

In this workshop session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the…

moxie25/nanomq-memory-leak-research

Public advisory and technical analysis for CVE-2026-36590, a NanoMQ v0.24.9 denial-of-service vulnerability.

pr0v3rbs/firmae

Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis

umbertodellamonica/linksys-wrt54gl-exploitation

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router (CVE-2022-43973)

thegaminggallifreyan/liberationplay-cve-2025-24132-airbourne-poc

POC for CVE-2025-24132 (AirBourne). Currently just triggers the overflow and causes a crash

hydrabus/hydrafw

Open-source firmware for HydraBus, a multi-tool for embedded hardware debugging, hacking, and penetration testing, supporting protocols like SPI,…

hoangrealer/cve-2023-27216

Newbie's approach to firmware hacking

firmadyne/firmadyne

Platform for emulation and dynamic analysis of Linux-based firmware

badmonkey7/cve-2021-34730

Cisco RV110w UPnP stack overflow