
unleashed-firmware
Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

Abstracts and expedites the process of backdooring stock firmware images for consumer/SOHO routers

ARM32 Linux kernel privilege escalation exploit for CVE-2026-43499 (GhostLock futex UAF) targeting Huawei Watch 4 Pro with multiple exploitation…

Proof-of-concept exploit for CVE-2026-1668 in TP-Link switch firmware, delivering a MIPS payload that yields a root shell on vulnerable devices.

Exploit vulnerable Brother printers via CVE-2017-7588, collect data, and develop custom firmware implants for attack simulation.

CVE-2018-19537

Working POC of Mikrotik exploit from Vault 7 CIA Leaks

A fully implemented kernel exploit for the PS4 on 5.05FW

Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68

Console jailbreak demo that executes native functions inside the Switch 2 filesystem process via SmileBASIC, verifies results, and restores original…

Exploit for Sagemcom F@ST 3890 cable modem implementing Cable Haunt vulnerability to achieve remote code execution via WebSocket-based buffer…

CFW framework for PS Vita

Interface for interacting with PlayStation 5 EMC and EFC

Toolkit for implant attack of IoT devices

Python-based exploit development framework with payloads, encoders, and connect-back servers, focused on MIPS CPU architecture but designed for…

A PoC of the CVE-2024-56426 vulnerability.

Let's hijack our bootchain - CVE-2021-30327

WAMpage - A WebOS root LPE exploit chain (CVE-2022-23731)