A fully reverse-engineered, open-source PCB recreation of the Nintendo Wii, designed as a foundation for portable console designs.

Create an Actions list for pixel-libperfmgr from MTKPower hints

Unsigned code loader for Exynos BootROM

The smallest public printf implementation for its feature set.

Bluetooth classic library for embedded devices

ZXIC/Sanechips BootROM exploit

MediaTek bootrom exploit

A Mac OS X bootloader for the Nintendo Wii.

Open reimplementation of Google's Widevine Content Decryption Module for browsers

Decryptor for Exynos9830 firmware portions

Simple tool to extract individual LDFWs from a whole LDFW image

Open source implementation of the blob running on the Cortex M0 (stage 1)

Open source minimal BL1 replacement for Exynos9830 (only handling USB boot cases)

Decrypted versions of the major parts of the Exynos9830 (990) bootchain.

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

WIP bl2_ext thingy for ARMv8 MTK devices

StarStruck is an IOS reimplementation intended to learn about IOS/Starlet. It started as a mini ( by Team Twiizers ) fork, but resulted in a full IOS rewrite

[WIP] Exynos USBDL Docs, accepting pull requests

Exploit for an Audible vulnerability chain targeting Kindle < 5.18.1

Automatically patches FireOS boot images to expose a rooted shell

das u-boot with patches for mt6878 soc

A small userspace utility to translate the DualSense HID API to the DualShock 4 HID API.

MiniFB is a small cross platform library to create a frame buffer that you can draw pixels in

Software simulation for Android hardware-backed key pairs with key attestation

Fuzzing some lk binaries from some interesting phones...

A tool for interfacing with Sony headphones on Linux