Firmware Analysis Tool
THE REPOSITORY DIRECTORY
Firmware
Browse 228 repositories with project descriptions, upstream links, and license information.
About this index
This published selection contains 3,500 captured repository records and 3,309 browsable entries. The 187 scope-excluded entries and 4 whose upstream repository is no longer available remain in the published JSON.
This repository index is discovered automatically and unreviewed. Categories come from metadata; descriptions have AI-assisted translations. Stars and last-push months are collection-time snapshots.
228 repositories
Selection published: 2026-10-20 UTC
UEFI firmware image viewer and editor
EMBA - The firmware security analyzer
Reverse Engineering Sony Digital Cameras
Extract files from any kind of container formats
Platform for emulation and dynamic analysis of Linux-based firmware
OFRAK: unpack, modify, and repack binaries.
A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
Firmware security research platform combining binary analysis, taint tracing, and emulation across IoT, edge AI, mobile devices, and robotics.
Firmware Analysis and Comparison Tool
Intel Engine & Graphics Firmware Analysis Tool
IDA plugin and loader for UEFI firmware analysis and reverse engineering automation
Hacking & Reverse Engineering RTL960x-based xPON ONTs to suit your OLT
Hex Viewer/Editor/Analyzer compatible with Linux/Windows/MacOS
Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis
FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares
Read-only mirror of the official repo at git://sigrok.org/pulseview. Pull requests welcome. Please file bugreports at sigrok.org/bugzilla.
Recognize cpu instructions in an arbitrary binary file
IDA Python Embedded Toolkit -- IDAPython scripts for automating analysis of firmware of embedded devices
Raw binary firmware analysis software
Python core of avatar²
a tool to analyze filesystem images for security
Ghidra utilities for analyzing PC firmware
The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, and Information Security professionals with conducting firmware security assessments.
Discovering vulnerabilities in firmware through concolic analysis and function clustering.
IoT firmware identification and extraction
Ghidra analyzer for UEFI firmware.
EMBArk - The firmware security scanning environment
A firmware base address search tool.
IoT static scanner for secrets, SBOM, CVEs and more.
Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules
Tool for decrypting the firmware files for Samsung SSDs
Infiltra Firmware is an open-source firmware for wireless security testing, network analysis, and hardware hacking. FLASH IT BELOW USING OUR WEB FLAHSER!
D-Link firmware decryption PoC
A tool for firmware cartography
122 AI skills for reverse engineering: malware analysis, software reversing, firmware and embedded systems, protocol reversing, mobile apps, unpacking and deobfuscation, software cracking, vulnerability research, managed code, forensics and intelligence, and CTFs.
A Universal MCU Firmware Emulator for Dynamic Analysis without Any Hardware Dependence.
Guide for patching AMI Aptio V UEFI firmware to circumvent Secure Boot checks
Reverse Engineering Framework for the Polyend Tracker
Open-source reverse engineering and firmware development for the FNIRSI 2C53T oscilloscope/multimeter/signal generator
No description supplied by the upstream repository.
Open-source emulator + analysis toolkit for Nokia DCT3 phones (3310/3410/5210/8210/8250/8850…). Boots real firmware in the browser (WASM) and a native SDL GUI. Bring-your-own firmware — none included. GPL-2.
a set of scripts and tools for various firmware analysis tasks
Exynos Modem / Shannon baseband firmware loader for IDA Pro 8.x/9.x
Reverse engineering and unofficial documentation of LinkPi ENC series (ENC1/ENC5/ENC9) and TBS 2603SE video encoders based on the F3520D platform — hardware analysis, firmware internals, streaming fixes, and hidden features.
System Management RAM analysis tool
IoT Firmware Deep Analysis: Automated reverse engineering and vulnerability discovery for IoT firmware binaries.
A distributed fuzzing management framework
DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis
Presented hardware reverse engineering workshops since 2019
binwalk for Windows
A faster firmware base address scanner.
Finds the base address of a firmware by comparing string addresses with target pointer addresses
Firmware format analysis for TP-Link firmwares with the version 3 header (0x03000000)
Fortinet Firmware decryption and analysis tools
iPod RetailOS firmware research — decryption, analysis, and wInd3x Classic support patch
iOS 26.3 activation lock research -- 31 firmware vulnerabilities + VU#346053 BAA injection PoC
Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.
Firmware analysis gone wild.
Interactive static pattern discovery tool to locate structures from frequent patterns
LLMs for autonomous reasoning and analysis of firmware
Reverse engineering of the Insta360 Link webcam firmware: UVC extension-unit control protocol, gesture pipeline, gimbal/PTZ command path, and firmware container format
A human-readable matching decompilation of the Pokéwalker firmware.
Reverse engineering notes, firmware analysis, and extracted content from the Marstek Venus E plug-in home battery
Decrypt and extract voice guidance MP3 prompts from Sony WH-1000XM4 encrypted voice packs. AES key extracted via Bluetooth firmware dump of the Airoha MT2811 SoC.
Samsung QN90B and QN90F root
MDB-USB-adapter: An open-source hardware and software solution for converting Multi-Drop Bus (MDB) protocol to USB. Designed for vending machine integration, device emulation, and data analysis. Includes schematics, firmware, and documentation. Licensed under CERN Open Hardware License.
Extract information and files from Reolink firmwares.
Firmware reverse engineering of the Elgato Cam Link 4K (USB 0fd9:0066): vendor HID protocol, SPI flash layout, FX3 and ECP5 firmware formats, update path, security analysis, and an independent flashing tool.
N64 Graphics data detection and analysis
Docker container with all extra tools installed to get the most out of binwalk
Samples of Avatar firmware analysis (including NDSS'14 cases)
FETB : Take URL of File For Analysis using File + ExifTool + Binwalk Commands
Additional material for our paper "Breaking all the Things - A Systematic Survey of Firmware Extraction Techniques for IoT Devices" (CARDIS 2018)
Astell&Kern iRiver LS150 SPI firmware dump + telnet access
Independent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws.
A Claude Code skill for comprehensive UEFI/BIOS firmware security vulnerability analysis. Distills years of BIOS security research expertise into reusable AI capabilities, covering firmware image parsing, deep decompression, microcode extraction, certificate auditing, and final report generation.
*Features:* *Real-time WiFi threat detection* *4 targeted counter-attack methods* (Karma poisoning, Evil twin disruption, etc.) - *Threat monitoring* - packet analysis - *Coreymillia & GitHub Copilot Created* - *Based on:* Bruce firmware by @pr3y & team - *Inspiration:* Evil-Cardputer by @7h30th3r0n3 - Feel free to use, modify, and distribute
This tool provides detailed analysis of changes between iOS firmware versions and their potential impact on device functionality.
An open-source AI assisted firmware analysis tool
Mimojas Firmware Toolkit for unpacking and analysis firmware images
Python utility for dumping and patching SPI firmware to remove supported BIOS and UEFI passwords.
A BinaryNinja loader plugin for MTK Preloaders and Little Kernels
Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.
A prototype of taint-style vulnerablity discovery method in embedded firmware (SinkTaint), a precise a novel taint-style vulnerability discovery method by employsing backtracking and constraint analysis to achieve high precision.
Reverse analysis and documentation of VEX Robotics internal firmware and APIs.
Analysis of a Hanover Displays flip-dot display firmware
Deterministic firmware-to-exploit evidence engine. Drop a firmware blob, get hash-anchored findings with SARIF + CycloneDX SBOM + verified exploit chains.
Next-Generation Firmware Analysis Toolkit. A hybrid Rust/Python toolkit for deep firmware analysis, extraction, and vulnerability discovery.
Reverse engineering Lenovo IdeaPad Gaming 3 15ARH05 firmware: BIOS extraction, AMD PSP analysis, QEMU tracing, IFR recovery, and hidden Advanced menu research.
Multi-tool RF analysis firmware for M5Stack Cardputer - WiFi scanner, BLE scanner, ultrasonic detector, signal mapper, and tracker detector
FWRF is a open source tool for firmware web-side analysis.
Analysis and firmware suggestion for cheap chinese USB2CAN adapter based on STM32F103
Reverse engineering the Shure MV7: vendor HID console, PSoC 4 firmware, ADAU1761 SigmaDSP, and the firmware update protocol
UEFI firmware analysis & research on known vulnerabilities in early boot components
Notes and Python tools for the Steam Controller 2 (Triton): HID reports, the firmware-update protocol, and firmware-blob analysis.
DIRK is open-source Red/Blue Team firmware for the M5Stack Cardputer ADV, featuring dual-band Wi-Fi with LAB5 MonsterC5, Bluetooth analysis, LoRa and IR tools, GPS wardriving via the official M5Stack LoRa/GPS Cap, and authorized security-testing labs.
Firmware analysis and modification tools. Bypass security restrictions, install custom launchers, and safely modify locked-down Chinese projector devices with comprehensive backup and recovery scripts.
Hacking TrendChip Firmware FG824CD (ADSL modem/router *****v4)
Advanced offline firmware triage and analysis tool for routers, IoT devices, DVRs, IP cameras, and embedded Linux firmware.
Packaged Windows version of binwalk: https://github.com/ReFirmLabs/binwalk/releases/tag/v3.1.0
LLM-powered automated reverse-engineering engine for vendor-abandoned hardware and software
“Full SAAB/GM diagnostic suite with Python engine, CAN tools, GDS2/Tech2Win integrations, SPS workflows, firmware packages, drivers, VM environments, documentation, and automation scripts. Includes UI/TUI modules, J2534 support, data analysis tools, and complete diagnostic/tuning workflows.”
OnePlus Watch 3 (OPWWE251) Firmware Analysis, DTS Dump & Kernel Symbols
A firmware analysis tool for lightweight IoT firmware
Integrates Firmadyne into FACT
Static analysis and reverse engineering tool for iOS/macOS firmware files built for my final-year University project
immune Guard agent application
AI-assisted embedded and IoT development platform for hardware design, firmware generation, and local project analysis.
Comprehensive pentest and reverse engineering guide for PAX Linux-based Point of Sale (PoS) merchant applications — firmware analysis, network interception, and app reversing.
Static firmware analysis - for symbol files generated by puncover and as an experiment to do it all in-browser on just an debug ELF file
Review, resources, and pre-lab exercises for the SANS SEC556 IoT Penetration Testing course, covering hardware hacking, firmware analysis, wireless protocols and SDR.
DMA Lab - Hardware-level anti-cheat research, firmware configs, FPGA guides and PCILeech resources
Explore embedded & IoT security: secure firmware, device hardening, encryption, and vulnerability analysis. Practical examples for secure IoT development.
Accelerating Command Injection Vulnerability Discovery in Embedded Firmware with Static Backtracking Analysis
Platform: Windows/Mac/Linux. Scripting: Various, no restrictions; customized as needed. Tasks: Desktop checks, software cracking, AV evasion, privilege execution, firmware read/write, password checks, Wi-Fi scans, cloud security, log analysis, NLP, and data analysis in humanities/social sciences.
Analysis of the update of TPM firmware
Steganography tool that extracts data from images
Purple is a dual-mode Cardputer ADV firmware for Red Team and Blue Team field workflows, combining wireless recon, RF visibility, GPS tools, IR/NFC utilities, and on-device analysis in a compact handheld platform.
Firmware extraction toolkit - unpacks and enumerates embedded images for IoT security analysis.
(Undergraduate Capstone Project) Yasat - Yet Another Static Analysis Tool to detect cryptographic API misuses in firmware
writeups! #JUSTCTF
A free (as in freedom) AI assisted firmware analysis tool
Automatic Firmware Analysis of Embedded Linux Devices as Preparation for Security Testing / Fuzzing
Most recent PS4 symbols by firmware for analysis and convenience
A security-oriented Python script with bulk image analysis and security features such as metadata scrubbing, image file analysis, GPS data check, and file renaming.
The firmware for the Wyze Cam V3 is hosted on the website of its manufacturer for anyone to download. We plan to download the firmware and perform a variety of analysis techniques on it until we have a solid understanding of the device and/or have identified potentially exploitable vulnerabilitie
Homebrew tap for moria (firmware identification/extraction) and mithril (firmware content analysis)
Schneider Electric firmware
Zero-G Reverse Engineering Anything & Verified Safe Rust Reconstruction for Gemini 4 Argon + Google Antigravity 2.0 (4-Mount Recon Kits, Whole-Subgraph Extraction, 10,000-Vector Differential Parity Referee)
unpack and repack hikvision R2 firmware files
It is a simple ecos ROMFS unpacker for forensics and firmware analysis needs
VS Code extension for Intel HEX & Motorola SREC memory exploration and editing
Host-side extraction and analysis toolkit for MHI2/MHI2Q/MH2P firmware packages
Reverse engineering and read-only tools for the M-VAVE ANN BlackBox: firmware, USB Audio, BLE/M-EFCS, OTA, DSP routing, and runtime internals.
Firmware Region Diff
Complete reverse engineering of the Quadzilla Adrenaline diesel tuner — firmware decryption, BLE protocol, 117 parameters, decompiled code. Done entirely by AI.
ArubaOS 8.13.2.0 pre-auth attack surface research. XXE+SSRF, ICMP reflection, buffer over-read, hardcoded credentials — all submitted to HPE Bugcrowd, marked N/A. No fixes issued.
Extraction and static analysis of IoT devices firmware as project for the "Information Security M" course at the University of Bologna (UNIBO)
AI-native Code-OSS workbench for safety-critical firmware. DO-178C evidence, MISRA, CBMC, CodeQL, measured MC/DC and hardware tooling in one window — with compliance runs that record what was actually measured, and claim nothing else.
Potential Swiss Army Knife Framework for IoT/Hardware Hacking/Vulnerability Research
IoTwizz - A modular IoT security testing framework for hardware hackers, firmware analysts, and IoT security researchers. Features AI-powered assistant, UART debugging, firmware analysis, JTAG/SWD scanning, SPI flashing, and protocol fuzzing.
Fast and reliable software to extract different sections / partitions from firmware images.
Zyxel super-admin credential exposure write-up across CPE/ONT/LTE/5G firmware, with an adapted VMG8825-B50B genpass lab.
20 hands-on security engineering labs covering attack surface discovery, reverse engineering, protocol analysis, fuzzing, CVSS scoring, and responsible disclosure.
Hardware-faithful MAME-based emulator for Millennium-compatible Z180 payphone terminals. Boots real firmware on a cycle-accurate Z180 with a full device tree and a byte-transparent host bridge. Companion to the CoinLine Payphone Management Platform.
ESP32-based UART guardian and Python tooling for safe, controlled reverse engineering of MStar MBoot embedded systems.
post-extraction firmware triage for ELF files
Binwalk docker image with the cpu_rec plugin for CPU instruction set identification.
Firmware dumps for specialized OEM and carrier hardware. Research, analysis, and legacy device preservation.
Static pattern discovery tool to locate structures from frequent patterns and understand file layout
Tool to unlock PVR, Netflix and hidden features on Smart TVs. Includes firmware editor and UART parser ,reapply HW/SW profiles via USB. Supports Vestel-based mainboards.
Interprocess communication analysis tools for firmware
intelmetool fork adds missing PCI IDs from 8th gen through Pnthr Lake. Upstream has incomplete platform coverage from CNL onwards — ICL completely absent, CML/TGL/ADL/RPL/MTL/ARL/PTL all missing. Adds entries to both platform scan and MEI interface tables. Corrects wrong ADL-S and RPL-S device IDs.
Tozed P11IDU (MT7628AN): stock firmware dump, an authenticated RCE in the vendor web UI, official OpenWrt flash, and a verified single-radio NAT Wi-Fi repeater. Full write-up and configs by Nipun Methmal.
Reverse-engineering tools for ZTE H188A/H288A firmware, raw NAND, JFFS2 webfs, HTTPD Lua bytecode, and hardcode analysis
REPI: a local agent platform for reverse engineering, penetration testing, and digital forensics
A technical security analysis and forensic audit of the ZTE ZXHN F670L ONT firmware, focused on attack vectors, data extraction, and embedded-device hardening.
analysis of reolink firmwares
CVE-2026-15469 — Hard-coded RSA-512 mesh group private key in TP-Link Deco XE75/XE5300/WE10800 (CWE-321). Advisory, analysis & PoC methodology (EN/KO).
Firmware analysis and IoT security research toolkit for authorized extraction, UART/JTAG workflows, and vulnerability triage.
Reverse engineering and experimental tooling for the Seeed Studio MR60BHA2 / ADT6101P 60 GHz FMCW radar: coherent range-Doppler streams, guarded firmware patching, and ESP32-C6 web visualization.
Local firmware security research workbench: isolated analysis, evidence-backed findings, SBOMs, release comparison and optional AI assistance.
Python tool for firmware diffing using SHA256 and ssdeep fuzzy hashing to detect modified, added, and deleted files between firmware versions
Go + YARA-X aggregator and scan engine: collects 18k+ public YARA rules and scans engineering workstations (EWS) and firmware dumps for ICS/OT and commodity malware
shake out hardcoded keys, certificates and other artifacts from firmware
EMBA is a firmware security analysis tool. I created a module for EMBA (p51 mustang binwalk extractor) that checks if the firmware file system being analyzed has a deep max depth that can benefit from an optimized extractor (>50 levels deep), leverages GPUs for processing speed and uses parallelization for file operations.
MCP reverse engineering tools
IoT Firmware Vulnerability Hunting Skill
Cyber analysis tools used in different domains of cybersecurity.
The Cell/SPU RE tooling behind 'Execution Is Not Extraction' — SPU emulator, sound SLEIGH decompiler, offline lv1 executor, isolation harness. Tooling only.
Forensic & architectural research into Apple's Software Update RAMDisk (macOS Monterey 21G115 x86_64), ramrod restore pipeline, APFS SSV sealing, and firmware Option ROMs.
Reverse engineering, firmware analysis, and experimental mods for SmartBox HW501 USB CarPlay dongles sold on AliExpress.
Python bindings for Binwalk v3, built with PyO3 and maturin.
a tool to find individually obfuscated or encrypted filesystems in firmware dumps
TP-Link PG2400P reverse engineering
UAS security toolkit for Parrot OS covering SDR/RF analysis, Remote ID and DJI DroneID, MAVLink/DroneCAN, GNSS, counter-UAS awareness, firmware analysis, and flight-controller hardware workflows.
Full security case file: Mercusys MW325R v2 recon, UPnP demo, modern panel, firmware forensics (own device)
Evidence-first Samsung Tizen TV security research: reversible debloating, firmware analysis, validated Remote PC/CIFS UID-0 injection, and hardening.
Reverse engineering and protocol emulation of a closed smart battery system. Hardware and firmware implementation replicating original authentication behavior at embedded level.
Automated IoT Firmware Security Assessment Platform with vulnerability detection, risk scoring, remediation guidance and security reporting.
Live reports produced with the emua firmware analysis software. Each report takes over 3 hours of machine analysis and shows the locations of risky functions such as system and strcat in binaries, helping select binaries and function-tracing paths for further analysis.
Analyst-assisted tooling for reverse engineering orchestration-heavy embedded firmware.
Unofficial Ubuntu/Debian .deb package for sasquatch, a SquashFS firmware extraction tool
Firmware-grounded research into automatic content recognition in smart TVs and streaming devices
Binwalk-style implementation in pure Java
This programm is used to auto discover vulnerabilities from extracted IoT device firmware
Recover TP-Link's renumbered Lua 5.1 opcode table, then convert and decompile the LuCI Lua bytecode inside their router firmware. Derived and verified on an Archer AX21 (US) V5.46, firmware 1.1.2.
A lightweight, custom Python GUI forensic utility featuring signature scanning, entropy randomness analysis, and file carving capabilities.
Production-minded MCP servers for AI agents — passive website security audit, RSS digest, and firmware recon. Pure-stdlib cores, an SSRF guard red-teamed against the full public bypass corpus, 42 offline tests.
Powering Hardware, Radio, Web, and IoT Security Assessments Trilokya OS is a powerful, security-focused operating system designed for penetration testers, security researchers, and ethical hackers specializing in hardware security, radio frequency (RF) analysis, web application security, and IoT penetration testing.
Reverse engineering the firmware of my Jensen CAR710W head unit to locate and modifiy UI assets such as boot animations and backgrounds.
Offline config tool + protocol spec for the GAMEKB-K17 / HCY-K017 macropad (USB 0816:0220): remaps, firmware macros, per-key RGB
Windows BIOS/UEFI backup tool and Nick Squires BIOS ROM recovery service. All Toughbook models welcome; other brands assessed. Public build has no password-hash extractor.
Independent research and Linux/Rockbox tooling for the Sony NW-A306.
Zero-dependency IoT and embedded firmware unpacker, multi-format magic carver, and static vulnerability auditing engine in pure Rust.
Docs-only public-safety showcase for the GoblinFlash firmware evidence workflow.
Recover unencrypted TP-Link firmware for analysis — an independent Python reproduction of the tpbreak / WatchfulIP RSA-PSS-salt decryption technique.
Web-based interactive static pattern discovery tool to locate structures from frequent patterns
A Windows tool for viewing and editing Mitsubishi elevator HEX firmware, with address navigation, byte editing, file comparison, and validation.
Read-only PSdZData XML segment extraction and KIS metadata inspection tools
Reverse-engineering ZWO ASIAIR firmware with REA - findings, notes and tooling (no vendor firmware redistributed)
A toolkit for extracting and documenting the data Nintendo Switch 2 accessories expose over USB, with a community accessory database.
No description supplied by the upstream repository.
Fujitsu Quaderno research, firmware notes, and mount tooling
Multi-Agent Collaborative Embedded Firmware Defect Prediction and Automated Repair System
Youdao Dictionary Pen S6 (YDPS6-1) firmware analysis notes — ADB auth, OTA security, WebSocket 9307, setAdbEnable call chain. Read-only research archive, no exploits.
Professional interactive Firmware Audit Tool for static security analysis. Detects hardcoded credentials, private keys, and shell backdoors in firmware filesystems.
rooting a $30 camera.
ESP32 firmware inspector and Xtensa symbol matcher
Professional Firmware Crash Dump Analyzer written in C and Python with CRC verification, stack tracing, symbol resolution, crash signature generation, and crash statistics dashboard.
Reproducible pipeline that turns gateway firmware images into facts about the OpenWebNet protocol — frame formats, code tables, and gateway behaviour.
Scripts to probe a K2Plus for analysis and to generate filesystem snapshots for review.
acccessing the root shell of tp-link router (TL-WR850n) via UART and a bit of reverse engineering
Firmware security research on public targets: patch-diff case studies of router command injection (DrayTek and D-Link n-days), a reusable triage, diff and report toolchain, and a MAVLink security test harness for PX4/ArduPilot SITL.
A practical walk through SWD (Serial Wire Debug) reconnaissance, memory mapping, and firmware acquisition; because debug interfaces rarely keep secrets for long :)
A practical walk from the PCB to Root Shell, because turns out 4 copper pads had a lot to say :)
.FirmEx is a unified framework for embedded device security that combines automated firmware extraction with real-time sensor anomaly detection. This work was accepted at IEEE Intelligent Computing and Systems at the Edge (ICEEdge) Student Forum 2025
Audit extracted IoT firmware for hardcoded credentials, default accounts, and outdated components
RSS-Webs / GoAhead auth bypass and configuration leak. Vulnerability research affecting Ralink/MediaTek SDK router firmware across multiple vendors
Defensive IoT firmware static analysis and AFL++ fuzzing lab
Integrated suite for accelerating Linux hardware driver development through automated capture, ML-assisted firmware analysis, and community-driven knowledge sharing — making reverse engineering 10x faster and accessible beyond kernel specialists.
Reverse engineering and Linux tools for the HONOR MagicBook built-in NFC tag (Fudan FM11NT082C / ACPI NTAG0001): variant detection (NTCI vs NTCZ), safe NDEF backup and write
A package of tools for decrypting, signature switching, decompiling, and extraction of TJC and Nextion Firmware .tft files
Modular IoT Firmware Security Scanner with CVE and Compliance Analysis
Next-gen firmware security analysis workbench for CLI, web, and desktop. Scan firmware, detect secrets, generate SBOM/CVE candidates, compare versions, and explain risk with Firmware Risk DNA.
Open technical handbook and reproducible preservation research for Bose SoundTouch devices, firmware, local protocols, playback, multiroom and interoperability.
Reverse engineering and full security audit of a legacy Broadcom BCM96338 router. Features firmware exfiltration, SquashFS analysis, and DES hash cracking.