
wake-and-break
PSP exploit for AMD navi31 (RX 7900) GPUs that disables firmware signature checks so the card loads unsigned SMU, SDMA, MEC, IMU and RLC firmware;…

PSP exploit for AMD navi31 (RX 7900) GPUs that disables firmware signature checks so the card loads unsigned SMU, SDMA, MEC, IMU and RLC firmware;…

This repository contains the results of my August 2020 research of Tiandy's IPC/NVR firmware. I found two vulnerabilities that could be used to…

ARM32 Linux kernel privilege escalation exploit for CVE-2026-43499 (GhostLock futex UAF) targeting Huawei Watch 4 Pro with multiple exploitation…

Disclosure and PoC for a root file read/write flaw in the TP-Link Deco XE75 Pro V3 debug channel (tmpsvr opcodes 0xC456/0xF0), with CVSS analysis and…

A PS5 hypervisor exploit for 1.xx-2xx firmwares.

Privilege escalation vulnerability on MitraStar routers

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot

Macally WIFISD2

A fully implemented kernel exploit for the PS4 on 5.05FW

Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW

This is a one-time signature verification bypass. For persistent signature verification bypass, check…

Console jailbreak demo that executes native functions inside the Switch 2 filesystem process via SmileBASIC, verifies results, and restores original…

WebKit+Kernel exploit chain for all PS Vita firmwares

MikroTik remote jailbreak for v6.x.x

QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)

Self-contained Python PoC exploiting the MikroTrick SSH chain (CVE-2026-86060, CVE-2026-67279) to gain unauthenticated full admin access on MikroTik…

A PoC of the CVE-2024-56426 vulnerability.