An A12/A13 SecureROM exploit

WIP AirPods client for linux, extremely dirty and in early development.

MiniJVM is a stupidly simple JVM written in C for reverse-engineering purposes.

ZXIC/Sanechips BootROM exploit

Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code

Linux kernel source tree for HiKey, HiKey960 and HiKey970

toybox

MediaTek bootrom exploit

Payloads for MediaTek Download Agents

system3, Samsung's worst nightmare for a 3rd time!

Simple secondary bootloader for Ingenic SoCs

Goodies for the serialport crate (and no_std too)

We had a problem - and now, publicly, a solution :)

uclibc shim for Ingenic SDK compatibility

notes about reverse engineering marvell HDD SoCs and booting Linux on them

Bootloader unlock PoC for the Nokia 2.2 (wasp)

Import Device Tree Information onto your Ghidra memory map

Open source minimal BL1 replacement for Exynos9830 (only handling USB boot cases)

Open source implementation of the blob running on the Cortex M0 (stage 1)

Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website.

Simple tool to extract individual LDFWs from a whole LDFW image

A minimalistic initrd implementation

Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website.

technical reference for non-Kindle Amazon devices

Sanechips ZX297520V3 download protocol

SSH based reverse shell

Python package for wrapping applications inside a tailored interactive shell

das u-boot with patches for mt6878 soc