{ "category": "firmware", "count": 228, "kind": "repository-category", "labels": [ "Firmware", "固件" ], "note": "Automatically discovered repository index, unreviewed. Stars, licenses and last-push times are collection-time snapshots.", "note_zh": "自动发现的仓库索引，未审核。星标、许可证与最近推送时间均为采集时快照。", "page_url": "https://awesomerea.org/browse/firmware/", "page_url_zh": "https://awesomerea.org/zh/browse/firmware/", "repositories": [ { "category": "firmware", "description_en": "Firmware Analysis Tool", "description_language": "bilingual", "description_zh": "固件分析工具。", "full_name": "ReFirmLabs/binwalk", "id": "scan-14434734", "license": "MIT", "observed_at": "2026-10-16T07:14:45.581011Z", "pushed_at": "2026-08-11T15:27:34Z", "readme_sha256": "87b8277efbbbdcdfcaa6518c1d3efed071617214432c81400b9e67ee093a11d4", "readme_url": "https://github.com/ReFirmLabs/binwalk/blob/master/README.md", "stars": 14491, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/ReFirmLabs/binwalk", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "UEFI firmware image viewer and editor", "description_language": "bilingual", "description_zh": "UEFI 固件镜像查看与编辑工具", "full_name": "LongSoft/UEFITool", "id": "scan-13405986", "license": "BSD-2-Clause", "observed_at": "2026-10-16T10:47:47.227675Z", "pushed_at": "2026-07-29T01:21:27Z", "readme_sha256": "832d08985503bd74070ca56502531caef9ecb32fe97999efd04b47863fab76bf", "readme_url": "https://github.com/LongSoft/UEFITool/blob/new_engine/README.md", "stars": 5752, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/LongSoft/UEFITool", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "EMBA - The firmware security analyzer", "description_language": "bilingual", "description_zh": "EMBA：固件安全分析器。", "full_name": "e-m-b-a/emba", "id": "scan-290152313", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:36.628254Z", "pushed_at": "2026-10-12T10:34:33Z", "readme_sha256": "7b676c6f059cc82536bd1bf81e5b3503843fa2dda92b98f44b0304252f266766", "readme_url": "https://github.com/e-m-b-a/emba/blob/master/README.md", "stars": 3712, "targets": [ "binary", "firmware" ], "topics": [ "artificial-intelligence", "binary-analysis", "embedded-linux", "embedded-systems", "firmware", "firmware-analysis", "firmware-tools", "hacking", "infosec", "iot", "linux", "penetration-testing", "pentesting", "reverse-engineering", "sbom", "security", "security-tools", "static-analyzer", "vulnerability-scanner", "vulnerability-scanners" ], "url": "https://github.com/e-m-b-a/emba", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse Engineering Sony Digital Cameras", "description_language": "bilingual", "description_zh": "Sony 数码相机逆向工程。", "full_name": "ma1co/Sony-PMCA-RE", "id": "scan-35510548", "license": "MIT", "observed_at": "2026-10-16T01:35:27.281840Z", "pushed_at": "2024-07-27T23:58:31Z", "readme_sha256": "779f36d8cf20c878ff8245d2d69fab1fcf0f77c2c5a58f00dddbb99c44379fa3", "readme_url": "https://github.com/ma1co/Sony-PMCA-RE/blob/master/README.md", "stars": 2916, "targets": [ "firmware", "protocol" ], "topics": [], "url": "https://github.com/ma1co/Sony-PMCA-RE", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Extract files from any kind of container formats", "description_language": "bilingual", "description_zh": "从各种容器格式中提取文件。", "full_name": "onekey-sec/unblob", "id": "scan-374917397", "license": "MIT", "observed_at": "2026-10-16T07:14:45.071257Z", "pushed_at": "2026-10-15T21:30:27Z", "readme_sha256": "6544d60f22f7b521f8705b3bba5d47a50e428ccbd3359542708dbd009ccf3716", "readme_url": "https://github.com/onekey-sec/unblob/blob/main/README.md", "stars": 2577, "targets": [ "firmware" ], "topics": [ "archive", "compression", "extraction", "filesystem", "python" ], "url": "https://github.com/onekey-sec/unblob", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Platform for emulation and dynamic analysis of Linux-based firmware", "description_language": "bilingual", "description_zh": "用于仿真和动态分析基于 Linux 的固件的平台", "full_name": "firmadyne/firmadyne", "id": "scan-51781408", "license": "MIT", "observed_at": "2026-10-16T10:47:49.004394Z", "pushed_at": "2024-07-21T00:21:54Z", "readme_sha256": "1ed01f338227e5198026236242f191897d67f3dd6b6c1e01512a67fd59991f4f", "readme_url": "https://github.com/firmadyne/firmadyne/blob/master/README.md", "stars": 2114, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/firmadyne/firmadyne", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "OFRAK: unpack, modify, and repack binaries.", "description_language": "bilingual", "description_zh": "OFRAK：解包、修改并重新打包二进制文件。", "full_name": "redballoonsecurity/ofrak", "id": "scan-522646351", "license": "NOASSERTION", "observed_at": "2026-10-16T07:14:45.491226Z", "pushed_at": "2026-08-21T16:27:13Z", "readme_sha256": "8d1d972bb1c7a8739f63667c856b00c02a77afbddf9ea5bd4d233d0f5fb2556d", "readme_url": "https://github.com/redballoonsecurity/ofrak/blob/master/README.md", "stars": 2080, "targets": [ "binary", "firmware" ], "topics": [ "ctf", "firmware", "firmware-tools", "hacktoberfest", "repacking", "reverse-engineering", "unpacker" ], "url": "https://github.com/redballoonsecurity/ofrak", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)", "description_language": "bilingual", "description_zh": "通过提取内核符号表（kallsyms），从原始内核恢复可完整分析的 .ELF 文件的工具。", "full_name": "marin-m/vmlinux-to-elf", "id": "scan-230286627", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:18.253001Z", "pushed_at": "2026-10-15T20:21:25Z", "readme_sha256": "796a2a46e5bb912d4d173213e407c308c79ff3077c6e59f16295c0f7ad3561e6", "readme_url": "https://github.com/marin-m/vmlinux-to-elf/blob/master/README.md", "stars": 1832, "targets": [ "binary", "firmware" ], "topics": [ "elf", "firmware-analysis", "linux", "linux-kernel", "reverse-engineering", "vmlinux" ], "url": "https://github.com/marin-m/vmlinux-to-elf", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware security research platform combining binary analysis, taint tracing, and emulation across IoT, edge AI, mobile devices, and robotics.", "description_language": "bilingual", "description_zh": "结合二进制分析、污点追踪和模拟执行的固件安全研究平台，覆盖物联网、边缘 AI、移动设备和机器人。", "full_name": "attify/firmware-analysis-toolkit", "id": "scan-71746038", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:39.162998Z", "pushed_at": "2026-09-26T04:56:59Z", "readme_sha256": "c466bc10431e4681236c05b4a0f7203cb73a93ec71ebcad141afe41dab934b14", "readme_url": "https://github.com/attify/firmware-analysis-toolkit/blob/master/README.md", "stars": 1615, "targets": [ "app", "binary", "firmware" ], "topics": [ "binary-analysis", "firmware", "firmware-analysis", "firmware-security", "firmware-tools", "iot", "iot-security", "iot-security-tools", "reverse-engineering", "security", "vulnerability-scanner" ], "url": "https://github.com/attify/firmware-analysis-toolkit", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware Analysis and Comparison Tool", "description_language": "bilingual", "description_zh": "固件分析与比较工具。", "full_name": "fkie-cad/FACT_core", "id": "scan-104088122", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:18.304471Z", "pushed_at": "2026-10-15T09:37:10Z", "readme_sha256": "03e1a96a73083d15f756f2780adc0ab1317333e3a5682614d5111061ca35a170", "readme_url": "https://github.com/fkie-cad/FACT_core/blob/master/README.md", "stars": 1468, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "firmware-tools", "security", "security-automation" ], "url": "https://github.com/fkie-cad/FACT_core", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Intel Engine & Graphics Firmware Analysis Tool", "description_language": "bilingual", "description_zh": "Intel Engine 与图形固件分析工具", "full_name": "platomav/MEAnalyzer", "id": "scan-66204703", "license": "BSD-2-Clause-Patent", "observed_at": "2026-10-16T10:47:49.107701Z", "pushed_at": "2026-09-06T12:11:58Z", "readme_sha256": "8623810e1716193744243ed96c8956b72a75c9f863db89af53c323cc67ae6a8a", "readme_url": "https://github.com/platomav/MEAnalyzer/blob/master/README.md", "stars": 1335, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/platomav/MEAnalyzer", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "IDA plugin and loader for UEFI firmware analysis and reverse engineering automation", "description_language": "bilingual", "description_zh": "用于自动化 UEFI 固件分析与逆向工程的 IDA 插件和加载器。", "full_name": "REhints/efiXplorer", "id": "scan-276023403", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:30.803797Z", "pushed_at": "2026-10-12T14:32:52Z", "readme_sha256": "38ac14d65e7856694b01a966be58e575ddfa892e34183e803720c4a1f891e35e", "readme_url": "https://github.com/REhints/efiXplorer/blob/master/README.md", "stars": 1138, "targets": [ "binary", "firmware" ], "topics": [ "efi-guid", "efi-protocols", "firmware", "ida-loader", "ida-plugin", "ida-pro", "reverse-engineering", "uefi", "uefi-firmware-analysis" ], "url": "https://github.com/REhints/efiXplorer", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Hacking & Reverse Engineering RTL960x-based xPON ONTs to suit your OLT", "description_language": "bilingual", "description_zh": "破解和逆向分析基于 RTL960x 的 xPON ONT，使其适配你的 OLT。", "full_name": "Anime4000/RTL960x", "id": "scan-339665109", "license": "Unlicense", "observed_at": "2026-10-16T01:35:31.167500Z", "pushed_at": "2026-06-18T08:33:06Z", "readme_sha256": "f7e2a65fd5d2e20d5fef48910a583fa94b1a7b6e0bb9ef8d6a2fbeec159a8f5e", "readme_url": "https://github.com/Anime4000/RTL960x/blob/main/README.md", "stars": 1053, "targets": [ "firmware" ], "topics": [ "busybox", "firmware", "gpon", "gpon-stick", "hacking", "lantiq", "olt", "onu", "realtek" ], "url": "https://github.com/Anime4000/RTL960x", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Hex Viewer/Editor/Analyzer compatible with Linux/Windows/MacOS", "description_language": "bilingual", "description_zh": "兼容 Linux、Windows 和 macOS 的十六进制查看器、编辑器与分析器。", "full_name": "gcarmix/HexWalk", "id": "scan-646417137", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:36.865100Z", "pushed_at": "2026-09-13T17:08:46Z", "readme_sha256": "2a318ab221eba2c9c267c1921a11741831cba7def7541d9e4bc671d0f4342633", "readme_url": "https://github.com/gcarmix/HexWalk/blob/main/README.md", "stars": 1027, "targets": [ "firmware" ], "topics": [ "binwalk", "gui", "hexeditor", "reverse-engineering" ], "url": "https://github.com/gcarmix/HexWalk", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis", "description_language": "bilingual", "description_zh": "面向动态分析的物联网固件大规模模拟执行研究。", "full_name": "pr0v3rbs/FirmAE", "id": "scan-297554727", "license": "MIT", "observed_at": "2026-10-16T07:14:45.300901Z", "pushed_at": "2026-06-24T15:34:02Z", "readme_sha256": "849dd5512bd5bf93e983638db4833a79e451ce59c63d6415f3e0a9fc1247f143", "readme_url": "https://github.com/pr0v3rbs/FirmAE/blob/master/README.md", "stars": 949, "targets": [ "firmware" ], "topics": [ "analysis", "arbitration", "emulation", "firmware", "fuzzing" ], "url": "https://github.com/pr0v3rbs/FirmAE", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares", "description_language": "bilingual", "description_zh": "FirmWire 是一个全系统基带固件仿真平台，用于对智能手机基带固件进行模糊测试、调试和根因分析", "full_name": "FirmWire/FirmWire", "id": "scan-447002181", "license": "BSD-3-Clause", "observed_at": "2026-10-16T10:47:49.087257Z", "pushed_at": "2026-08-20T11:02:19Z", "readme_sha256": "4ba931c32d9c8c5e04a27ce9e9430d8be22d55f1a2a81869dc85e56d1a99677c", "readme_url": "https://github.com/FirmWire/FirmWire/blob/main/README.md", "stars": 891, "targets": [ "firmware" ], "topics": [ "baseband", "emulation", "fuzzing", "introspection", "mediatek", "qemu", "samsung" ], "url": "https://github.com/FirmWire/FirmWire", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Read-only mirror of the official repo at git://sigrok.org/pulseview. Pull requests welcome. Please file bugreports at sigrok.org/bugzilla.", "description_language": "bilingual", "description_zh": "官方仓库 git://sigrok.org/pulseview 的只读镜像。欢迎提交拉取请求。请在 sigrok.org/bugzilla 提交缺陷报告。", "full_name": "sigrokproject/pulseview", "id": "scan-83142464", "license": "GPL-3.0", "observed_at": "2026-10-16T10:47:47.347109Z", "pushed_at": "2025-11-10T00:51:54Z", "readme_sha256": "47520fdd4cd7dd3f96fa08b52ab01fb202c3b7e64be35b8eb6f25bd98cd6c324", "readme_url": "https://github.com/sigrokproject/pulseview/blob/master/README", "stars": 805, "targets": [ "firmware", "protocol" ], "topics": [], "url": "https://github.com/sigrokproject/pulseview", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Recognize cpu instructions in an arbitrary binary file", "description_language": "bilingual", "description_zh": "识别任意二进制文件中的 CPU 指令。", "full_name": "airbus-seclab/cpu_rec", "id": "scan-83788347", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:37.041170Z", "pushed_at": "2024-03-19T14:26:55Z", "readme_sha256": "0f74f7a8bd39da321f9d40d0e8d8225e21198285be90b91e484504fd7dc8846b", "readme_url": "https://github.com/airbus-seclab/cpu_rec/blob/master/README.md", "stars": 757, "targets": [ "binary", "firmware" ], "topics": [ "binwalk" ], "url": "https://github.com/airbus-seclab/cpu_rec", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "IDA Python Embedded Toolkit -- IDAPython scripts for automating analysis of firmware of embedded devices", "description_language": "bilingual", "description_zh": "IDA Python Embedded Toolkit：用于自动分析嵌入式设备固件的 IDAPython 脚本", "full_name": "maddiestone/IDAPythonEmbeddedToolkit", "id": "scan-94694646", "license": "MIT", "observed_at": "2026-10-16T10:47:49.292660Z", "pushed_at": "2019-08-14T03:18:11Z", "readme_sha256": "f782d395af9285b8f6a51089279e461be8e583b8b90a26b5f8de5b053dd0362e", "readme_url": "https://github.com/maddiestone/IDAPythonEmbeddedToolkit/blob/master/README.md", "stars": 690, "targets": [ "app", "binary", "firmware" ], "topics": [], "url": "https://github.com/maddiestone/IDAPythonEmbeddedToolkit", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Raw binary firmware analysis software", "description_language": "bilingual", "description_zh": "原始二进制固件分析软件。", "full_name": "quarkslab/binbloom", "id": "scan-270678699", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:40.951499Z", "pushed_at": "2024-06-06T23:27:37Z", "readme_sha256": "d3ae5217ca2f5f1bc7f5a6d6b76b82f4f4da53e6a87e504e791ab1a507943730", "readme_url": "https://github.com/quarkslab/binbloom/blob/master/README.md", "stars": 586, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "embedded-systems", "firmware", "reverse-engineering" ], "url": "https://github.com/quarkslab/binbloom", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Python core of avatar²", "description_language": "bilingual", "description_zh": "avatar² 的 Python 核心。", "full_name": "avatartwo/avatar2", "id": "scan-94234201", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:41.006586Z", "pushed_at": "2025-03-31T20:51:49Z", "readme_sha256": "5d445c5c74a64845cd8cf5a5c4dd65cf0084ff904279253c1d47d62a6cb8efc3", "readme_url": "https://github.com/avatartwo/avatar2/blob/main/README.md", "stars": 579, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "embedded-systems", "reverse-engineering" ], "url": "https://github.com/avatartwo/avatar2", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "a tool to analyze filesystem images for security", "description_language": "bilingual", "description_zh": "用于安全分析文件系统镜像的工具。", "full_name": "cruise-automation/fwanalyzer", "id": "scan-198691310", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:18.429215Z", "pushed_at": "2023-10-08T15:26:40Z", "readme_sha256": "933483f132f42eaf5cd7fd5d2ef09529852dd1193dab953073cf67c87feb0824", "readme_url": "https://github.com/cruise-automation/fwanalyzer/blob/master/Readme.md", "stars": 516, "targets": [ "app", "firmware" ], "topics": [ "android", "embedded-linux", "filesystem", "filesystem-images", "filesystem-security", "firmware-analysis", "firmware-tools", "liunx", "security-audit", "security-automation", "security-tools" ], "url": "https://github.com/cruise-automation/fwanalyzer", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Ghidra utilities for analyzing PC firmware", "description_language": "bilingual", "description_zh": "用于分析 PC 固件的 Ghidra 实用工具。", "full_name": "al3xtjames/ghidra-firmware-utils", "id": "scan-188863427", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:46.707350Z", "pushed_at": "2026-09-01T02:39:24Z", "readme_sha256": "8b9e48e5441be19ab59e655c4f7434dcb11226436c2a2a20780a33c27fefc535", "readme_url": "https://github.com/al3xtjames/ghidra-firmware-utils/blob/master/README.md", "stars": 506, "targets": [ "binary", "firmware" ], "topics": [ "firmware", "ghidra", "reverse-engineering", "uefi" ], "url": "https://github.com/al3xtjames/ghidra-firmware-utils", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, and Information Security professionals with conducting firmware security assessments.", "description_language": "bilingual", "description_zh": "固件安全测试方法（FSTM）包含九个阶段，专为帮助安全研究人员、软件开发人员、顾问及信息安全专业人员开展固件安全评估而设计。", "full_name": "scriptingxss/owasp-fstm", "id": "scan-218911690", "license": "CC-BY-SA-4.0", "observed_at": "2026-10-16T01:36:18.503134Z", "pushed_at": "2026-06-08T00:42:37Z", "readme_sha256": "c8dfb644275485d0926f8c6b9bbdda4b0c4e3a76fa05e1c7bb6f8b48b2993968", "readme_url": "https://github.com/scriptingxss/owasp-fstm/blob/master/README.md", "stars": 502, "targets": [ "firmware" ], "topics": [ "embedded-security", "firmware", "firmware-analysis", "iot", "iot-security-testing", "iot-testing", "penetration-testing-framework", "reverse-engineering", "security", "security-tools" ], "url": "https://github.com/scriptingxss/owasp-fstm", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Discovering vulnerabilities in firmware through concolic analysis and function clustering.", "description_language": "bilingual", "description_zh": "通过结合具体执行与符号执行的分析，以及函数聚类，发现固件中的漏洞。", "full_name": "ChrisTheCoolHut/Firmware_Slap", "id": "scan-193618712", "license": "GPL-3.0", "observed_at": "2026-10-16T10:47:49.520717Z", "pushed_at": "2020-09-17T19:07:12Z", "readme_sha256": "0403f6636ef3d8e7fd5f7fcf1ec148cecec195d97faacc5f33d7fe425d84c3d7", "readme_url": "https://github.com/ChrisTheCoolHut/Firmware_Slap/blob/master/README.md", "stars": 476, "targets": [ "firmware" ], "topics": [ "angr", "exploit", "firmware", "vulnerability-discovery" ], "url": "https://github.com/ChrisTheCoolHut/Firmware_Slap", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "IoT firmware identification and extraction", "description_language": "bilingual", "description_zh": "物联网固件识别与提取。", "full_name": "nmatt0/moria", "id": "scan-1359742580", "license": "MIT", "observed_at": "2026-10-16T01:36:18.572853Z", "pushed_at": "2026-10-08T15:09:20Z", "readme_sha256": "58cbac8700341fa9ac405c154ce6b1c9e4ce88c06138c0f5cf97660fc6c391f9", "readme_url": "https://github.com/nmatt0/moria/blob/master/README.md", "stars": 418, "targets": [ "firmware" ], "topics": [ "firmware", "firmware-analysis", "firmware-tools", "hacking", "infosec", "iot", "iot-hacking", "linux", "offsec", "penetration-testing", "sbom", "security", "security-tools", "vulnerability-scanner" ], "url": "https://github.com/nmatt0/moria", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Ghidra analyzer for UEFI firmware.", "description_language": "bilingual", "description_zh": "用于 UEFI 固件的 Ghidra 分析器。", "full_name": "DSecurity/efiSeek", "id": "scan-277093823", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:28.407860Z", "pushed_at": "2024-06-02T21:49:20Z", "readme_sha256": "0416c186a62515c64108096ec5893c4f25b7cb8b3db3659e8318baa2cc29a776", "readme_url": "https://github.com/DSecurity/efiSeek/blob/573f4b9b5ba2731cdecafc6594d0fd0570e28fff/README.md", "stars": 408, "targets": [ "binary", "firmware" ], "topics": [ "firmware", "ghidra-plugin", "reverse-engineering", "uefi" ], "url": "https://github.com/DSecurity/efiSeek", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "EMBArk - The firmware security scanning environment", "description_language": "bilingual", "description_zh": "EMBArk：固件安全扫描环境。", "full_name": "e-m-b-a/embark", "id": "scan-394579896", "license": "MIT", "observed_at": "2026-10-16T01:36:18.646040Z", "pushed_at": "2026-07-31T13:40:34Z", "readme_sha256": "2703617163a4d166391b5cfb8e34a9ac92f8f80bf42b22ea628a36421f64b94a", "readme_url": "https://github.com/e-m-b-a/embark/blob/main/README.md", "stars": 395, "targets": [ "firmware" ], "topics": [ "data-analysis", "django", "firmware", "firmware-analysis", "firmware-tools", "iot", "linux", "penetration-testing", "pentesting", "security", "security-automation", "security-testing", "security-tools", "vulnerability-scanners" ], "url": "https://github.com/e-m-b-a/embark", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A firmware base address search tool.", "description_language": "bilingual", "description_zh": "固件基址搜索工具。", "full_name": "sgayou/rbasefind", "id": "scan-112968804", "license": "MIT", "observed_at": "2026-10-16T01:36:18.722527Z", "pushed_at": "2020-09-27T20:58:55Z", "readme_sha256": "ce7f1ff52507d6f9f6d24d84f311e7e4cf6f3b5651344fa2ec4a774c49ff5ed0", "readme_url": "https://github.com/sgayou/rbasefind/blob/master/README.md", "stars": 375, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "reverse-engineering" ], "url": "https://github.com/sgayou/rbasefind", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "IoT static scanner for secrets, SBOM, CVEs and more.", "description_language": "bilingual", "description_zh": "物联网静态扫描器，可扫描秘密信息、SBOM、CVE 等。", "full_name": "nmatt0/mithril", "id": "scan-1359743689", "license": "MIT", "observed_at": "2026-10-16T01:36:18.793945Z", "pushed_at": "2026-10-05T17:24:48Z", "readme_sha256": "989f0d55038fc86f8e86ae8180a6b84a6f69d3c3ca8da65c06a1466ac0a5900e", "readme_url": "https://github.com/nmatt0/mithril/blob/master/README.md", "stars": 363, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "firmware-tools", "hacking", "infosec", "iot", "iot-hacking", "linux", "offsec", "penetration-testing", "sbom", "security", "security-tools", "vulnerability-scanner" ], "url": "https://github.com/nmatt0/mithril", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules", "description_language": "bilingual", "description_zh": "用于分析 UEFI 固件，以及通过 FwHunt 规则检查 UEFI 模块的工具", "full_name": "binarly-io/fwhunt-scan", "id": "scan-268312085", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:05.035499Z", "pushed_at": "2025-05-02T18:17:19Z", "readme_sha256": "4a8e18620193d5f13b4b2b199ab0034a00fba607ba95f7602b75d74c5bb81d40", "readme_url": "https://github.com/binarly-io/fwhunt-scan/blob/master/README.md", "stars": 246, "targets": [ "binary", "firmware" ], "topics": [ "efi-guid", "efi-protocols", "radare2", "reverse-engineering", "uefi", "uefi-firmware", "uefi-firmware-analysis" ], "url": "https://github.com/binarly-io/fwhunt-scan", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Tool for decrypting the firmware files for Samsung SSDs", "description_language": "bilingual", "description_zh": "用于解密 Samsung SSD 固件文件的工具", "full_name": "chrivers/samsung-firmware-magic", "id": "scan-254223883", "license": null, "observed_at": "2026-10-16T01:36:48.282244Z", "pushed_at": "2021-04-11T13:08:57Z", "readme_sha256": "643fd9f64ae080e00f9ab78c2a4c8615a85c12f25d1a64ff25f00cf72311977d", "readme_url": "https://github.com/chrivers/samsung-firmware-magic/blob/master/README.md", "stars": 238, "targets": [ "firmware" ], "topics": [ "decryptor", "deobfuscation", "firmware", "firmware-extraction", "samsung" ], "url": "https://github.com/chrivers/samsung-firmware-magic", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Infiltra Firmware is an open-source firmware for wireless security testing, network analysis, and hardware hacking. FLASH IT BELOW USING OUR WEB FLAHSER!", "description_language": "bilingual", "description_zh": "Infiltra Firmware 是用于无线安全测试、网络分析和硬件探索的开源固件。可使用下方的网页刷写器进行刷写！", "full_name": "D3CRYPT-1/Infiltra-Firmware", "id": "scan-917929512", "license": "GPL-2.0", "observed_at": "2026-10-16T10:47:49.507865Z", "pushed_at": "2026-03-09T14:12:36Z", "readme_sha256": "854059063be82c40869ce9eff692608e48efcadccb1535408e166f86bacc3da4", "readme_url": "https://github.com/D3CRYPT-1/Infiltra-Firmware/blob/main/README.md", "stars": 205, "targets": [ "firmware", "website" ], "topics": [ "deauther", "deauther-5g", "discord", "esp32", "esp8266", "firmware", "funny", "hacking", "m5stack", "pentesting" ], "url": "https://github.com/D3CRYPT-1/Infiltra-Firmware", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "D-Link firmware decryption PoC", "description_language": "bilingual", "description_zh": "D-Link 固件解密概念验证", "full_name": "0xricksanchez/dlink-decrypt", "id": "scan-255309919", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:18.956417Z", "pushed_at": "2023-12-21T05:03:52Z", "readme_sha256": "eef6eb415b2f7953da877f1f059e5e1b2ce63ee4756c642c8138b3429b128454", "readme_url": "https://github.com/0xricksanchez/dlink-decrypt/blob/master/README.md", "stars": 201, "targets": [ "firmware" ], "topics": [ "cryptography", "decryption", "dlink", "encryption", "firmware", "firmware-analysis", "firmware-security", "iot" ], "url": "https://github.com/0xricksanchez/dlink-decrypt", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A tool for firmware cartography", "description_language": "bilingual", "description_zh": "固件结构测绘工具", "full_name": "quarkslab/pyrrha", "id": "scan-658736352", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:19.055636Z", "pushed_at": "2026-10-12T12:56:49Z", "readme_sha256": "249a44a13bd9714bd50531b3be3a1ee2d2ab331639c18d953aabbcf34d6dd2a8", "readme_url": "https://github.com/quarkslab/pyrrha/blob/main/README.md", "stars": 172, "targets": [ "binary", "firmware" ], "topics": [ "firmware-analysis", "firmware-tools", "security" ], "url": "https://github.com/quarkslab/pyrrha", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "122 AI skills for reverse engineering: malware analysis, software reversing, firmware and embedded systems, protocol reversing, mobile apps, unpacking and deobfuscation, software cracking, vulnerability research, managed code, forensics and intelligence, and CTFs.", "description_language": "bilingual", "description_zh": "122 个逆向工程 AI 技能，涵盖恶意软件分析、软件逆向、固件与嵌入式、协议逆向、移动应用、脱壳与去混淆、软件破解、漏洞挖掘、托管代码、取证情报及 CTF。", "full_name": "dslsdzc/rev-skills", "id": "scan-1337420546", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:19.194282Z", "pushed_at": "2026-10-11T20:15:49Z", "readme_sha256": "fbce34be0aa0108b202f9485039352ca560f2aeee0e79a28a81e4c39fa7d737f", "readme_url": "https://github.com/dslsdzc/rev-skills/blob/main/README.md", "stars": 162, "targets": [ "app", "binary", "firmware" ], "topics": [ "ai-agents", "claude-code", "ctf", "disassembly", "firmware-analysis", "malware-analysis", "mobile-security", "protocol-reverse-engineering", "reverse-engineering", "security-tools", "skills", "unpacking" ], "url": "https://github.com/dslsdzc/rev-skills", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A Universal MCU Firmware Emulator for Dynamic Analysis without Any Hardware Dependence.", "description_language": "bilingual", "description_zh": "不依赖任何硬件、用于动态分析的通用 MCU 固件仿真器。", "full_name": "MCUSec/uEmu", "id": "scan-334809136", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:49.675219Z", "pushed_at": "2023-11-20T09:30:46Z", "readme_sha256": "f336c8b3d0d7b3bb9b9a38c02e3e297547fc0d2a73fa212f9e4d5e47201470ff", "readme_url": "https://github.com/MCUSec/uEmu/blob/main/README.md", "stars": 152, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/MCUSec/uEmu", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Guide for patching AMI Aptio V UEFI firmware to circumvent Secure Boot checks", "description_language": "bilingual", "description_zh": "修补 AMI Aptio V UEFI 固件以绕过安全启动检查的指南", "full_name": "SamuelTulach/PatchBoot", "id": "scan-646922947", "license": null, "observed_at": "2026-10-16T01:37:14.076815Z", "pushed_at": "2024-06-20T21:01:05Z", "readme_sha256": "a805b339368ae7ef49db176cc761abbe8978d3c5a3d6bdff01c1416660ef4c3a", "readme_url": "https://github.com/SamuelTulach/PatchBoot/blob/main/README.md", "stars": 144, "targets": [ "firmware" ], "topics": [ "ami", "aptio", "efi", "firmware", "patch", "reverse-engineering", "reversing", "uefi" ], "url": "https://github.com/SamuelTulach/PatchBoot", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse Engineering Framework for the Polyend Tracker", "description_language": "bilingual", "description_zh": "Polyend Tracker 逆向工程框架", "full_name": "patois/RETracker", "id": "scan-469638726", "license": null, "observed_at": "2026-10-16T01:36:17.367628Z", "pushed_at": "2024-06-19T14:54:39Z", "readme_sha256": "e85278fd66ba0a6349b8d9a0c3161ea6aea556740091a75254840d3530305a63", "readme_url": "https://github.com/patois/RETracker/blob/main/README.md", "stars": 136, "targets": [ "binary", "firmware" ], "topics": [ "custom-firmware", "disassembler", "firmware", "hack", "impulse-tracker", "mod", "mod-tracker", "modification", "music-production", "polyend", "polyend-tracker", "reverse-engineering", "teensy", "teensy36", "teensyduino", "tracker" ], "url": "https://github.com/patois/RETracker", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Open-source reverse engineering and firmware development for the FNIRSI 2C53T oscilloscope/multimeter/signal generator", "description_language": "bilingual", "description_zh": "FNIRSI 2C53T 示波器/万用表/信号发生器的开源逆向工程与固件开发", "full_name": "DavidClawson/OpenScope-2C53T", "id": "scan-1187657478", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:51.781202Z", "pushed_at": "2026-10-11T00:48:33Z", "readme_sha256": "08b82c07b4e78287d670ce7fb5ff280381eb78405d90ee3984311925d47bb782", "readme_url": "https://github.com/DavidClawson/OpenScope-2C53T/blob/main/README.md", "stars": 119, "targets": [ "binary", "firmware" ], "topics": [ "arm-cortex-m4", "at32f403a", "electronics", "embedded-c", "embedded-systems", "firmware", "fnirsi", "fnirsi-2c53t", "freertos", "ghidra", "gowin-fpga", "multimeter", "open-source-firmware", "oscilloscope", "renode", "reverse-engineering", "signal-generator", "st7789", "test-equipment" ], "url": "https://github.com/DavidClawson/OpenScope-2C53T", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "Accenture/FirmLoader", "id": "scan-501529103", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:56.982698Z", "pushed_at": "2024-12-05T11:36:37Z", "readme_sha256": "85ed28e044a566195a26693cc2b4d0644881f68f0f9f455d8dc6fd7cd037b7fb", "readme_url": "https://github.com/Accenture/FirmLoader/blob/main/README.md", "stars": 109, "targets": [ "binary", "firmware" ], "topics": [ "ida-plugin" ], "url": "https://github.com/Accenture/FirmLoader", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Open-source emulator + analysis toolkit for Nokia DCT3 phones (3310/3410/5210/8210/8250/8850…). Boots real firmware in the browser (WASM) and a native SDL GUI. Bring-your-own firmware — none included. GPL-2.", "description_language": "bilingual", "description_zh": "面向 Nokia DCT3 手机（3310/3410/5210/8210/8250/8850 等）的开源仿真器与分析工具集，可在浏览器（WASM）和原生 SDL 图形界面中启动真实固件。需自行提供固件，项目不附带固件。采用 GPL-2 许可证。", "full_name": "djr-747/nokia-dct3-emulator", "id": "scan-1294749921", "license": "GPL-2.0", "observed_at": "2026-10-16T10:47:49.747226Z", "pushed_at": "2026-07-31T12:03:15Z", "readme_sha256": "eeff8c29fafb16706b9e499b25f34b9cb8d2f7f52ab9bd949b10b05b635765a5", "readme_url": "https://github.com/djr-747/nokia-dct3-emulator/blob/main/README.md", "stars": 92, "targets": [ "binary", "firmware", "website" ], "topics": [], "url": "https://github.com/djr-747/nokia-dct3-emulator", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "a set of scripts and tools for various firmware analysis tasks", "description_language": "bilingual", "description_zh": "用于各种固件分析任务的一组脚本和工具", "full_name": "nmatt0/firmwaretools", "id": "scan-558078143", "license": "MIT", "observed_at": "2026-10-16T10:47:49.853703Z", "pushed_at": "2025-04-04T18:40:23Z", "readme_sha256": "6b5121ab98adbb19a2be9d3defdf4e5d01c5bc7e0641243deddcf3d344112dc6", "readme_url": "https://github.com/nmatt0/firmwaretools/blob/master/README.md", "stars": 90, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/nmatt0/firmwaretools", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Exynos Modem / Shannon baseband firmware loader for IDA Pro 8.x/9.x", "description_language": "bilingual", "description_zh": "适用于 IDA Pro 8.x/9.x 的 Exynos Modem / Shannon 基带固件加载器", "full_name": "alexander-pick/shannon_modem_loader", "id": "scan-783673993", "license": "MIT", "observed_at": "2026-10-16T01:35:57.809759Z", "pushed_at": "2025-01-03T11:42:01Z", "readme_sha256": "49505d0d3d2fbd602aeef9c0a015a4d3adc4911bd06d26c43fc0009c5c39229a", "readme_url": "https://github.com/alexander-pick/shannon_modem_loader/blob/main/README.md", "stars": 87, "targets": [ "binary", "firmware" ], "topics": [ "baseband", "ida-plugin", "ida-pro", "resarch", "reverse-engineering", "samsung", "security" ], "url": "https://github.com/alexander-pick/shannon_modem_loader", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering and unofficial documentation of LinkPi ENC series (ENC1/ENC5/ENC9) and TBS 2603SE video encoders based on the F3520D platform — hardware analysis, firmware internals, streaming fixes, and hidden features.", "description_language": "bilingual", "description_zh": "基于 F3520D 平台的 LinkPi ENC 系列（ENC1/ENC5/ENC9）和 TBS 2603SE 视频编码器的逆向工程与非官方文档，涵盖硬件分析、固件内部机制、流媒体修复和隐藏功能。", "full_name": "matiaspl/LinkPi-ENCx", "id": "scan-345480982", "license": null, "observed_at": "2026-10-16T10:47:50.115766Z", "pushed_at": "2026-07-13T21:20:35Z", "readme_sha256": "f088afbe2ba79f80feee8d4590893f1769b766a7c771679b016c6332f89d1d09", "readme_url": "https://github.com/matiaspl/LinkPi-ENCx/blob/main/README.md", "stars": 86, "targets": [ "firmware" ], "topics": [ "encoder", "f3520d", "firmware", "hardware-hacking", "hisilicon", "linkpi", "linux-embedded", "reverse-engineering", "rist", "rtmp", "srt", "video-encoder", "video-streaming" ], "url": "https://github.com/matiaspl/LinkPi-ENCx", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "System Management RAM analysis tool", "description_language": "bilingual", "description_zh": "系统管理内存（SMRAM）分析工具", "full_name": "Cr4sh/smram_parse", "id": "scan-71626933", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:15.511900Z", "pushed_at": "2024-08-09T15:44:44Z", "readme_sha256": "acedcdf1b4585207ad3613b73ad312683a6097d3bd26b467a3df0591b68c7908", "readme_url": "https://github.com/Cr4sh/smram_parse/blob/master/README.TXT", "stars": 83, "targets": [ "firmware" ], "topics": [ "analysis", "dfir", "firmware", "forensics", "investigation", "reversing", "security", "smm", "uefi" ], "url": "https://github.com/Cr4sh/smram_parse", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "IoT Firmware Deep Analysis: Automated reverse engineering and vulnerability discovery for IoT firmware binaries.", "description_language": "bilingual", "description_zh": "IoT Firmware Deep Analysis：面向物联网固件二进制文件的自动化逆向工程与漏洞发现。", "full_name": "cn0xroot/IFDA", "id": "scan-1290060935", "license": "Apache-2.0", "observed_at": "2026-10-16T10:47:50.373517Z", "pushed_at": "2026-09-21T12:00:10Z", "readme_sha256": "61ea3f08eb7d2784e571c276da467dafb473f2084833818294c8dcbd9fd1cf66", "readme_url": "https://github.com/cn0xroot/IFDA/blob/main/README.md", "stars": 70, "targets": [ "binary", "firmware" ], "topics": [ "analysis", "firmware", "ifda", "iot", "iot-security", "reverse-engineering" ], "url": "https://github.com/cn0xroot/IFDA", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A distributed fuzzing management framework", "description_language": "bilingual", "description_zh": "分布式模糊测试管理框架", "full_name": "fkie-cad/LuckyCAT", "id": "scan-147631014", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:19.446384Z", "pushed_at": "2020-07-24T12:05:21Z", "readme_sha256": "cb96a1b778c0878ed2732c9f4c3e83a40b300e43f75c79d49ad665d90c2f3d17", "readme_url": "https://github.com/fkie-cad/LuckyCAT/blob/master/README.md", "stars": 70, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "fuzzing", "fuzzing-framework" ], "url": "https://github.com/fkie-cad/LuckyCAT", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis", "description_language": "bilingual", "description_zh": "DICE：自动仿真 DMA 输入通道，用于固件动态分析", "full_name": "RiS3-Lab/DICE-DMA-Emulation", "id": "scan-275714610", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:50.387491Z", "pushed_at": "2023-10-14T03:38:46Z", "readme_sha256": "d39094c4f6b089850309070d8f1c41450032f2c0a7f135e59f6ce221b4945ba8", "readme_url": "https://github.com/RiS3-Lab/DICE-DMA-Emulation/blob/master/README.md", "stars": 67, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/RiS3-Lab/DICE-DMA-Emulation", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Presented hardware reverse engineering workshops since 2019", "description_language": "bilingual", "description_zh": "自 2019 年起开展的硬件逆向工程工作坊资料", "full_name": "C00kie-/IoT-workshop-materials", "id": "scan-239386260", "license": "CC0-1.0", "observed_at": "2026-10-16T01:36:19.493240Z", "pushed_at": "2024-08-08T10:45:38Z", "readme_sha256": "53ce2af782edd8bdac589a94008512c7bcb79f51befaf79e49d8e832af733ced", "readme_url": "https://github.com/C00kie-/IoT-workshop-materials/blob/master/README.md", "stars": 65, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "hardware", "reverse-engineering", "supply-chain", "teaching-materials", "training-materials" ], "url": "https://github.com/C00kie-/IoT-workshop-materials", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "binwalk for Windows", "description_language": "bilingual", "description_zh": "Windows 版 binwalk", "full_name": "jowinjohnchemban/winbinwalk", "id": "scan-163533047", "license": null, "observed_at": "2026-10-16T01:37:37.122364Z", "pushed_at": "2022-11-19T08:00:38Z", "readme_sha256": "f48b20aeab42d989e59057979fc00d0addcc423505989623eb59c6b744f8720c", "readme_url": "https://github.com/jowinjohnchemban/winbinwalk/blob/master/README.md", "stars": 60, "targets": [ "firmware" ], "topics": [ "binwalk", "hacktoberfest", "python", "windows" ], "url": "https://github.com/jowinjohnchemban/winbinwalk", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A faster firmware base address scanner.", "description_language": "bilingual", "description_zh": "速度更快的固件基址扫描器。", "full_name": "soyersoyer/basefind2", "id": "scan-478775658", "license": "MIT", "observed_at": "2026-10-16T01:36:19.703731Z", "pushed_at": "2022-05-02T19:00:56Z", "readme_sha256": "d8a3526356f251313503378d8cbf3cda23c6609e8b58b6f1f84eeac632bf1e51", "readme_url": "https://github.com/soyersoyer/basefind2/blob/main/README.md", "stars": 60, "targets": [ "firmware" ], "topics": [ "basefind", "firmware-analysis", "rbasefind", "reverse-engineering" ], "url": "https://github.com/soyersoyer/basefind2", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Finds the base address of a firmware by comparing string addresses with target pointer addresses", "description_language": "bilingual", "description_zh": "通过比较字符串地址与目标指针地址，查找固件基址", "full_name": "8051Enthusiast/allyourbase", "id": "scan-633181724", "license": "MIT", "observed_at": "2026-10-16T01:36:19.795280Z", "pushed_at": "2025-03-09T21:55:22Z", "readme_sha256": "300dfa442b0d59b3e71a59c1428786959516e870eb460bce6f209bbd2ed0eb86", "readme_url": "https://github.com/8051Enthusiast/allyourbase/blob/main/README.md", "stars": 57, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "reverse-engineering" ], "url": "https://github.com/8051Enthusiast/allyourbase", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware format analysis for TP-Link firmwares with the version 3 header (0x03000000)", "description_language": "bilingual", "description_zh": "针对采用版本 3 文件头（0x03000000）的 TP-Link 固件进行格式分析", "full_name": "xdarklight/mktplinkfw3", "id": "scan-28009436", "license": "GPL-2.0", "observed_at": "2026-10-16T10:47:50.574726Z", "pushed_at": "2023-02-27T20:56:49Z", "readme_sha256": "ee2fafbbdcfc2531b95a6c184b414dc2d781f1f52ac18b139d02bb854ba88f8d", "readme_url": "https://github.com/xdarklight/mktplinkfw3/blob/main/README.md", "stars": 56, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/xdarklight/mktplinkfw3", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Fortinet Firmware decryption and analysis tools", "description_language": "bilingual", "description_zh": "Fortinet 固件解密与分析工具", "full_name": "mosajjal/fortitool", "id": "scan-1340455874", "license": "MIT", "observed_at": "2026-10-16T10:47:50.640024Z", "pushed_at": "2026-09-03T10:36:43Z", "readme_sha256": "06e9d8b4d14cbfbd2c4dfc938b07f1d19caf538ff39becf494e8f93d5e6884ae", "readme_url": "https://github.com/mosajjal/fortitool/blob/main/README.md", "stars": 50, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/mosajjal/fortitool", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "iPod RetailOS firmware research — decryption, analysis, and wInd3x Classic support patch", "description_language": "bilingual", "description_zh": "iPod RetailOS 固件研究，涵盖解密、分析，以及为 wInd3x 添加 Classic 支持的补丁", "full_name": "giek2000/ipod-classic-firmware-research", "id": "scan-1311978133", "license": "MIT", "observed_at": "2026-10-16T10:47:50.754851Z", "pushed_at": "2026-08-08T14:32:53Z", "readme_sha256": "fc0b3813dad34774abac4741e3c2f8af218277ed66f7cc631ded2513fdcafd57", "readme_url": "https://github.com/giek2000/ipod-classic-firmware-research/blob/main/README.md", "stars": 45, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/giek2000/ipod-classic-firmware-research", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "iOS 26.3 activation lock research -- 31 firmware vulnerabilities + VU#346053 BAA injection PoC", "description_language": "bilingual", "description_zh": "iOS 26.3 激活锁研究：31 个固件漏洞，以及 VU#346053 BAA 注入概念验证", "full_name": "tr4m0ryp/ios-26-activation-research", "id": "scan-1211770393", "license": null, "observed_at": "2026-10-16T01:36:19.774375Z", "pushed_at": "2026-07-11T01:07:41Z", "readme_sha256": "b0e9be8732323374c28e21ccb7d3835610cfad2726aa3cabc48e04ac6e2299c7", "readme_url": "https://github.com/tr4m0ryp/ios-26-activation-research/blob/main/README.md", "stars": 45, "targets": [ "app", "firmware" ], "topics": [ "activation-lock", "apple", "apple-security", "apple-security-bounty", "bug-bounty", "bug-bounty-poc", "captive-portal", "cve", "firmware-analysis", "icloud", "icloud-bypass", "ios", "ios-26", "ios-security", "mitm", "mobileactivation", "poc", "reverse-engineering", "security-research", "vulnerability-research" ], "url": "https://github.com/tr4m0ryp/ios-26-activation-research", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.", "description_language": "bilingual", "description_zh": "通用 Windows 提取工具，可检测未知文件，并将其交给内置的合适提取器处理。", "full_name": "xchwarze/magic-extractor", "id": "scan-832388783", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:37.255328Z", "pushed_at": "2026-08-25T06:25:49Z", "readme_sha256": "1ce18985320b72642edd90973d49d8dfbeb2115a06366463add35f682469fbce", "readme_url": "https://github.com/xchwarze/magic-extractor/blob/master/readme.md", "stars": 43, "targets": [ "firmware" ], "topics": [ "binwalk", "decompression", "extractor", "windows" ], "url": "https://github.com/xchwarze/magic-extractor", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware analysis gone wild.", "description_language": "bilingual", "description_zh": "放飞自我的固件分析。", "full_name": "theopolis/subzero", "id": "scan-16446386", "license": "MIT", "observed_at": "2026-10-16T10:47:50.942365Z", "pushed_at": "2014-08-24T07:00:00Z", "readme_sha256": "447edebf071009ba7e0d9196257e2a447c7419501a1aaa7c1c5c45671d9d0a33", "readme_url": "https://github.com/theopolis/subzero/blob/master/README.rst", "stars": 41, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/theopolis/subzero", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Interactive static pattern discovery tool to locate structures from frequent patterns", "description_language": "bilingual", "description_zh": "交互式静态模式发现工具，通过频繁模式定位结构", "full_name": "HexLasso/FF-16-TUI", "id": "scan-1346435094", "license": "MIT", "observed_at": "2026-10-16T01:36:19.959038Z", "pushed_at": "2026-09-05T11:04:02Z", "readme_sha256": "a2448d8b9d92954be0931d5f67927893d53cc125496cd5eb5031a967fdca62ce", "readme_url": "https://github.com/HexLasso/FF-16-TUI/blob/main/README.md", "stars": 39, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "firmware-analysis", "forensics", "reverse-engineering", "static-analysis" ], "url": "https://github.com/HexLasso/FF-16-TUI", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "LLMs for autonomous reasoning and analysis of firmware", "description_language": "bilingual", "description_zh": "使用大语言模型对固件进行自主推理与分析", "full_name": "zhang-xr/FirmLLM", "id": "scan-934885343", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:51.153952Z", "pushed_at": "2025-04-02T05:38:44Z", "readme_sha256": "04afd574c08a72ef1841bdb329c2ba17280a880aa19fe3a0440c089e9da4df31", "readme_url": "https://github.com/zhang-xr/FirmLLM/blob/main/README.md", "stars": 35, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/zhang-xr/FirmLLM", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering of the Insta360 Link webcam firmware: UVC extension-unit control protocol, gesture pipeline, gimbal/PTZ command path, and firmware container format", "description_language": "bilingual", "description_zh": "Insta360 Link 网络摄像头固件逆向工程：UVC 扩展单元控制协议、手势处理流程、云台／PTZ 命令路径和固件容器格式", "full_name": "schlarpc/insta360-link-firmware-re", "id": "scan-1319963944", "license": null, "observed_at": "2026-10-16T10:47:59.043299Z", "pushed_at": "2026-08-02T23:56:06Z", "readme_sha256": "2ec98b6626e8a3abeb89e98dbb43e976f834bb3096a3fd3346b31fa7470ae1d8", "readme_url": "https://github.com/schlarpc/insta360-link-firmware-re/blob/main/README.md", "stars": 32, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/schlarpc/insta360-link-firmware-re", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A human-readable matching decompilation of the Pokéwalker firmware.", "description_language": "bilingual", "description_zh": "Pokéwalker 固件的人类可读匹配反编译。", "full_name": "lumirth/pw", "id": "scan-1368865562", "license": "CC0-1.0", "observed_at": "2026-10-18T13:14:01.187939Z", "pushed_at": "2026-09-14T23:06:05Z", "readme_sha256": "fde726d0140f596f9a468a0a0a0a2623ff6b76e50c4009eb9193d9404407ace7", "readme_url": "https://github.com/lumirth/pw/blob/main/README.md", "stars": 31, "targets": [ "binary", "firmware", "game" ], "topics": [ "decompilation", "disassembly", "heartgold", "hgss", "matching-decompilation", "pokemon", "pokewalker", "reverse-engineering", "soulsilver", "source-reconstruction" ], "url": "https://github.com/lumirth/pw", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering notes, firmware analysis, and extracted content from the Marstek Venus E plug-in home battery", "description_language": "bilingual", "description_zh": "针对 Marstek Venus E 插电式家用电池的逆向工程笔记、固件分析及提取内容", "full_name": "rweijnen/marstek-venus-e-firmware-notes", "id": "scan-975330385", "license": "MPL-2.0", "observed_at": "2026-10-16T10:47:51.304871Z", "pushed_at": "2025-08-12T21:51:49Z", "readme_sha256": "f128902fb38712bcf35b6c76808c200b90068198a2c7e10e5d6688dad1d19e2a", "readme_url": "https://github.com/rweijnen/marstek-venus-e-firmware-notes/blob/main/README.md", "stars": 31, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/rweijnen/marstek-venus-e-firmware-notes", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Decrypt and extract voice guidance MP3 prompts from Sony WH-1000XM4 encrypted voice packs. AES key extracted via Bluetooth firmware dump of the Airoha MT2811 SoC.", "description_language": "bilingual", "description_zh": "解密并提取 Sony WH-1000XM4 加密语音包中的语音提示 MP3。AES 密钥通过蓝牙转储 Airoha MT2811 SoC 固件获得。", "full_name": "HelgeSverre/sony-vp-extract", "id": "scan-1161867566", "license": "MIT", "observed_at": "2026-10-16T01:36:20.183976Z", "pushed_at": "2026-07-05T10:46:44Z", "readme_sha256": "d61004861af494cc3bcbfb8560e39082f7eda25e4453bdcf5f3b1f59a6c22e07", "readme_url": "https://github.com/HelgeSverre/sony-vp-extract/blob/main/README.md", "stars": 30, "targets": [ "firmware" ], "topics": [ "bluetooth", "firmware-analysis", "reverse-engineering", "security-research", "sony" ], "url": "https://github.com/HelgeSverre/sony-vp-extract", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Samsung QN90B and QN90F root", "description_language": "bilingual", "description_zh": "Samsung QN90B 和 QN90F 的 root 工具。", "full_name": "chris-ritsen/samsung-tv-root", "id": "scan-1337244178", "license": "Unlicense", "observed_at": "2026-10-16T01:36:20.236174Z", "pushed_at": "2026-09-28T10:41:43Z", "readme_sha256": "435d5fc6345357e0b03a9622bf5ec68e4e5a4c4e99a713df41b42b6203385e6a", "readme_url": "https://github.com/chris-ritsen/samsung-tv-root/blob/master/README.md", "stars": 28, "targets": [ "firmware" ], "topics": [ "cve-2025-0072", "embedded-linux", "firmware-analysis", "firmware-decryption", "hardware-hacking", "mali-gpu", "privilege-escalation", "qn90b", "qn90f", "reverse-engineering", "root-exploit", "rooting", "samsung", "samsung-tv", "sdb", "security-research", "smart-tv", "sve-2025-50109", "tizen", "trustzone" ], "url": "https://github.com/chris-ritsen/samsung-tv-root", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "MDB-USB-adapter: An open-source hardware and software solution for converting Multi-Drop Bus (MDB) protocol to USB. Designed for vending machine integration, device emulation, and data analysis. Includes schematics, firmware, and documentation. Licensed under CERN Open Hardware License.", "description_language": "bilingual", "description_zh": "MDB-USB-adapter：将 Multi-Drop Bus（MDB）协议转换为 USB 的开源硬件与软件方案，面向自动售货机集成、设备仿真和数据分析，包含原理图、固件和文档，采用 CERN 开放硬件许可证。", "full_name": "shadowlamer/MDB-USB-adapter", "id": "scan-243523180", "license": null, "observed_at": "2026-10-16T10:47:51.330429Z", "pushed_at": "2025-01-27T09:19:55Z", "readme_sha256": "785bffcbe255cb93a3dc724212a600da4eaec8df1f057189e370b6e896713f14", "readme_url": "https://github.com/shadowlamer/MDB-USB-adapter/blob/master/README.md", "stars": 28, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/shadowlamer/MDB-USB-adapter", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Extract information and files from Reolink firmwares.", "description_language": "bilingual", "description_zh": "从 Reolink 固件中提取信息和文件。", "full_name": "AT0myks/reolink-fw", "id": "scan-520297267", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:20.295926Z", "pushed_at": "2024-11-17T19:20:07Z", "readme_sha256": "a5e5b42a46c0d3092aff39ec7404e77890b3b8a7306163a4a84dd15be250264c", "readme_url": "https://github.com/AT0myks/reolink-fw/blob/main/README.md", "stars": 26, "targets": [ "firmware" ], "topics": [ "camera", "firmware", "firmware-analysis", "firmware-extraction", "firmware-tools", "python", "reolink" ], "url": "https://github.com/AT0myks/reolink-fw", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware reverse engineering of the Elgato Cam Link 4K (USB 0fd9:0066): vendor HID protocol, SPI flash layout, FX3 and ECP5 firmware formats, update path, security analysis, and an independent flashing tool.", "description_language": "bilingual", "description_zh": "Elgato Cam Link 4K（USB 0fd9:0066）的固件逆向工程：厂商 HID 协议、SPI 闪存布局、FX3 与 ECP5 固件格式、更新路径、安全分析及独立刷写工具。", "full_name": "schlarpc/elgato-cam-link-4k-firmware-re", "id": "scan-1336388296", "license": "MIT", "observed_at": "2026-10-16T10:47:51.468781Z", "pushed_at": "2026-08-16T21:43:28Z", "readme_sha256": "0086cec48bd2a23d046797c73ae7794675a3d3868e48ad09a832bc9e63c294d9", "readme_url": "https://github.com/schlarpc/elgato-cam-link-4k-firmware-re/blob/main/README.md", "stars": 22, "targets": [ "firmware" ], "topics": [ "cam-link", "capture-card", "cypress-fx3", "ecp5", "elgato", "firmware", "fpga", "hid", "reverse-engineering", "usb" ], "url": "https://github.com/schlarpc/elgato-cam-link-4k-firmware-re", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "N64 Graphics data detection and analysis", "description_language": "bilingual", "description_zh": "N64 图形数据检测与分析。", "full_name": "ethteck/lfgfx", "id": "scan-494132178", "license": "MIT", "observed_at": "2026-10-16T01:37:37.481650Z", "pushed_at": "2022-12-13T10:36:14Z", "readme_sha256": "96b71c166bd463e8124be3191c0302f0bdf4fc817c048989fbef1f185f8cf54a", "readme_url": "https://github.com/ethteck/lfgfx/blob/main/README.md", "stars": 21, "targets": [ "firmware" ], "topics": [ "binwalk", "decompilation", "f3dex", "n64", "reverse-engineering" ], "url": "https://github.com/ethteck/lfgfx", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Docker container with all extra tools installed to get the most out of binwalk", "description_language": "bilingual", "description_zh": "已安装全部附加工具的 Docker 容器，可充分发挥 binwalk 的功能。", "full_name": "sheabot/binwalk-docker", "id": "scan-306458639", "license": "MIT", "observed_at": "2026-10-16T01:37:37.483598Z", "pushed_at": "2020-12-17T04:23:46Z", "readme_sha256": "7bb0250953c83641cad5f96e4b0ca89a98fb96654205c990495bb61f08ec3952", "readme_url": "https://github.com/sheabot/binwalk-docker/blob/main/README.md", "stars": 21, "targets": [ "firmware" ], "topics": [ "binwalk", "docker" ], "url": "https://github.com/sheabot/binwalk-docker", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Samples of Avatar firmware analysis (including NDSS'14 cases)", "description_language": "bilingual", "description_zh": "Avatar 固件分析样例，包括 NDSS 2014 的案例。", "full_name": "avatarone/avatar-samples", "id": "scan-15700953", "license": "Apache-2.0", "observed_at": "2026-10-16T10:47:51.554644Z", "pushed_at": "2017-06-27T10:18:52Z", "readme_sha256": "18ccbf3e0081fb1429ba8c232a6c10a8a0edaad21db3ff0d8daca13d7b4315d3", "readme_url": "https://github.com/avatarone/avatar-samples/blob/master/README.md", "stars": 20, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/avatarone/avatar-samples", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "FETB : Take URL of File For Analysis using File + ExifTool + Binwalk Commands ", "description_language": "bilingual", "description_zh": "FETB：接收文件 URL，使用 file、ExifTool 和 Binwalk 命令分析文件。", "full_name": "c0brabaghdad1/FETB", "id": "scan-335417440", "license": null, "observed_at": "2026-10-16T01:37:37.479834Z", "pushed_at": "2021-02-02T21:30:15Z", "readme_sha256": "75275a732160850028ac6f9772d6dff36342ed1ee6db47e870e3ebfc69f7ef55", "readme_url": "https://github.com/c0brabaghdad1/FETB/blob/master/README.md", "stars": 20, "targets": [ "firmware" ], "topics": [ "binwalk", "digital-forensics", "exif-metadata", "exiftool", "forensic-analysis", "forensic-files", "metadata-extractor" ], "url": "https://github.com/c0brabaghdad1/FETB", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Additional material for our paper \"Breaking all the Things - A Systematic Survey of Firmware Extraction Techniques for IoT Devices\" (CARDIS 2018)", "description_language": "bilingual", "description_zh": "论文《Breaking all the Things - A Systematic Survey of Firmware Extraction Techniques for IoT Devices》（CARDIS 2018）的补充材料。", "full_name": "david-oswald/iot-fw-extraction", "id": "scan-151226332", "license": null, "observed_at": "2026-10-16T01:36:20.476018Z", "pushed_at": "2019-09-10T09:48:36Z", "readme_sha256": "ad9ad581f3cb516dcf2131b4cbed17dd99b00d6fe108ad7e3669aa0e8efa8c81", "readme_url": "https://github.com/david-oswald/iot-fw-extraction/blob/master/README.md", "stars": 19, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "firmware-extraction", "hardware-security", "internet-of-things" ], "url": "https://github.com/david-oswald/iot-fw-extraction", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Astell&Kern iRiver LS150 SPI firmware dump + telnet access", "description_language": "bilingual", "description_zh": "Astell&Kern iRiver LS150 SPI 固件转储及 Telnet 访问。", "full_name": "Crymeiriver/LS150", "id": "scan-168105647", "license": null, "observed_at": "2026-10-16T01:36:20.607272Z", "pushed_at": "2019-01-30T13:19:04Z", "readme_sha256": "1fb283194bb6658a4385db8a1a0b3517397d5c10d46658fe58f913bbbb63cfa0", "readme_url": "https://github.com/Crymeiriver/LS150/blob/master/README.md", "stars": 18, "targets": [ "firmware" ], "topics": [ "firmware", "firmware-analysis", "firmware-image", "telnet" ], "url": "https://github.com/Crymeiriver/LS150", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Independent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws.", "description_language": "bilingual", "description_zh": "独立的物联网安全研究、漏洞披露与概念验证，重点涉及固件分析、硬件接口及密码学缺陷。", "full_name": "BadChemical/IoT-Vulnerability-Research-Public", "id": "scan-1208003649", "license": null, "observed_at": "2026-10-16T10:47:51.917348Z", "pushed_at": "2026-10-01T20:56:41Z", "readme_sha256": "42bcc2cf52573cb9f3ba5e64da0fdada8d7706b86f0172d733101ee9d00bf9cd", "readme_url": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/README.md", "stars": 17, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A Claude Code skill for comprehensive UEFI/BIOS firmware security vulnerability analysis. Distills years of BIOS security research expertise into reusable AI capabilities, covering firmware image parsing, deep decompression, microcode extraction, certificate auditing, and final report generation.", "description_language": "bilingual", "description_zh": "为 Claude Code 定制的 UEFI/BIOS 固件安全漏洞分析技能，将资深 BIOS 安全研究经验整理为可复用的 AI 能力，覆盖固件镜像解析、深度解压、微码提取、证书审计到最终报告输出的完整流程。", "full_name": "MikeWuPing/bios-security-analysis", "id": "scan-1258106719", "license": "MIT", "observed_at": "2026-10-16T10:47:52.066543Z", "pushed_at": "2026-06-03T09:32:12Z", "readme_sha256": "e2051fa43a72a0abd80e9f10fe81aeec9a625bfb16a57e3ec74ecde396abdf2f", "readme_url": "https://github.com/MikeWuPing/bios-security-analysis/blob/main/README.md", "stars": 17, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/MikeWuPing/bios-security-analysis", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": " *Features:* *Real-time WiFi threat detection* *4 targeted counter-attack methods* (Karma poisoning, Evil twin disruption, etc.) - *Threat monitoring* - packet analysis - *Coreymillia & GitHub Copilot Created* - *Based on:* Bruce firmware by @pr3y & team - *Inspiration:* Evil-Cardputer by @7h30th3r0n3 - Feel free to use, modify, and distribute", "description_language": "bilingual", "description_zh": "功能：实时 Wi-Fi 威胁检测；4 种定向反击方法（Karma 投毒、干扰 Evil Twin 等）；威胁监控；数据包分析。由 Coreymillia 与 GitHub Copilot 创建。基于 @pr3y 及其团队的 Bruce 固件，灵感来自 @7h30th3r0n3 的 Evil-Cardputer。可自由使用、修改和分发。", "full_name": "Coreymillia/Shark-Bait-add-on-Bruce-firmware-M5stackc-plus-", "id": "scan-1074985230", "license": null, "observed_at": "2026-10-16T10:47:52.202787Z", "pushed_at": "2025-10-15T00:44:35Z", "readme_sha256": "d849f4c0b8607076b4ff2d8dfe1e29ffbfec9a491b40e54bddc06f3cf4b3cf19", "readme_url": "https://github.com/Coreymillia/Shark-Bait-add-on-Bruce-firmware-M5stackc-plus-/blob/main/README.md", "stars": 16, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/Coreymillia/Shark-Bait-add-on-Bruce-firmware-M5stackc-plus-", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "This tool provides detailed analysis of changes between iOS firmware versions and their potential impact on device functionality.", "description_language": "bilingual", "description_zh": "详细分析 iOS 固件版本间的变化及其对设备功能潜在影响的工具。", "full_name": "TermuxHackz/Enhanced-IPSW-Firmware-Analysis-Tool", "id": "scan-882851874", "license": "GPL-2.0", "observed_at": "2026-10-16T10:47:52.359048Z", "pushed_at": "2024-11-04T13:17:50Z", "readme_sha256": "192da91e34d50f2e3de5b3de90a247e9b45a354eeb739db1ed6bd41d62443419", "readme_url": "https://github.com/TermuxHackz/Enhanced-IPSW-Firmware-Analysis-Tool/blob/master/README.md", "stars": 15, "targets": [ "app", "firmware" ], "topics": [ "analysis", "anonyminhack5", "compare", "dmg", "firmware", "gui", "ios", "iphone", "ipsw-api", "ipsw-download", "ipsw-firmware", "python", "tkinter" ], "url": "https://github.com/TermuxHackz/Enhanced-IPSW-Firmware-Analysis-Tool", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "An open-source AI assisted firmware analysis tool", "description_language": "bilingual", "description_zh": "开源的 AI 辅助固件分析工具。", "full_name": "ander1044/wairz", "id": "scan-1176806198", "license": "AGPL-3.0", "observed_at": "2026-10-16T10:47:52.590449Z", "pushed_at": "2026-03-05T20:01:43Z", "readme_sha256": "8288496a17341dd3ba08427b5ddf0b9dbec8ec62d26a436bbbfd5853af43b9cb", "readme_url": "https://github.com/ander1044/wairz/blob/main/README.md", "stars": 14, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/ander1044/wairz", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Mimojas Firmware Toolkit for unpacking and analysis firmware images", "description_language": "bilingual", "description_zh": "Mimoja 的固件工具集，用于解包与分析固件镜像。", "full_name": "Mimoja/MFT", "id": "scan-218334677", "license": "AGPL-3.0", "observed_at": "2026-10-16T10:47:52.461398Z", "pushed_at": "2020-05-23T13:05:13Z", "readme_sha256": "90ae800274cd25bdbcc4fd45e4357a6e5d44813879f3bce6b2a0ac1571a2c691", "readme_url": "https://github.com/Mimoja/MFT/blob/master/Readme.md", "stars": 14, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/Mimoja/MFT", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Python utility for dumping and patching SPI firmware to remove supported BIOS and UEFI passwords.", "description_language": "bilingual", "description_zh": "用于转储和修补 SPI 固件的 Python 工具，可移除受支持的 BIOS 和 UEFI 密码。", "full_name": "numbpill3d/spi_flash_auto_unlocker", "id": "scan-1037773902", "license": "MIT", "observed_at": "2026-10-16T01:36:20.798408Z", "pushed_at": "2026-10-05T03:35:08Z", "readme_sha256": "fd40c0d505c53d1728e58084229faf43cf20b86c20413bc933ce2e1d1b168536", "readme_url": "https://github.com/numbpill3d/spi_flash_auto_unlocker/blob/main/README.md", "stars": 14, "targets": [ "firmware" ], "topics": [ "bios", "firmware-analysis", "flashrom", "hardware-security", "password-recovery", "python", "security-research", "spi-flash", "uefi" ], "url": "https://github.com/numbpill3d/spi_flash_auto_unlocker", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A BinaryNinja loader plugin for MTK Preloaders and Little Kernels", "description_language": "bilingual", "description_zh": "用于加载 MTK Preloader 和 Little Kernel 的 Binary Ninja 插件。", "full_name": "osecurio/mtkview", "id": "scan-1189040273", "license": "MIT", "observed_at": "2026-10-16T01:36:20.950733Z", "pushed_at": "2026-10-08T18:32:48Z", "readme_sha256": "2a042622c3d8cd625942acc6eaeb2d009dce41609f20d1484f24687799e9c6e2", "readme_url": "https://github.com/osecurio/mtkview/blob/dev/README.md", "stars": 14, "targets": [ "binary", "firmware" ], "topics": [ "binary", "binaryninja", "binaryninja-plugin", "firmware-analysis", "mediatek", "reverse-engineering" ], "url": "https://github.com/osecurio/mtkview", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.", "description_language": "bilingual", "description_zh": "在 CI 流水线中通过仿真 IoT 固件镜像执行自动化动态安全分析。", "full_name": "OTARIS/FirmwareCheck", "id": "scan-387403525", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:20.873680Z", "pushed_at": "2021-07-19T12:37:12Z", "readme_sha256": "d51af154512925765d71e608302dd7c57c5af593a8accc3b92020401dbf84bcd", "readme_url": "https://github.com/OTARIS/FirmwareCheck/blob/main/README.md", "stars": 14, "targets": [ "firmware" ], "topics": [ "buildroot", "ci", "devops", "devsecops", "drone-ci", "dynamic-analysis", "emulation", "firmware-analysis", "qemu", "secdevops", "security", "security-audit" ], "url": "https://github.com/OTARIS/FirmwareCheck", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A prototype of taint-style vulnerablity discovery method in embedded firmware (SinkTaint), a precise a novel taint-style vulnerability discovery method by employsing backtracking and constraint analysis to achieve high precision.", "description_language": "bilingual", "description_zh": "嵌入式固件污点式漏洞发现方法 SinkTaint 的原型。这一新方法通过回溯与约束分析实现高精度的漏洞发现。", "full_name": "Bin2Own/SinkTaint", "id": "scan-622424020", "license": null, "observed_at": "2026-10-16T10:47:52.696414Z", "pushed_at": "2025-10-19T08:03:27Z", "readme_sha256": "01e4c3cbcd758f65db680a7d39a10d63e609a4c8ba1d28ab4902f92d6753c164", "readme_url": "https://github.com/Bin2Own/SinkTaint/blob/main/README.md", "stars": 13, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/Bin2Own/SinkTaint", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse analysis and documentation of VEX Robotics internal firmware and APIs.", "description_language": "bilingual", "description_zh": "VEX Robotics 内部固件与 API 的逆向分析及文档。", "full_name": "cetio/VEXAPI", "id": "scan-724918681", "license": "Apache-2.0", "observed_at": "2026-10-16T10:47:52.601301Z", "pushed_at": "2026-09-11T22:49:39Z", "readme_sha256": "74feeca55c24b5366d91900a7ba2e71ca84c58b28d9385436c452e5e055e8593", "readme_url": "https://github.com/cetio/VEXAPI/blob/main/README.md", "stars": 13, "targets": [ "firmware" ], "topics": [ "reverse-engineering", "robotics", "vex" ], "url": "https://github.com/cetio/VEXAPI", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Analysis of a Hanover Displays flip-dot display firmware", "description_language": "bilingual", "description_zh": "Hanover Displays 翻点显示屏固件的分析。", "full_name": "furrtek/HanoverFlipDot", "id": "scan-105703547", "license": "Unlicense", "observed_at": "2026-10-16T10:47:52.889497Z", "pushed_at": "2017-10-03T23:15:29Z", "readme_sha256": "e1604a1defb17dc525e4693d0929686fad303d0610da9ee5de25d29a78b72ab6", "readme_url": "https://github.com/furrtek/HanoverFlipDot/blob/master/README.md", "stars": 13, "targets": [ "binary", "firmware" ], "topics": [ "6502", "assembly", "control-board", "disassembly", "display", "embedded", "firmware", "flipdots", "hanover", "pixel", "reverse-engineering" ], "url": "https://github.com/furrtek/HanoverFlipDot", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Deterministic firmware-to-exploit evidence engine. Drop a firmware blob, get hash-anchored findings with SARIF + CycloneDX SBOM + verified exploit chains.", "description_language": "bilingual", "description_zh": "从固件到漏洞利用的确定性证据引擎。输入固件二进制数据，即可获得通过哈希锚定的发现、SARIF、CycloneDX SBOM 及已验证的漏洞利用链。", "full_name": "R00T-Kim/SCOUT", "id": "scan-1128247870", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:21.063188Z", "pushed_at": "2026-06-08T01:54:52Z", "readme_sha256": "7aff915276de6fe6414ed5a909572f1e251b05416c6ef0fbfff122c77329c00e", "readme_url": "https://github.com/R00T-Kim/SCOUT/blob/main/README.md", "stars": 13, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "cyclonedx", "embedded-security", "evidence-chain", "exploit-chain", "firmware-analysis", "firmware-security", "ghidra", "iot-security", "mcp", "pcode", "reverse-engineering", "sarif", "sbom", "security-automation", "slsa", "static-analysis", "vex", "vulnerability-scanner" ], "url": "https://github.com/R00T-Kim/SCOUT", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Next-Generation Firmware Analysis Toolkit. A hybrid Rust/Python toolkit for deep firmware analysis, extraction, and vulnerability discovery.", "description_language": "bilingual", "description_zh": "下一代固件分析工具包。采用 Rust/Python 混合实现，支持深入固件分析、提取和漏洞发现。", "full_name": "ismailtsdln/firmalyzer", "id": "scan-1134565844", "license": "MIT", "observed_at": "2026-10-16T01:36:21.116247Z", "pushed_at": "2026-01-15T09:27:27Z", "readme_sha256": "ce62a0e56e68984851ebf6acbac9a000014a80b07e96ba504b9214bb04d6d892", "readme_url": "https://github.com/ismailtsdln/firmalyzer/blob/main/README.md", "stars": 12, "targets": [ "firmware" ], "topics": [ "firmware", "firmware-analysis", "firmware-tools", "reverse-engineering" ], "url": "https://github.com/ismailtsdln/firmalyzer", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering Lenovo IdeaPad Gaming 3 15ARH05 firmware: BIOS extraction, AMD PSP analysis, QEMU tracing, IFR recovery, and hidden Advanced menu research.", "description_language": "bilingual", "description_zh": "联想 IdeaPad Gaming 3 15ARH05 固件的逆向工程：BIOS 提取、AMD PSP 分析、QEMU 跟踪、IFR 恢复及隐藏高级菜单研究。", "full_name": "root-hunter/lenovo_bios", "id": "scan-1339751761", "license": "MIT", "observed_at": "2026-10-16T10:47:52.905977Z", "pushed_at": "2026-08-19T23:48:55Z", "readme_sha256": "d6dfc62d56afe9008e789f00076d2da86cc50c67458c72010f6e9a42ca13a5c8", "readme_url": "https://github.com/root-hunter/lenovo_bios/blob/main/README.md", "stars": 12, "targets": [ "firmware" ], "topics": [ "bios-mod", "bios-modification", "firmware", "hardware-hacking", "ideapad-gaming-3", "insydeh2o", "lenovo-bios", "qemu", "srep", "uefi", "uefi-boot" ], "url": "https://github.com/root-hunter/lenovo_bios", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Multi-tool RF analysis firmware for M5Stack Cardputer - WiFi scanner, BLE scanner, ultrasonic detector, signal mapper, and tracker detector", "description_language": "bilingual", "description_zh": "适用于 M5Stack Cardputer 的多功能射频分析固件：Wi-Fi 扫描器、BLE 扫描器、超声波检测器、信号测绘工具及追踪器检测器。", "full_name": "ByteHub-1337/SignalRF", "id": "scan-1147193845", "license": "MIT", "observed_at": "2026-10-16T10:47:52.901045Z", "pushed_at": "2026-02-01T11:12:45Z", "readme_sha256": "46ae05ca029266aa036b9701da4d9a3e627fcdb2056c76bb6c574ade1b458d00", "readme_url": "https://github.com/ByteHub-1337/SignalRF/blob/main/README.md", "stars": 11, "targets": [ "firmware" ], "topics": [ "airtag-detector", "bluetooth", "cardputer", "esp32", "m5stack", "rf-analysis", "wifi-scanner" ], "url": "https://github.com/ByteHub-1337/SignalRF", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "FWRF is a open source tool for firmware web-side analysis.", "description_language": "bilingual", "description_zh": "FWRF 是用于固件 Web 端分析的开源工具。", "full_name": "Ganapati/Firmware_web_rce_finder", "id": "scan-41506630", "license": null, "observed_at": "2026-10-16T10:47:52.744794Z", "pushed_at": "2015-08-27T19:26:49Z", "readme_sha256": "1919af4231fbb6b262eafe5418417720662ec07fc96da02268f3a9e903fec285", "readme_url": "https://github.com/Ganapati/Firmware_web_rce_finder/blob/master/README.md", "stars": 11, "targets": [ "firmware", "website" ], "topics": [], "url": "https://github.com/Ganapati/Firmware_web_rce_finder", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Analysis and firmware suggestion for cheap chinese USB2CAN adapter based on STM32F103", "description_language": "bilingual", "description_zh": "针对基于 STM32F103 的低价国产 USB2CAN 适配器的分析与固件建议。", "full_name": "NerdyProjects/usb2can_stm32f103", "id": "scan-113997748", "license": null, "observed_at": "2026-10-16T10:47:52.984113Z", "pushed_at": "2017-12-12T14:09:48Z", "readme_sha256": "70c66ec78be7f5d43fecc22314ff7bde74d4a21868ac571659c5392dbe4cb390", "readme_url": "https://github.com/NerdyProjects/usb2can_stm32f103/blob/master/README.md", "stars": 11, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/NerdyProjects/usb2can_stm32f103", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering the Shure MV7: vendor HID console, PSoC 4 firmware, ADAU1761 SigmaDSP, and the firmware update protocol", "description_language": "bilingual", "description_zh": "Shure MV7 的逆向工程：厂商 HID 控制台、PSoC 4 固件、ADAU1761 SigmaDSP 及固件更新协议。", "full_name": "schlarpc/shure-mv7-firmware-re", "id": "scan-1335575731", "license": "MIT", "observed_at": "2026-10-16T10:48:03.682717Z", "pushed_at": "2026-08-16T23:17:16Z", "readme_sha256": "59cfc0975b2ad7f4ad70aac2ab1a64c46f7d588426d1d3f6e6dba4296acf14e2", "readme_url": "https://github.com/schlarpc/shure-mv7-firmware-re/blob/main/README.md", "stars": 11, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/schlarpc/shure-mv7-firmware-re", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "UEFI firmware analysis & research on known vulnerabilities in early boot components", "description_language": "bilingual", "description_zh": "UEFI 固件分析，以及对早期启动组件中已知漏洞的研究。", "full_name": "TheMalwareGuardian/UEFI-Firmware-Analysis", "id": "scan-946177064", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:21.184448Z", "pushed_at": "2026-07-10T07:19:51Z", "readme_sha256": "1b933e1d3789eb11130d66c26b691ba393780c9eaca943f0f8596fd734d5ecee", "readme_url": "https://github.com/TheMalwareGuardian/UEFI-Firmware-Analysis/blob/main/README.md", "stars": 11, "targets": [ "firmware" ], "topics": [ "chipsec", "firmware-analysis", "uefi" ], "url": "https://github.com/TheMalwareGuardian/UEFI-Firmware-Analysis", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Notes and Python tools for the Steam Controller 2 (Triton): HID reports, the firmware-update protocol, and firmware-blob analysis.", "description_language": "bilingual", "description_zh": "Steam Controller 2（Triton）的笔记与 Python 工具：HID 报告、固件更新协议及固件二进制文件分析。", "full_name": "CouchTurtle/sc2-research", "id": "scan-1260183372", "license": "MIT", "observed_at": "2026-10-16T10:47:53.190851Z", "pushed_at": "2026-08-11T20:40:09Z", "readme_sha256": "8a6948e26326186a776579a11a0ba100c7ac909469efee24b16112334ff5d329", "readme_url": "https://github.com/CouchTurtle/sc2-research/blob/main/README.md", "stars": 10, "targets": [ "firmware" ], "topics": [ "embedded", "firmware", "hid", "nordic-nrf52840", "proteus", "python", "reverse-engineering", "steam-controller", "steam-controller-2", "triton", "valve", "zephyr-rtos" ], "url": "https://github.com/CouchTurtle/sc2-research", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "DIRK is open-source Red/Blue Team firmware for the M5Stack Cardputer ADV, featuring dual-band Wi-Fi with LAB5 MonsterC5, Bluetooth analysis, LoRa and IR tools, GPS wardriving via the official M5Stack LoRa/GPS Cap, and authorized security-testing labs.", "description_language": "bilingual", "description_zh": "DIRK 是面向 M5Stack Cardputer ADV 的开源红蓝队固件，提供基于 LAB5 MonsterC5 的双频 Wi-Fi、蓝牙分析、LoRa 与红外工具、通过官方 M5Stack LoRa/GPS Cap 进行 GPS 无线网络巡测，以及经授权的安全测试实验环境。", "full_name": "dirky9687/DIRK", "id": "scan-1414467356", "license": "GPL-3.0", "observed_at": "2026-10-16T10:47:53.389721Z", "pushed_at": "2026-10-11T23:15:19Z", "readme_sha256": "add47eb8687798eaf3c17ebd7fffcad40eb9ea947dc4b0399e64de7a25b07507", "readme_url": "https://github.com/dirky9687/DIRK/blob/main/README.md", "stars": 10, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/dirky9687/DIRK", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware analysis and modification tools. Bypass security restrictions, install custom launchers, and safely modify locked-down Chinese projector devices with comprehensive backup and recovery scripts.", "description_language": "bilingual", "description_zh": "固件分析与修改工具。通过完整的备份与恢复脚本，绕过安全限制、安装自定义启动器，并安全修改受到锁定限制的中国投影设备。", "full_name": "kolezka/NL5H00X", "id": "scan-1019680989", "license": "MIT", "observed_at": "2026-10-16T10:47:53.355967Z", "pushed_at": "2026-09-26T16:14:23Z", "readme_sha256": "a6f931734ed8a79b4146af34c69bf99870ef57590190c75d5c749b293c80c9dd", "readme_url": "https://github.com/kolezka/NL5H00X/blob/main/README.md", "stars": 10, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/kolezka/NL5H00X", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Hacking TrendChip Firmware FG824CD (ADSL modem/router *****v4)", "description_language": "bilingual", "description_zh": "分析 TrendChip FG824CD 固件（ADSL 调制解调器/路由器 *****v4）。", "full_name": "MilkAlien/tcrevenge", "id": "scan-317557315", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:37.697307Z", "pushed_at": "2021-01-11T23:06:20Z", "readme_sha256": "9653f77a16c95d81c147f23ce216b64436a21afc8a4a7efd489d7e9c49b948c9", "readme_url": "https://github.com/MilkAlien/tcrevenge/blob/master/README.md", "stars": 10, "targets": [ "firmware" ], "topics": [ "binwalk", "fg824cd", "firmware-image", "firmware-tools", "sercomm", "tcrevenge", "trendchip-firmware" ], "url": "https://github.com/MilkAlien/tcrevenge", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Advanced offline firmware triage and analysis tool for routers, IoT devices, DVRs, IP cameras, and embedded Linux firmware.", "description_language": "bilingual", "description_zh": "高级离线固件初步评估与分析工具，面向路由器、IoT 设备、DVR、IP 摄像机和嵌入式 Linux 固件。", "full_name": "Nester420/Firmware-Hunter-Pro", "id": "scan-1245132676", "license": "MIT", "observed_at": "2026-10-16T01:36:21.363766Z", "pushed_at": "2026-05-21T01:29:51Z", "readme_sha256": "f68f7f55cdcfc3fed26bcce1779db39bd0c8f91f94401b08e51a702cf2f71c2b", "readme_url": "https://github.com/Nester420/Firmware-Hunter-Pro/blob/main/README.md", "stars": 10, "targets": [ "firmware" ], "topics": [ "binwalk", "digitalforensics", "embeded-linux", "embeded-systems", "firmware-analysis", "firmware-tools", "hardwarehacking", "iotsecurity", "python", "routerhacking", "securityresearch", "yara-rules" ], "url": "https://github.com/Nester420/Firmware-Hunter-Pro", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Packaged Windows version of binwalk: https://github.com/ReFirmLabs/binwalk/releases/tag/v3.1.0", "description_language": "bilingual", "description_zh": "binwalk 的 Windows 打包版本：https://github.com/ReFirmLabs/binwalk/releases/tag/v3.1.0", "full_name": "chi111i/binwalk_for_windows", "id": "scan-916477510", "license": null, "observed_at": "2026-10-16T01:37:37.733174Z", "pushed_at": "2025-01-14T07:32:05Z", "readme_sha256": "0cf64021868e0dca95006246a67527f33364e06ee2f43d3963b5f2cfd2762df1", "readme_url": "https://github.com/chi111i/binwalk_for_windows/blob/main/README.md", "stars": 9, "targets": [ "firmware" ], "topics": [ "binwalk" ], "url": "https://github.com/chi111i/binwalk_for_windows", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "LLM-powered automated reverse-engineering engine for vendor-abandoned hardware and software", "description_language": "bilingual", "description_zh": "由大语言模型驱动的自动化逆向工程引擎，面向厂商已放弃维护的硬件和软件。", "full_name": "DatanoiseTV/revenant", "id": "scan-1275527131", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:11.037946Z", "pushed_at": "2026-07-05T12:45:21Z", "readme_sha256": "3b8942fb847eb380d340e9e08adcaacdfdcf61bdfb4200c68a315f271334403a", "readme_url": "https://github.com/DatanoiseTV/revenant/blob/main/README.md", "stars": 9, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "decompiler", "devicetree", "embedded", "firmware", "ghidra", "llm", "radare2", "reverse-engineering", "security" ], "url": "https://github.com/DatanoiseTV/revenant", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "“Full SAAB/GM diagnostic suite with Python engine, CAN tools, GDS2/Tech2Win integrations, SPS workflows, firmware packages, drivers, VM environments, documentation, and automation scripts. Includes UI/TUI modules, J2534 support, data analysis tools, and complete diagnostic/tuning workflows.”", "description_language": "bilingual", "description_zh": "完整的 SAAB/GM 诊断套件，包含 Python 引擎、CAN 工具、GDS2/Tech2Win 集成、SPS 工作流、固件包、驱动程序、虚拟机环境、文档与自动化脚本。还包括 UI/TUI 模块、J2534 支持、数据分析工具，以及完整的诊断与调校工作流。", "full_name": "K1LLLAGT/SAAB_SUITE", "id": "scan-1224910934", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:53.766389Z", "pushed_at": "2026-10-01T18:54:09Z", "readme_sha256": "e6f1699f0e505c10c08e7517bb8159175ffbfa18a283bbfd795975e078d561f1", "readme_url": "https://github.com/K1LLLAGT/SAAB_SUITE/blob/main/README.md", "stars": 9, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/K1LLLAGT/SAAB_SUITE", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "OnePlus Watch 3 (OPWWE251) Firmware Analysis, DTS Dump & Kernel Symbols", "description_language": "bilingual", "description_zh": "OnePlus Watch 3（OPWWE251）的固件分析、DTS 转储与内核符号。", "full_name": "zekog/oneplus-watch-3-firmware-dump", "id": "scan-1412203943", "license": null, "observed_at": "2026-10-16T10:47:53.713179Z", "pushed_at": "2026-10-11T01:05:42Z", "readme_sha256": "16692e54d695d2eeb4c2e3b71eae370d7d616365a64973579e16d0bfdbf16725", "readme_url": "https://github.com/zekog/oneplus-watch-3-firmware-dump/blob/main/README.md", "stars": 9, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/zekog/oneplus-watch-3-firmware-dump", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A firmware analysis tool for lightweight IoT firmware", "description_language": "bilingual", "description_zh": "面向轻量级物联网固件的固件分析工具。", "full_name": "daumbrella/Gerbil", "id": "scan-195548660", "license": null, "observed_at": "2026-10-16T10:47:53.766497Z", "pushed_at": "2019-07-06T15:26:55Z", "readme_sha256": "4f2d10f49d230eb614d1e46ed84a21b2324f960c93ac95909583e4364646bd5e", "readme_url": "https://github.com/daumbrella/Gerbil/blob/master/README.md", "stars": 8, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/daumbrella/Gerbil", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Integrates Firmadyne into FACT", "description_language": "bilingual", "description_zh": "将 Firmadyne 集成到 FACT。", "full_name": "fkie-cad/FACT_firmadyne_analysis_plugin", "id": "scan-108366644", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:21.639654Z", "pushed_at": "2018-07-04T13:16:50Z", "readme_sha256": "78956cc502d46f7a16586732b5267c15e7351c25965a58b1dd4860b2ce26aa65", "readme_url": "https://github.com/fkie-cad/FACT_firmadyne_analysis_plugin/blob/master/README.md", "stars": 8, "targets": [ "firmware" ], "topics": [ "firmadyne", "firmware-analysis", "firmware-tools" ], "url": "https://github.com/fkie-cad/FACT_firmadyne_analysis_plugin", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Static analysis and reverse engineering tool for iOS/macOS firmware files built for my final-year University project", "description_language": "bilingual", "description_zh": "为大学毕业设计构建的 iOS/macOS 固件文件静态分析与逆向工程工具。", "full_name": "h3adshotzz/htoolv3", "id": "scan-562835739", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:54.021200Z", "pushed_at": "2023-06-23T20:49:38Z", "readme_sha256": "db2403986bb0211466264e832d74d3fc785b6986d02d9eb16c3c4f8346d20cbc", "readme_url": "https://github.com/h3adshotzz/htoolv3/blob/main/README.md", "stars": 8, "targets": [ "app", "firmware" ], "topics": [], "url": "https://github.com/h3adshotzz/htoolv3", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "immune Guard agent application", "description_language": "bilingual", "description_zh": "immune Guard 代理应用。", "full_name": "immune-gmbh/agent", "id": "scan-425019002", "license": "MIT", "observed_at": "2026-10-16T01:36:21.783679Z", "pushed_at": "2023-12-19T00:12:47Z", "readme_sha256": "3fb8f801eef6f3930438dc22cd6c0917ac7ee50f92926115cdade2365fbd309d", "readme_url": "https://github.com/immune-gmbh/agent/blob/master/README.md", "stars": 8, "targets": [ "app", "firmware" ], "topics": [ "firmware-analysis", "remote-attestation" ], "url": "https://github.com/immune-gmbh/agent", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "AI-assisted embedded and IoT development platform for hardware design, firmware generation, and local project analysis.", "description_language": "bilingual", "description_zh": "面向嵌入式与物联网开发的 AI 辅助平台，用于硬件设计、固件生成和本地工程分析。", "full_name": "LEO-Ricardo20/MetaCore-Studio", "id": "scan-1187749300", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:54.401986Z", "pushed_at": "2026-08-28T08:09:42Z", "readme_sha256": "70629ab0c89bb4b5864ea65e0f84ddff9935d55a68173bae77d6ebf2aca884cc", "readme_url": "https://github.com/LEO-Ricardo20/MetaCore-Studio/blob/main/README.md", "stars": 8, "targets": [ "firmware" ], "topics": [ "arduino", "artificial-intelligence", "code-generation", "embedded-systems", "esp32", "firmware", "iot", "platformio", "react", "stm32", "typescript" ], "url": "https://github.com/LEO-Ricardo20/MetaCore-Studio", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Comprehensive pentest and reverse engineering guide for PAX Linux-based Point of Sale (PoS) merchant applications — firmware analysis, network interception, and app reversing.", "description_language": "bilingual", "description_zh": "面向基于 Linux 的 PAX 销售终端（PoS）商户应用的全面渗透测试与逆向工程指南，涵盖固件分析、网络拦截和应用逆向。", "full_name": "omarelshopky/pax-pos-app-pentest-guide", "id": "scan-1078764227", "license": null, "observed_at": "2026-10-16T01:36:21.515671Z", "pushed_at": "2025-12-08T14:35:26Z", "readme_sha256": "c96701a49be261b4305bdf82a5173a4f9d6a11feaf445a1889ab46079d6abfbb", "readme_url": "https://github.com/omarelshopky/pax-pos-app-pentest-guide/blob/main/README.md", "stars": 8, "targets": [ "app", "firmware" ], "topics": [ "firmware-analysis", "network-interception", "pax", "pentest", "pos", "reverse-engineering" ], "url": "https://github.com/omarelshopky/pax-pos-app-pentest-guide", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Static firmware analysis - for symbol files generated by puncover and as an experiment to do it all in-browser on just an debug ELF file", "description_language": "bilingual", "description_zh": "静态固件分析：针对 puncover 生成的符号文件，同时尝试仅凭调试 ELF 文件在浏览器中完成全部分析。", "full_name": "paulwuertz/pexplorer", "id": "scan-1002185536", "license": "MIT", "observed_at": "2026-10-16T01:36:21.854089Z", "pushed_at": "2026-10-12T15:20:48Z", "readme_sha256": "80c18d16c25ab8fbf72a3405e9da28ac3484c3da981f5bd8669ae3f0bfee7da7", "readme_url": "https://github.com/paulwuertz/pexplorer/blob/main/README.md", "stars": 8, "targets": [ "binary", "firmware", "website" ], "topics": [ "elf", "firmware-analysis", "firmware-tools", "mapfile", "static-analysis", "zephyr-rtos" ], "url": "https://github.com/paulwuertz/pexplorer", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Review, resources, and pre-lab exercises for the SANS SEC556 IoT Penetration Testing course, covering hardware hacking, firmware analysis, wireless protocols and SDR.", "description_language": "bilingual", "description_zh": "SANS SEC556 IoT 渗透测试课程的复习资料、资源和实验预习练习，涵盖硬件安全研究、固件分析、无线协议和软件定义无线电。", "full_name": "TheMalwareGuardian/SANS-SEC556-IoT-Penetration-Testing", "id": "scan-1218952318", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:21.894399Z", "pushed_at": "2026-05-25T14:03:11Z", "readme_sha256": "45f1fea5fcf41ddf6ae392f6d0fc928d7e2502e2fded250ca0ba4d201956aba6", "readme_url": "https://github.com/TheMalwareGuardian/SANS-SEC556-IoT-Penetration-Testing/blob/main/README.md", "stars": 8, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "hardware-hacking", "iot-security", "sans-institute", "sec556", "zigbee" ], "url": "https://github.com/TheMalwareGuardian/SANS-SEC556-IoT-Penetration-Testing", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "DMA Lab - Hardware-level anti-cheat research, firmware configs, FPGA guides and PCILeech resources", "description_language": "bilingual", "description_zh": "DMA Lab：硬件层面的反作弊研究、固件配置、FPGA 指南及 PCILeech 资源。", "full_name": "VimRev/dma-lab", "id": "scan-1227776688", "license": "MIT", "observed_at": "2026-10-18T14:36:51.546240Z", "pushed_at": "2026-05-08T19:51:24Z", "readme_sha256": "146b957e4313da7105be21c93f9991ebb00d34c9f174bd6dae1f2e48fca08f05", "readme_url": "https://github.com/VimRev/dma-lab/blob/4769e67d081ee8dc00e6ed0d10440be298851a46/README.md", "stars": 8, "targets": [ "binary", "firmware", "game" ], "topics": [ "anti-cheat", "dma", "fpga", "game-hacking", "hardware", "kernel-security", "leechcore", "memory-forensics", "memprocfs", "pcileech", "reverse-engineering" ], "url": "https://github.com/VimRev/dma-lab", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Explore embedded & IoT security: secure firmware, device hardening, encryption, and vulnerability analysis. Practical examples for secure IoT development.", "description_language": "bilingual", "description_zh": "探索嵌入式与物联网安全：安全固件、设备加固、加密及漏洞分析，并提供安全物联网开发的实用示例。", "full_name": "aw-junaid/embedded-and-iot-security", "id": "scan-932880264", "license": "GPL-3.0", "observed_at": "2026-10-16T10:47:54.768565Z", "pushed_at": "2026-07-16T18:29:40Z", "readme_sha256": "56637fa6e0344fd47fb7d07d7a7062483ef703fd3bd1eff88829da4860c5e461", "readme_url": "https://github.com/aw-junaid/embedded-and-iot-security/blob/main/README.md", "stars": 7, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/aw-junaid/embedded-and-iot-security", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Accelerating Command Injection Vulnerability Discovery in Embedded Firmware with Static Backtracking Analysis", "description_language": "bilingual", "description_zh": "通过静态回溯分析加速发现嵌入式固件中的命令注入漏洞。", "full_name": "Bin2Own/CINDY", "id": "scan-550579727", "license": null, "observed_at": "2026-10-16T10:47:54.384077Z", "pushed_at": "2023-04-12T08:20:22Z", "readme_sha256": "b0456f0eb0273addb32087082f255394e0b8255a3758d246c1728b1d17294853", "readme_url": "https://github.com/Bin2Own/CINDY/blob/main/README.md", "stars": 7, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/Bin2Own/CINDY", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": " Platform: Windows/Mac/Linux. Scripting: Various, no restrictions; customized as needed. Tasks: Desktop checks, software cracking, AV evasion, privilege execution, firmware read/write, password checks, Wi-Fi scans, cloud security, log analysis, NLP, and data analysis in humanities/social sciences. ", "description_language": "bilingual", "description_zh": "平台：Windows/Mac/Linux。脚本语言多样、无限制，可按需定制。任务包括桌面检查、软件破解、杀毒软件规避、特权执行、固件读写、密码检查、Wi-Fi 扫描、云安全、日志分析、自然语言处理，以及人文社科数据分析。", "full_name": "Excalibra/scripts", "id": "scan-893254460", "license": null, "observed_at": "2026-10-16T10:47:55.056792Z", "pushed_at": "2026-09-30T12:06:49Z", "readme_sha256": "769763c62fc8c00165695195b411846504df951c3e0b6afd0dc259458c7a785f", "readme_url": "https://github.com/Excalibra/scripts/blob/main/README.md", "stars": 7, "targets": [ "app", "firmware" ], "topics": [], "url": "https://github.com/Excalibra/scripts", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Analysis of the update of TPM firmware", "description_language": "bilingual", "description_zh": "TPM 固件更新的分析。", "full_name": "fishilico/tpm-firmware", "id": "scan-254921829", "license": null, "observed_at": "2026-10-16T10:47:54.305880Z", "pushed_at": "2020-04-11T17:43:19Z", "readme_sha256": "45ab340699c09f03c0ef6a5733a9c152a77ed6d3a11e902625d94ae948c19105", "readme_url": "https://github.com/fishilico/tpm-firmware/blob/master/README.rst", "stars": 7, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/fishilico/tpm-firmware", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Steganography tool that extracts data from images", "description_language": "bilingual", "description_zh": "从图像中提取数据的隐写分析工具。", "full_name": "mchristou/stegtool", "id": "scan-718051341", "license": "MIT", "observed_at": "2026-10-16T01:37:37.900236Z", "pushed_at": "2024-05-17T12:13:44Z", "readme_sha256": "66469cb9fa19f04dcf05fc2b349595cd6313d0f4ca837b6813bfa5c4b6ff1c55", "readme_url": "https://github.com/mchristou/stegtool/blob/main/README.md", "stars": 7, "targets": [ "firmware" ], "topics": [ "binwalk", "outguess", "steganography", "steghide", "stego" ], "url": "https://github.com/mchristou/stegtool", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Purple is a dual-mode Cardputer ADV firmware for Red Team and Blue Team field workflows, combining wireless recon, RF visibility, GPS tools, IR/NFC utilities, and on-device analysis in a compact handheld platform.", "description_language": "bilingual", "description_zh": "Purple 是用于红蓝队现场工作流的双模式 Cardputer ADV 固件，将无线侦察、射频观测、GPS 工具、红外／NFC 实用工具及设备端分析集成在紧凑的手持平台中。", "full_name": "RLee203/Purple", "id": "scan-1245925053", "license": "MIT", "observed_at": "2026-10-16T10:47:54.930173Z", "pushed_at": "2026-05-21T20:12:49Z", "readme_sha256": "dac181adf77472fde62e90de95a093d6c90a735cf164afaff028dd41b314188d", "readme_url": "https://github.com/RLee203/Purple/blob/main/README.md", "stars": 7, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/RLee203/Purple", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware extraction toolkit - unpacks and enumerates embedded images for IoT security analysis.", "description_language": "bilingual", "description_zh": "固件提取工具集，可解包并枚举嵌入式镜像，用于物联网安全分析。", "full_name": "5h4d0wn1k/i1-firmware-extract", "id": "scan-1359118632", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:55.547262Z", "pushed_at": "2026-09-22T23:27:07Z", "readme_sha256": "e66bec6da772da328e5cd8522faecb3fab3414538fe9fdc40a20a87773b1d390", "readme_url": "https://github.com/5h4d0wn1k/i1-firmware-extract/blob/master/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [ "bluetooth-le", "can-bus", "cybersecurity", "educational", "iot-security", "modbus", "mqtt", "python", "zigbee" ], "url": "https://github.com/5h4d0wn1k/i1-firmware-extract", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "(Undergraduate Capstone Project) Yasat - Yet Another Static Analysis Tool to detect cryptographic API misuses in firmware", "description_language": "bilingual", "description_zh": "本科毕业设计 Yasat（Yet Another Static Analysis Tool）：用于检测固件中密码学 API 误用的静态分析工具。", "full_name": "bluesadi/Yasat", "id": "scan-549446279", "license": "MIT", "observed_at": "2026-10-16T10:47:55.782596Z", "pushed_at": "2023-06-04T08:37:23Z", "readme_sha256": "ab27f36bf5d19240735bfed1fce384cea71d608f1f183e96900a6d2c9ea23a66", "readme_url": "https://github.com/bluesadi/Yasat/blob/main/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/bluesadi/Yasat", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "writeups! #JUSTCTF", "description_language": "bilingual", "description_zh": "题解！#JUSTCTF", "full_name": "cHo0s3N/JustCTF", "id": "scan-212864283", "license": null, "observed_at": "2026-10-16T01:37:38.030853Z", "pushed_at": "2019-11-22T06:16:48Z", "readme_sha256": "28755ddd238b5c6416f9e7f3fa5d63d313b686f307c9478655a43bfceb9fea61", "readme_url": "https://github.com/cHo0s3N/JustCTF/blob/master/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [ "binwalk", "ctf-writeups", "docx", "forensics", "hidden-files", "justctf", "steganography" ], "url": "https://github.com/cHo0s3N/JustCTF", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A free (as in freedom) AI assisted firmware analysis tool", "description_language": "bilingual", "description_zh": "自由软件意义上的 AI 辅助固件分析工具。", "full_name": "CrimsonGlory/wairz", "id": "scan-1260097842", "license": "AGPL-3.0", "observed_at": "2026-10-16T10:47:55.295695Z", "pushed_at": "2026-10-12T20:16:19Z", "readme_sha256": "5e04ef8aae6ae8e5b6e48300f20f42c6390ff39459ed53da8766c35fd0cb09b4", "readme_url": "https://github.com/CrimsonGlory/wairz/blob/main/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/CrimsonGlory/wairz", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Automatic Firmware Analysis of Embedded Linux Devices as Preparation for Security Testing / Fuzzing", "description_language": "bilingual", "description_zh": "自动分析嵌入式 Linux 设备固件，为安全测试与模糊测试作准备。", "full_name": "efi4st/efi4st", "id": "scan-177866298", "license": "MIT", "observed_at": "2026-10-16T10:47:55.300694Z", "pushed_at": "2026-10-07T22:03:49Z", "readme_sha256": "61229f698ffaa386dbc4e2e1f52a62262597824393c3626826c23fe439761af8", "readme_url": "https://github.com/efi4st/efi4st/blob/master/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/efi4st/efi4st", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Most recent PS4 symbols by firmware for analysis and convenience", "description_language": "bilingual", "description_zh": "按固件版本整理的最新 PS4 符号，便于分析与使用。", "full_name": "hitodama/libps4-symbols", "id": "scan-45563573", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:55.212166Z", "pushed_at": "2016-04-10T17:56:10Z", "readme_sha256": "f929db37a7f8de080e6f793bfee27e0ba3258d2f92b3f2db21ec828b52db7439", "readme_url": "https://github.com/hitodama/libps4-symbols/blob/master/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/hitodama/libps4-symbols", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A security-oriented Python script with bulk image analysis and security features such as metadata scrubbing, image file analysis, GPS data check, and file renaming. ", "description_language": "bilingual", "description_zh": "面向安全的 Python 脚本，提供批量图像分析、元数据清理、图像文件分析、GPS 数据检查和文件重命名等功能。", "full_name": "jeremylaratro/PhotoSec", "id": "scan-545963471", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:38.049876Z", "pushed_at": "2026-05-11T23:03:07Z", "readme_sha256": "486b1d7bffe3a0e611a466593babc14e2cc28402eff9f14aaedcb9741d9737fc", "readme_url": "https://github.com/jeremylaratro/PhotoSec/blob/master/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [ "binwalk", "cyber-security", "cybersecurity", "exif-data-extraction", "exiftool", "file", "file-analysis", "file-security", "geo-data", "image", "opsec" ], "url": "https://github.com/jeremylaratro/PhotoSec", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": " The firmware for the Wyze Cam V3 is hosted on the website of its manufacturer for anyone to download. We plan to download the firmware and perform a variety of analysis techniques on it until we have a solid understanding of the device and/or have identified potentially exploitable vulnerabilitie", "description_language": "bilingual", "description_zh": "Wyze Cam V3 的固件托管在制造商网站上，供任何人下载。计划下载固件并运用多种分析技术，直至充分理解设备，或识别出可能被利用的漏洞。", "full_name": "msam13/wyze-cam-firmware-analysis", "id": "scan-483096219", "license": null, "observed_at": "2026-10-16T10:47:55.979826Z", "pushed_at": "2022-05-09T04:34:46Z", "readme_sha256": "3e03185b2d20f7f788eb2a87fd2ae673bf4995961ff100d0e5c439e38e44bae4", "readme_url": "https://github.com/msam13/wyze-cam-firmware-analysis/blob/main/README.md", "stars": 6, "targets": [ "firmware", "website" ], "topics": [], "url": "https://github.com/msam13/wyze-cam-firmware-analysis", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Homebrew tap for moria (firmware identification/extraction) and mithril (firmware content analysis)", "description_language": "bilingual", "description_zh": "用于 moria（固件识别／提取）和 mithril（固件内容分析）的 Homebrew 软件源。", "full_name": "nmatt0/homebrew-tap", "id": "scan-1367896393", "license": null, "observed_at": "2026-10-16T10:47:55.452193Z", "pushed_at": "2026-10-05T17:46:15Z", "readme_sha256": "75c25134780a254a58240048ee4f38c42d74d75de3db4347b49d461ebee5fc29", "readme_url": "https://github.com/nmatt0/homebrew-tap/blob/master/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/nmatt0/homebrew-tap", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Schneider Electric firmware", "description_language": "bilingual", "description_zh": "Schneider Electric 固件。", "full_name": "OlegBezverhii/SchEl-firmware", "id": "scan-674452885", "license": null, "observed_at": "2026-10-16T01:36:22.052359Z", "pushed_at": "2024-01-14T11:19:05Z", "readme_sha256": "786ca57d832cbc698823d8c443ba946a28fa14807740116ef81c649874b6974b", "readme_url": "https://github.com/OlegBezverhii/SchEl-firmware/blob/main/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [ "firmware", "firmware-analysis", "noe", "quantum", "schneider-electric", "schneider-electric-firmware" ], "url": "https://github.com/OlegBezverhii/SchEl-firmware", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Zero-G Reverse Engineering Anything & Verified Safe Rust Reconstruction for Gemini 4 Argon + Google Antigravity 2.0 (4-Mount Recon Kits, Whole-Subgraph Extraction, 10,000-Vector Differential Parity Referee)", "description_language": "bilingual", "description_zh": "面向 Gemini 4 Argon + Google Antigravity 2.0 的 Zero-G 万物逆向工程与经验证的安全 Rust 重建，包含四挂载点侦察套件、完整子图提取及 10,000 向量差分一致性裁判。", "full_name": "PNWcoastie/REA-Argonaut", "id": "scan-1416514916", "license": "MIT", "observed_at": "2026-10-16T01:36:22.063353Z", "pushed_at": "2026-10-14T06:33:48Z", "readme_sha256": "d7fecac434fdc72d3836e90d2847fff74e8224d1b3dce3060a03fe9684ecc77c", "readme_url": "https://github.com/PNWcoastie/REA-Argonaut/blob/main/README.md", "stars": 6, "targets": [ "binary", "firmware", "game" ], "topics": [ "ai-agents", "antigravity", "argon", "binary-analysis", "c-to-rust", "decompiler", "deepmind", "firmware-analysis", "gemini", "gguf", "ghidra", "il2cpp", "mcp", "mcp-server", "model-context-protocol", "reverse-engineering", "reverseengineering", "rust", "security-audit", "static-analysis" ], "url": "https://github.com/PNWcoastie/REA-Argonaut", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "unpack and repack hikvision R2 firmware files", "description_language": "bilingual", "description_zh": "解包并重新打包 Hikvision R2 固件文件。", "full_name": "renaudallard/hikvision_R2_firmware", "id": "scan-1171885861", "license": null, "observed_at": "2026-10-16T01:36:22.317789Z", "pushed_at": "2026-04-15T08:38:27Z", "readme_sha256": "738466b7983727bd8f395d7391240c67867f3b493bbef3ec9156adf95de920af", "readme_url": "https://github.com/renaudallard/hikvision_R2_firmware/blob/main/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [ "cramfs", "firmware", "firmware-analysis", "hikvision", "ip-camera", "python", "reverse-engineering", "security-camera" ], "url": "https://github.com/renaudallard/hikvision_R2_firmware", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "It is a simple ecos ROMFS unpacker for forensics and firmware analysis needs", "description_language": "bilingual", "description_zh": "简单的 eCos ROMFS 解包工具，满足取证与固件分析需求。", "full_name": "rotenkatz/ecos_romfs_unpacker", "id": "scan-66455036", "license": null, "observed_at": "2026-10-16T10:47:55.104608Z", "pushed_at": "2016-08-24T10:38:17Z", "readme_sha256": "5063ac0efcc1fd5e3db48b34fb3a40caaa90b8dba29d96aed15dbbe2fb13dd4a", "readme_url": "https://github.com/rotenkatz/ecos_romfs_unpacker/blob/master/README.md", "stars": 6, "targets": [ "firmware" ], "topics": [], "url": "https://github.com/rotenkatz/ecos_romfs_unpacker", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "VS Code extension for Intel HEX & Motorola SREC memory exploration and editing", "description_language": "bilingual", "description_zh": "用于浏览和编辑 Intel HEX 与 Motorola SREC 内存内容的 VS Code 扩展。", "full_name": "deviousprophet/vscode-hex-scope", "id": "scan-1205602761", "license": "MIT", "observed_at": "2026-10-16T01:36:22.867287Z", "pushed_at": "2026-09-30T13:07:39Z", "readme_sha256": "939e470fcdb44cad4cde75e29f8b651b3b863eab1c2e218e58ceee826c07671a", "readme_url": "https://github.com/deviousprophet/vscode-hex-scope/blob/main/README.md", "stars": 5, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "firmware-tools", "hex", "intel-hex", "motorola-srecord", "srec", "vscode-extension" ], "url": "https://github.com/deviousprophet/vscode-hex-scope", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Host-side extraction and analysis toolkit for MHI2/MHI2Q/MH2P firmware packages", "description_language": "bilingual", "description_zh": "用于在主机端提取和分析 MHI2/MHI2Q/MH2P 固件包的工具套件。", "full_name": "harman-f/MHI2-MHI2Q-MH2P-Firmware-Toolkit", "id": "scan-1402338850", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:23.157208Z", "pushed_at": "2026-10-12T07:57:20Z", "readme_sha256": "ff179f243323626f05b0567586311e6e736079c11f1065cf22806e21432f62fb", "readme_url": "https://github.com/harman-f/MHI2-MHI2Q-MH2P-Firmware-Toolkit/blob/main/README.md", "stars": 5, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "imagefs", "mh2p", "mhi2", "mhi2q", "qnx", "reverse-engineering" ], "url": "https://github.com/harman-f/MHI2-MHI2Q-MH2P-Firmware-Toolkit", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering and read-only tools for the M-VAVE ANN BlackBox: firmware, USB Audio, BLE/M-EFCS, OTA, DSP routing, and runtime internals.", "description_language": "bilingual", "description_zh": "面向 M-VAVE ANN BlackBox 的逆向工程和只读工具，涵盖固件、USB 音频、BLE/M-EFCS、OTA、DSP 路由及运行时内部机制。", "full_name": "jakino0/mvave-blackbox-reverse-engineering", "id": "scan-1366604488", "license": "MIT", "observed_at": "2026-10-16T01:36:22.555094Z", "pushed_at": "2026-09-17T23:04:18Z", "readme_sha256": "f82e2b0b53374d4117be3cdedc4e206592fb1f8bdad02ac6fa0f20b5a37a215e", "readme_url": "https://github.com/jakino0/mvave-blackbox-reverse-engineering/blob/main/README.md", "stars": 5, "targets": [ "firmware" ], "topics": [ "ann-blackbox", "bluetooth-low-energy", "dsp", "firmware-analysis", "jieli", "m-vave", "mvave", "mvave-blackbox", "reverse-engineering", "usb-audio" ], "url": "https://github.com/jakino0/mvave-blackbox-reverse-engineering", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware Region Diff", "description_language": "bilingual", "description_zh": "固件区域差异比较。", "full_name": "mtlabs-dev/fw_region_diff", "id": "scan-1235793436", "license": "MIT", "observed_at": "2026-10-16T01:36:22.451048Z", "pushed_at": "2026-05-18T05:40:59Z", "readme_sha256": "1dd54a10b4b165c16154e538517ff52179b64d634cb2df1b0d866f70aa8e5d67", "readme_url": "https://github.com/mtlabs-dev/fw_region_diff/blob/main/README.md", "stars": 5, "targets": [ "binary", "firmware" ], "topics": [ "binary-diff", "cli-tool", "embedded", "firmware", "firmware-analysis", "reverse-engineering" ], "url": "https://github.com/mtlabs-dev/fw_region_diff", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Complete reverse engineering of the Quadzilla Adrenaline diesel tuner — firmware decryption, BLE protocol, 117 parameters, decompiled code. Done entirely by AI.", "description_language": "bilingual", "description_zh": "对 Quadzilla Adrenaline 柴油调校器的完整逆向工程，涵盖固件解密、BLE 协议、117 个参数和反编译代码，全部由 AI 完成。", "full_name": "Bender1011001/quadzilla-adrenaline-reversed", "id": "scan-1179620703", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:23.181795Z", "pushed_at": "2026-09-30T19:39:21Z", "readme_sha256": "246cc9cf81db7d054ae7075f864b671916876672ce7c27590d7045a49b29a77d", "readme_url": "https://github.com/Bender1011001/quadzilla-adrenaline-reversed/blob/master/README.md", "stars": 4, "targets": [ "binary", "firmware" ], "topics": [ "arm", "automotive", "binary-analysis", "bluetooth-le", "canbus", "car-hacking", "cummins", "decompilation", "diesel", "dodge-ram", "ecu", "embedded", "firmware", "firmware-analysis", "ghidra", "reverse-engineering", "tuning" ], "url": "https://github.com/Bender1011001/quadzilla-adrenaline-reversed", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "ArubaOS 8.13.2.0 pre-auth attack surface research. XXE+SSRF, ICMP reflection, buffer over-read, hardcoded credentials — all submitted to HPE Bugcrowd, marked N/A. No fixes issued.", "description_language": "bilingual", "description_zh": "ArubaOS 8.13.2.0 认证前攻击面研究，涵盖 XXE + SSRF、ICMP 反射、缓冲区越界读取和硬编码凭据。均已提交至 HPE Bugcrowd，并被标记为不适用，尚未发布修复。", "full_name": "JM00NJ/HPE-Aruba-AOS8-Vulnerabilities", "id": "scan-1256155635", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:22.977538Z", "pushed_at": "2026-06-23T14:09:41Z", "readme_sha256": "0ff1e516b9d674356698d1a465b5cb39998c0bcf63a6107c362db2344a7f9f28", "readme_url": "https://github.com/JM00NJ/HPE-Aruba-AOS8-Vulnerabilities/blob/main/README.md", "stars": 4, "targets": [ "firmware" ], "topics": [ "arubaos", "arubaos8", "bug-bounty", "firmware-analysis", "hpe", "icmp", "responsible-disclosure", "ssrf", "vulnerability-research", "xxe" ], "url": "https://github.com/JM00NJ/HPE-Aruba-AOS8-Vulnerabilities", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Extraction and static analysis of IoT devices firmware as project for the \"Information Security M\" course at the University of Bologna (UNIBO)", "description_language": "bilingual", "description_zh": "IoT 设备固件提取与静态分析项目，为博洛尼亚大学（UNIBO）“Information Security M”课程项目。", "full_name": "bongijo/InformationSecurityProject", "id": "scan-387592053", "license": null, "observed_at": "2026-10-16T01:36:23.238628Z", "pushed_at": "2021-10-21T16:42:59Z", "readme_sha256": "a8fc1b11fd571e129f5482622d7e14da1e7159e61d08b9b9175f30ae6c29dff0", "readme_url": "https://github.com/bongijo/InformationSecurityProject/blob/master/README.md", "stars": 3, "targets": [ "firmware" ], "topics": [ "extraction", "firmware-analysis", "firmware-extraction", "modem-dsl-firmware", "uart" ], "url": "https://github.com/bongijo/InformationSecurityProject", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "AI-native Code-OSS workbench for safety-critical firmware. DO-178C evidence, MISRA, CBMC, CodeQL, measured MC/DC and hardware tooling in one window — with compliance runs that record what was actually measured, and claim nothing else.", "description_language": "bilingual", "description_zh": "面向安全关键固件的 AI 原生 Code-OSS 工作台，将 DO-178C 证据、MISRA、CBMC、CodeQL、实测 MC/DC 和硬件工具集于同一窗口。合规检查记录实际测量的内容，不作额外断言。", "full_name": "Hitheshkaranth/noyce-ide-dist", "id": "scan-1209110202", "license": null, "observed_at": "2026-10-16T01:36:24.153900Z", "pushed_at": "2026-10-11T17:11:43Z", "readme_sha256": "1f74d8b3ec8f59a7d761635d01cd2bbe6c9e6fd17426992b71992b0ad5a5d060", "readme_url": "https://github.com/Hitheshkaranth/noyce-ide-dist/blob/main/README.md", "stars": 3, "targets": [ "binary", "firmware" ], "topics": [ "ai", "ai-agents", "avionics", "cbmc", "codeql", "do-178c", "embedded", "firmware-analysis", "mcdc", "misra-c", "safety-critical", "static-analysis" ], "url": "https://github.com/Hitheshkaranth/noyce-ide-dist", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Potential Swiss Army Knife Framework for IoT/Hardware Hacking/Vulnerability Research ", "description_language": "bilingual", "description_zh": "有望成为 IoT、硬件安全研究和漏洞研究瑞士军刀的框架。", "full_name": "Jarrettgohxz/iotsec.tools", "id": "scan-1251270426", "license": null, "observed_at": "2026-10-16T01:36:23.848687Z", "pushed_at": "2026-10-07T15:00:59Z", "readme_sha256": "538a6f01f95b391d0c7cbd2cf61df09ccf77efcaa08b3a95af1891713bf28631", "readme_url": "https://github.com/Jarrettgohxz/iotsec.tools/blob/main/README.md", "stars": 3, "targets": [ "binary", "firmware" ], "topics": [ "binwalk", "firmware", "firmware-analysis", "firmware-emulation", "firmware-toolkit", "firmware-tools", "ghidra", "iothacking", "radare2", "vulnerability-research" ], "url": "https://github.com/Jarrettgohxz/iotsec.tools", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": " IoTwizz - A modular IoT security testing framework for hardware hackers, firmware analysts, and IoT security researchers. Features AI-powered assistant, UART debugging, firmware analysis, JTAG/SWD scanning, SPI flashing, and protocol fuzzing.", "description_language": "bilingual", "description_zh": "IoTwizz：面向硬件安全研究人员、固件分析师和 IoT 安全研究人员的模块化 IoT 安全测试框架。提供 AI 助手、UART 调试、固件分析、JTAG/SWD 扫描、SPI 烧写和协议模糊测试。", "full_name": "khushalmistry/IoTwizz", "id": "scan-1169634325", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:23.704625Z", "pushed_at": "2026-03-04T19:30:15Z", "readme_sha256": "a53629879350b85864b80c2ff64fdd91d32c9c975735a2118911bd3e0ea446bd", "readme_url": "https://github.com/khushalmistry/IoTwizz/blob/main/README.md", "stars": 3, "targets": [ "firmware" ], "topics": [ "ble", "bluetooth-low-energy", "coap", "embedded-security", "embedded-systems", "exploit-development", "firmware-analysis", "hardware-hacking", "iot", "jtag", "mqtt", "penetration-testing", "pentesting", "security", "security-research", "security-testing", "spi", "uart", "zigbee" ], "url": "https://github.com/khushalmistry/IoTwizz", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Fast and reliable software to extract different sections / partitions from firmware images.", "description_language": "bilingual", "description_zh": "快速可靠地从固件镜像提取不同区段或分区的软件。", "full_name": "LFE89/FirmwareSplitter", "id": "scan-482643961", "license": null, "observed_at": "2026-10-16T01:36:23.711873Z", "pushed_at": "2022-04-19T09:56:47Z", "readme_sha256": "b686c511e81006a823911dcccb24a8b8e3b18fed63398c668f994a780a56c748", "readme_url": "https://github.com/LFE89/FirmwareSplitter/blob/master/README.md", "stars": 3, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "firmware-tools" ], "url": "https://github.com/LFE89/FirmwareSplitter", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Zyxel super-admin credential exposure write-up across CPE/ONT/LTE/5G firmware, with an adapted VMG8825-B50B genpass lab.", "description_language": "bilingual", "description_zh": "关于 Zyxel CPE/ONT/LTE/5G 固件中超级管理员凭据暴露问题的研究报告，附带改编后的 VMG8825-B50B genpass 实验环境。", "full_name": "minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak", "id": "scan-1243470366", "license": null, "observed_at": "2026-10-16T01:36:23.492483Z", "pushed_at": "2026-05-22T21:40:50Z", "readme_sha256": "da7a953f6c72ea17ca182a4ac635ee909b7578ecb281512e841a6862e7482dcc", "readme_url": "https://github.com/minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak/blob/main/README.md", "stars": 3, "targets": [ "firmware" ], "topics": [ "cve-2021-35036", "firmware-analysis", "router-security", "security-research", "vulnerability-research", "writeup", "zyxel" ], "url": "https://github.com/minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "20 hands-on security engineering labs covering attack surface discovery, reverse engineering, protocol analysis, fuzzing, CVSS scoring, and responsible disclosure.", "description_language": "bilingual", "description_zh": "20 个安全工程实操实验，涵盖攻击面发现、逆向工程、协议分析、模糊测试、CVSS 评分和负责任披露。", "full_name": "abdul4rehman215/Product-Security-Supply-Chain-Assurance", "id": "scan-1162825064", "license": null, "observed_at": "2026-10-16T01:36:57.628383Z", "pushed_at": "2026-06-13T05:25:13Z", "readme_sha256": "c4ce84c77020005369c3f29c4c5108960a95458505685a2498c635ff74feafcc", "readme_url": "https://github.com/abdul4rehman215/Product-Security-Supply-Chain-Assurance/blob/main/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "attack-surface-management", "cvss", "firmware-security", "fuzzing", "offensive-security", "product-security", "protocol-analysis", "responsible-disclosure", "reverse-engineering", "threat-modeling", "vulnerability-management" ], "url": "https://github.com/abdul4rehman215/Product-Security-Supply-Chain-Assurance", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Hardware-faithful MAME-based emulator for Millennium-compatible Z180 payphone terminals. Boots real firmware on a cycle-accurate Z180 with a full device tree and a byte-transparent host bridge. Companion to the CoinLine Payphone Management Platform.", "description_language": "bilingual", "description_zh": "基于 MAME、忠实还原硬件的模拟器，面向兼容 Millennium 的 Z180 投币电话终端。在周期精确的 Z180 上启动真实固件，配备完整设备树和字节透明的主机桥接，作为 CoinLine 公用电话管理平台的配套项目。", "full_name": "andrew867/CoinLine-emu", "id": "scan-1228313286", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:57.105839Z", "pushed_at": "2026-05-13T23:23:11Z", "readme_sha256": "53bcb7b290e04f21277ec9634b3ecef7748ec2590f95837ca2fba97cee9fbc17", "readme_url": "https://github.com/andrew867/CoinLine-emu/blob/main/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "cpp", "dlog", "emulator", "firmware", "hardware-emulation", "mame", "millennium", "millennium-payphone", "ncc", "oem", "payphone", "preservation", "protocol-analysis", "retrocomputing", "z180" ], "url": "https://github.com/andrew867/CoinLine-emu", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "ESP32-based UART guardian and Python tooling for safe, controlled reverse engineering of MStar MBoot embedded systems.", "description_language": "bilingual", "description_zh": "基于 ESP32 的 UART 守护装置和 Python 工具，用于安全、受控地逆向分析 MStar MBoot 嵌入式系统。", "full_name": "atellaluca/humax-mstar-guardian", "id": "scan-1377152477", "license": "MIT", "observed_at": "2026-10-16T01:36:24.593019Z", "pushed_at": "2026-09-19T13:22:30Z", "readme_sha256": "c248f16bf1a7ef3eb2ab40e70a3b4ad5c12beb7407b06f98b5ec24d58dfe144a", "readme_url": "https://github.com/atellaluca/humax-mstar-guardian/blob/main/README.md", "stars": 2, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "embedded", "embedded-systems", "esp32", "firmware", "firmware-analysis", "firmware-engineering", "hardware-hacking", "mboot", "mstar", "python", "reverse-engineering", "spi-flash", "spi-nor", "uart", "uboot" ], "url": "https://github.com/atellaluca/humax-mstar-guardian", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "post-extraction firmware triage for ELF files", "description_language": "bilingual", "description_zh": "固件提取后的 ELF 文件初步分析。", "full_name": "djnnvx/balrog", "id": "scan-1376347957", "license": null, "observed_at": "2026-10-16T01:36:25.050617Z", "pushed_at": "2026-09-29T16:32:15Z", "readme_sha256": "5f99549f4c94d041cc77780b43794354c4f25403cfcc08b5313742dc660821c0", "readme_url": "https://github.com/djnnvx/balrog/blob/main/README.md", "stars": 2, "targets": [ "binary", "firmware" ], "topics": [ "firmware", "firmware-analysis", "firmware-security", "firmware-tools", "iot", "reverse-engineering", "reversing" ], "url": "https://github.com/djnnvx/balrog", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Binwalk docker image with the cpu_rec plugin for CPU instruction set identification.", "description_language": "bilingual", "description_zh": "集成 cpu_rec 插件的 Binwalk Docker 镜像，用于识别 CPU 指令集。", "full_name": "dsirov/docker-binwalk-cpurec", "id": "scan-418620279", "license": null, "observed_at": "2026-10-18T14:36:05.229653Z", "pushed_at": "2021-10-18T18:39:42Z", "readme_sha256": "eddd7b1a694e5becb9b66569a886c151e7d7cff82ea34749779dee50149cf429", "readme_url": "https://github.com/dsirov/docker-binwalk-cpurec/blob/e8ee6de0a39655cbc96ef273621cdfdfd43ceee4/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "binwalk", "reverse-engineering" ], "url": "https://github.com/dsirov/docker-binwalk-cpurec", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware dumps for specialized OEM and carrier hardware. Research, analysis, and legacy device preservation.", "description_language": "bilingual", "description_zh": "针对专用 OEM 和运营商硬件的固件转储，用于研究、分析及旧设备保存。", "full_name": "EngineerMazeed/Vendor", "id": "scan-1174355724", "license": "MIT", "observed_at": "2026-10-16T01:36:25.663701Z", "pushed_at": "2026-08-23T15:48:16Z", "readme_sha256": "6b2dc663c48787d8cd88840fe3ffaf2674e15c4ff9c22d4fc111949de0a0e087", "readme_url": "https://github.com/EngineerMazeed/Vendor/blob/main/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "dlink", "du", "etisalat", "firmware-analysis", "firmware-update", "oem-customization", "tozed", "zlt" ], "url": "https://github.com/EngineerMazeed/Vendor", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Static pattern discovery tool to locate structures from frequent patterns and understand file layout", "description_language": "bilingual", "description_zh": "静态模式发现工具，通过高频模式定位结构并理解文件布局。", "full_name": "HexLasso/FF-16", "id": "scan-1110052295", "license": "MIT", "observed_at": "2026-10-16T01:36:24.874771Z", "pushed_at": "2026-09-02T07:31:56Z", "readme_sha256": "17c3681ab8f6a71862a4caed54ef70779ea74599406bc9562e9869fb166bc10c", "readme_url": "https://github.com/HexLasso/FF-16/blob/main/README.md", "stars": 2, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "firmware-analysis", "forensics", "reverse-engineering", "static-analysis" ], "url": "https://github.com/HexLasso/FF-16", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Tool to unlock PVR, Netflix and hidden features on Smart TVs. Includes firmware editor and UART parser ,reapply HW/SW profiles via USB. Supports Vestel-based mainboards.", "description_language": "bilingual", "description_zh": "用于解锁智能电视 PVR、Netflix 和隐藏功能的工具。包含固件编辑器和 UART 解析器，可通过 USB 重新应用硬件/软件配置，支持基于 Vestel 的主板。", "full_name": "Hosbulduk/Hosbulduk-Profil-Analiz", "id": "scan-1209430743", "license": null, "observed_at": "2026-10-16T01:37:21.831404Z", "pushed_at": "2026-09-03T11:27:58Z", "readme_sha256": "a0f1a4185bf56c411106e864b42366a8a0897efd5343c6f43b1fd8853399fe78", "readme_url": "https://github.com/Hosbulduk/Hosbulduk-Profil-Analiz/blob/main/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "hex-editor", "hosbulduk-profil-analiz", "mb130", "mb230", "medion-tv", "netflix", "profil-editierung", "pvr", "pvr-freischalten", "pvr-mb130", "pvr-unlock", "reverse-engineering-tools", "service-menu", "smart-tv-tools", "sw-profile-modding", "telefunken-tv", "tv-hex-editor", "tv-profile-editor", "unlock", "vestel-tv" ], "url": "https://github.com/Hosbulduk/Hosbulduk-Profil-Analiz", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Interprocess communication analysis tools for firmware", "description_language": "bilingual", "description_zh": "用于固件的进程间通信分析工具。", "full_name": "lsroe/IPC-Firmware", "id": "scan-275263073", "license": null, "observed_at": "2026-10-16T01:36:24.696340Z", "pushed_at": "2020-06-26T23:06:39Z", "readme_sha256": "d514157b87ba12a05cf055e2e435a0a58d128174fb103f0c7a3fd71a48a78573", "readme_url": "https://github.com/lsroe/IPC-Firmware/blob/master/README.md", "stars": 2, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "firmware-analysis", "ghidra", "reverse-engineering" ], "url": "https://github.com/lsroe/IPC-Firmware", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "intelmetool fork adds missing PCI IDs from 8th gen through Pnthr Lake. Upstream has incomplete platform coverage from CNL onwards — ICL completely absent, CML/TGL/ADL/RPL/MTL/ARL/PTL all missing. Adds entries to both platform scan and MEI interface tables. Corrects wrong ADL-S and RPL-S device IDs.", "description_language": "bilingual", "description_zh": "intelmetool 分支，补充从第 8 代到 Panther Lake 缺失的 PCI ID。上游从 CNL 开始的平台覆盖不完整，完全缺少 ICL，也缺少 CML/TGL/ADL/RPL/MTL/ARL/PTL。在平台扫描表和 MEI 接口表中添加条目，并修正错误的 ADL-S 和 RPL-S 设备 ID。", "full_name": "MangoKiwiPlumGrape/intelmetool_thinkpad", "id": "scan-1176789790", "license": "GPL-2.0", "observed_at": "2026-10-16T01:36:24.399791Z", "pushed_at": "2026-03-21T09:37:35Z", "readme_sha256": "5bd904713f48436747cdca919dc829b36b13ebf104633f02108be4387b1bc1c6", "readme_url": "https://github.com/MangoKiwiPlumGrape/intelmetool_thinkpad/blob/main/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "intelmetool" ], "url": "https://github.com/MangoKiwiPlumGrape/intelmetool_thinkpad", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Tozed P11IDU (MT7628AN): stock firmware dump, an authenticated RCE in the vendor web UI, official OpenWrt flash, and a verified single-radio NAT Wi-Fi repeater. Full write-up and configs by Nipun Methmal.", "description_language": "bilingual", "description_zh": "Tozed P11IDU（MT7628AN）：原厂固件转储、厂商 Web 界面中的需认证远程代码执行漏洞、官方 OpenWrt 刷写，以及经过验证的单无线电 NAT Wi-Fi 中继器。完整研究报告和配置由 Nipun Methmal 提供。", "full_name": "Meth-Raily/p11idu-openwrt-repeater", "id": "scan-1400638855", "license": "MIT", "observed_at": "2026-10-16T01:36:24.249500Z", "pushed_at": "2026-10-02T16:03:52Z", "readme_sha256": "8b56b2452675722543eba9cbe813ed4b08e7e187e7425846cfcdc1ef5f6addb0", "readme_url": "https://github.com/Meth-Raily/p11idu-openwrt-repeater/blob/main/README.md", "stars": 2, "targets": [ "firmware", "website" ], "topics": [ "embedded-security", "firmware-analysis", "luci", "mt7628", "nat", "openwrt", "ramips", "wireless-repeater" ], "url": "https://github.com/Meth-Raily/p11idu-openwrt-repeater", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse-engineering tools for ZTE H188A/H288A firmware, raw NAND, JFFS2 webfs, HTTPD Lua bytecode, and hardcode analysis", "description_language": "bilingual", "description_zh": "用于 ZTE H188A/H288A 固件、原始 NAND、JFFS2 webfs、HTTPD Lua 字节码及硬编码分析的逆向工程工具。", "full_name": "minanagehsalalma/zte-router-tools", "id": "scan-1242597274", "license": "MIT", "observed_at": "2026-10-16T01:36:24.192134Z", "pushed_at": "2026-05-18T15:31:51Z", "readme_sha256": "b16d5e47b218053df4400fca2fa16a453e4aef5673ddf162434f4547411cc900", "readme_url": "https://github.com/minanagehsalalma/zte-router-tools/blob/main/README.md", "stars": 2, "targets": [ "binary", "firmware" ], "topics": [ "embedded-linux", "firmware-analysis", "jffs2", "lua-bytecode", "mips", "nand-flash", "reverse-engineering", "router", "zte" ], "url": "https://github.com/minanagehsalalma/zte-router-tools", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "REPI: a local agent platform for reverse engineering, penetration testing, and digital forensics", "description_language": "bilingual", "description_zh": "REPI：用于逆向工程、渗透测试和数字取证的本地智能体平台。", "full_name": "multi-zhangyang/pi-recon-agent", "id": "scan-1263447559", "license": "MIT", "observed_at": "2026-10-16T01:36:25.551980Z", "pushed_at": "2026-07-30T05:01:29Z", "readme_sha256": "e20c2b1826b2e25398957afe16efdf97f376a36a16a045876ae387ff30f627ea", "readme_url": "https://github.com/multi-zhangyang/pi-recon-agent/blob/main/README.md", "stars": 2, "targets": [ "app", "binary", "firmware" ], "topics": [ "agent", "binary-analysis", "cli", "digital-forensics", "firmware-analysis", "llm", "malware-analysis", "mobile-security", "pcap", "penetration-testing", "pwn", "reverse-engineering", "security-research", "web-security" ], "url": "https://github.com/multi-zhangyang/pi-recon-agent", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A technical security analysis and forensic audit of the ZTE ZXHN F670L ONT firmware, focused on attack vectors, data extraction, and embedded-device hardening.", "description_language": "bilingual", "description_zh": "对 ZTE ZXHN F670L 光网络终端固件的技术安全分析和取证审计，重点研究攻击向量、数据提取及嵌入式设备加固。", "full_name": "Niix-Dan/ZTE-F670L-Firmware-Audit", "id": "scan-1183226671", "license": null, "observed_at": "2026-10-16T01:36:25.321056Z", "pushed_at": "2026-03-16T12:00:53Z", "readme_sha256": "089eeaa141426968649dad75bd14533460dc21f0e3eb22f4f7098a017bee2013", "readme_url": "https://github.com/Niix-Dan/ZTE-F670L-Firmware-Audit/blob/main/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "embedded-linux", "firmware-analysis", "forensics", "iot-security", "network-security", "reverse-engineering", "zte" ], "url": "https://github.com/Niix-Dan/ZTE-F670L-Firmware-Audit", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "analysis of reolink firmwares", "description_language": "bilingual", "description_zh": "Reolink 固件分析。", "full_name": "renaudallard/reolink_firmwares", "id": "scan-1173589714", "license": null, "observed_at": "2026-10-16T01:36:24.663924Z", "pushed_at": "2026-03-10T13:29:47Z", "readme_sha256": "863c45c16dd52b17dee5325a179f0542508726189bbc20be5e20f03a3df09d8f", "readme_url": "https://github.com/renaudallard/reolink_firmwares/blob/main/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "firmware", "firmware-analysis", "iot", "reolink", "reverse-engineering", "security-camera", "security-research" ], "url": "https://github.com/renaudallard/reolink_firmwares", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "CVE-2026-15469 — Hard-coded RSA-512 mesh group private key in TP-Link Deco XE75/XE5300/WE10800 (CWE-321). Advisory, analysis & PoC methodology (EN/KO).", "description_language": "bilingual", "description_zh": "CVE-2026-15469：TP-Link Deco XE75/XE5300/WE10800 中硬编码的 RSA-512 Mesh 组私钥（CWE-321）。提供安全公告、分析和概念验证方法（英语/韩语）。", "full_name": "tony102741/CVE-2026-15469", "id": "scan-1345605678", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:24.963775Z", "pushed_at": "2026-08-25T04:01:14Z", "readme_sha256": "8192f590cac3ff519d2c2fb45f20c5c2ae9decc55ee0645782bb1f4ca8571684", "readme_url": "https://github.com/tony102741/CVE-2026-15469/blob/main/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "cve", "cve-2026-15469", "cwe-321", "deco", "firmware-analysis", "hardcoded-credentials", "iot-security", "mesh-networking", "tp-link", "vulnerability-research" ], "url": "https://github.com/tony102741/CVE-2026-15469", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware analysis and IoT security research toolkit for authorized extraction, UART/JTAG workflows, and vulnerability triage.", "description_language": "bilingual", "description_zh": "固件分析与 IoT 安全研究工具包，用于授权提取、UART/JTAG 工作流和漏洞初步评估。", "full_name": "varungor365/firmwareforge", "id": "scan-1129214993", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:25.473098Z", "pushed_at": "2026-08-16T20:21:15Z", "readme_sha256": "13c0fae74afeda85f97d77517d53a8966a4466221cb15fd9f3c840603f74554f", "readme_url": "https://github.com/varungor365/firmwareforge/blob/master/README.md", "stars": 2, "targets": [ "firmware" ], "topics": [ "embedded-systems", "firmware-analysis", "hardware-hacking", "iot-security", "jtag", "reverse-engineering", "uart", "vulnerability-scanner" ], "url": "https://github.com/varungor365/firmwareforge", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering and experimental tooling for the Seeed Studio MR60BHA2 / ADT6101P 60 GHz FMCW radar: coherent range-Doppler streams, guarded firmware patching, and ESP32-C6 web visualization.", "description_language": "bilingual", "description_zh": "针对 Seeed Studio MR60BHA2／ADT6101P 60 GHz FMCW 雷达的逆向工程与实验工具，涵盖相干距离—多普勒数据流、带防护的固件修补及 ESP32-C6 Web 可视化。", "full_name": "akkauppi/mr60bha2-internals", "id": "scan-1329264821", "license": "MIT", "observed_at": "2026-10-16T11:54:28.274381Z", "pushed_at": "2026-08-09T23:20:59Z", "readme_sha256": "c2f37b4f63e58c95af87df991f839e5a4269f7e2ab4d42ea995c836657be5c21", "readme_url": "https://github.com/akkauppi/mr60bha2-internals/blob/main/README.md", "stars": 1, "targets": [ "firmware", "website" ], "topics": [ "60ghz-radar", "adt6101p", "firmware-analysis", "fmcw-radar", "mr60bha2", "radar-signal-processing", "range-doppler", "seeed-studio", "xiao-esp32c6" ], "url": "https://github.com/akkauppi/mr60bha2-internals", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Local firmware security research workbench: isolated analysis, evidence-backed findings, SBOMs, release comparison and optional AI assistance.", "description_language": "bilingual", "description_zh": "本地固件安全研究工作台，提供隔离分析、有证据支持的发现、SBOM、发布版本比较及可选 AI 辅助。", "full_name": "AlBrmagawi/FirmLens", "id": "scan-1394621064", "license": "Apache-2.0", "observed_at": "2026-10-16T11:54:35.476974Z", "pushed_at": "2026-09-29T18:42:22Z", "readme_sha256": "5b4d1a33ef738c660faeb7ff6247e526c6e0176f90ad7eb26ab4f66d86468127", "readme_url": "https://github.com/AlBrmagawi/FirmLens/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "docker", "fastapi", "firmware-analysis", "iot-security", "python", "react", "sbom", "security-research", "squashfs", "vulnerability-scanner" ], "url": "https://github.com/AlBrmagawi/FirmLens", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Python tool for firmware diffing using SHA256 and ssdeep fuzzy hashing to detect modified, added, and deleted files between firmware versions", "description_language": "bilingual", "description_zh": "使用 SHA256 和 ssdeep 模糊哈希比较固件的 Python 工具，可检测不同固件版本间修改、新增和删除的文件", "full_name": "anaselfaijah/Firmware_Diffing", "id": "scan-1347961741", "license": null, "observed_at": "2026-10-16T11:54:29.808506Z", "pushed_at": "2026-08-27T01:52:45Z", "readme_sha256": "3c5a246bf224b94f1670f25950c6d1a82a384a12276f280a9edb92a266f52111", "readme_url": "https://github.com/anaselfaijah/Firmware_Diffing/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "diffing", "firmware", "firmware-analysis", "firmware-security", "firmware-tools", "fuzzyhash", "python3" ], "url": "https://github.com/anaselfaijah/Firmware_Diffing", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Go + YARA-X aggregator and scan engine: collects 18k+ public YARA rules and scans engineering workstations (EWS) and firmware dumps for ICS/OT and commodity malware", "description_language": "bilingual", "description_zh": "Go + YARA-X 聚合与扫描引擎：收集 18,000 多条公开 YARA 规则，扫描工程工作站（EWS）和固件转储中的 ICS/OT 恶意软件及常见恶意软件。", "full_name": "carbon-evolution/ics-yara-scanner", "id": "scan-1305508974", "license": "AGPL-3.0", "observed_at": "2026-10-16T01:36:25.944471Z", "pushed_at": "2026-07-27T09:43:55Z", "readme_sha256": "3dd939e3f3931ab39a297e3ad3b0076dcdf9d209ea18750464852b596904b047", "readme_url": "https://github.com/carbon-evolution/ics-yara-scanner/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "blue-team", "dfir", "firmware-analysis", "golang", "ics", "ics-security", "incident-response", "industrial-control-systems", "malware-detection", "ot-security", "scada", "threat-hunting", "yara", "yara-rules", "yara-x" ], "url": "https://github.com/carbon-evolution/ics-yara-scanner", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "shake out hardcoded keys, certificates and other artifacts from firmware", "description_language": "bilingual", "description_zh": "从固件中提取硬编码的密钥、证书及其他产物。", "full_name": "cas1m1r/Certshaker", "id": "scan-1071120125", "license": null, "observed_at": "2026-10-16T11:54:19.800663Z", "pushed_at": "2025-10-06T22:35:56Z", "readme_sha256": "967312f4271ae4312c359fd1126fc4e2ac8434cfdfa00a1db883d30a1805c685", "readme_url": "https://github.com/cas1m1r/Certshaker/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "certificate-extract", "cve-research", "embedded-security", "firmware-analysis", "firmware-tools", "iot-security", "reverse-engineering", "supply-chain-security", "tls-certificates" ], "url": "https://github.com/cas1m1r/Certshaker", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "EMBA is a firmware security analysis tool. I created a module for EMBA (p51 mustang binwalk extractor) that checks if the firmware file system being analyzed has a deep max depth that can benefit from an optimized extractor (>50 levels deep), leverages GPUs for processing speed and uses parallelization for file operations.", "description_language": "bilingual", "description_zh": "EMBA 是一个固件安全分析工具。我为其创建了 p51 mustang binwalk extractor 模块，用于检查所分析的固件文件系统是否具有较大的最大深度（超过 50 层），以判断能否受益于优化的提取器；该模块利用 GPU 加速处理，并对文件操作进行并行化。", "full_name": "Chaz-Ortiz/EMBA-CS-4613-901", "id": "scan-945629325", "license": null, "observed_at": "2026-10-16T11:54:18.849137Z", "pushed_at": "2025-06-13T00:26:42Z", "readme_sha256": "aa1ccbab00a12814bef6de6e5655680e6b6b1addcfddb764c14b95bd8c522a91", "readme_url": "https://github.com/Chaz-Ortiz/EMBA-CS-4613-901/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "gpu-acceleration", "kali-linux" ], "url": "https://github.com/Chaz-Ortiz/EMBA-CS-4613-901", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "MCP reverse engineering tools", "description_language": "bilingual", "description_zh": "MCP 逆向工程工具。", "full_name": "daedalus/mcp_reverse_engineering", "id": "scan-1187487703", "license": "MIT", "observed_at": "2026-10-18T14:36:05.231150Z", "pushed_at": "2026-05-03T03:46:39Z", "readme_sha256": "9c36fbff7ee8183df148441bc0c2fb8c9147b3ee6337ccf073fc7119db0b116b", "readme_url": "https://github.com/daedalus/mcp_reverse_engineering/blob/86bb042db35a70af3be96433439bb8a3d03627e6/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "angr", "binary", "binwalk", "file", "frida", "gdb", "ghidra", "hexdump", "ldd", "llm", "ltrace", "mcp", "objdump", "radare2", "readelf", "reverse-engineering", "strace", "strings", "upx", "xxd" ], "url": "https://github.com/daedalus/mcp_reverse_engineering", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "IoT Firmware Vulnerability Hunting Skill", "description_language": "bilingual", "description_zh": "IoT 固件漏洞挖掘技能。", "full_name": "DroidKali/iot-firmware-vuln-hunting", "id": "scan-1414969850", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:26.149857Z", "pushed_at": "2026-10-13T06:40:42Z", "readme_sha256": "236d708717d120b634f709bd10e8b486c4fac9fe2c685a7d8687b1a738b91e06", "readme_url": "https://github.com/DroidKali/iot-firmware-vuln-hunting/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "firmware-security", "iot-security", "reverse-engineering" ], "url": "https://github.com/DroidKali/iot-firmware-vuln-hunting", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Cyber analysis tools used in different domains of cybersecurity.", "description_language": "bilingual", "description_zh": "用于网络安全不同领域的网络分析工具。", "full_name": "ericyoc/cyber-domain-tools-ref-poc", "id": "scan-798950609", "license": null, "observed_at": "2026-10-16T01:36:25.974443Z", "pushed_at": "2024-09-04T16:10:59Z", "readme_sha256": "c9cf181fdf6470f11160ab6e8ce7ba29d050ab13b36468b19cf54a5cc243d83c", "readme_url": "https://github.com/ericyoc/cyber-domain-tools-ref-poc/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "cyber-analysis-tools", "cyber-analyst", "firmware-analysis", "maldoc-analysis", "malware-analysis", "reverse-engineering-analysis", "software-exploitation-analysis" ], "url": "https://github.com/ericyoc/cyber-domain-tools-ref-poc", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "The Cell/SPU RE tooling behind 'Execution Is Not Extraction' — SPU emulator, sound SLEIGH decompiler, offline lv1 executor, isolation harness. Tooling only.", "description_language": "bilingual", "description_zh": "“Execution Is Not Extraction”背后的 Cell/SPU 逆向工程工具，包含 SPU 模拟器、可靠的 SLEIGH 反编译器、离线 lv1 执行器和隔离测试框架，仅提供工具。", "full_name": "eth-man/ps3-cell-re-tools", "id": "scan-1352628663", "license": "GPL-2.0", "observed_at": "2026-10-16T01:36:26.296718Z", "pushed_at": "2026-09-09T17:42:50Z", "readme_sha256": "91b1fe5537ebd39a44fc5c82c3791b51c593e51adb037606b7a11bd42673d20a", "readme_url": "https://github.com/eth-man/ps3-cell-re-tools/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware", "game" ], "topics": [ "cell-be", "console-hacking", "decompiler", "emulator", "firmware-analysis", "ghidra", "hypervisor", "playstation-3", "ps3", "reverse-engineering", "security-research", "sleigh", "spu", "static-analysis", "unicorn-engine" ], "url": "https://github.com/eth-man/ps3-cell-re-tools", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Forensic & architectural research into Apple's Software Update RAMDisk (macOS Monterey 21G115 x86_64), ramrod restore pipeline, APFS SSV sealing, and firmware Option ROMs.", "description_language": "bilingual", "description_zh": "对 Apple 软件更新 RAMDisk（macOS Monterey 21G115 x86_64）、ramrod 恢复流程、APFS SSV 密封及固件 Option ROM 的取证与架构研究。", "full_name": "hideouts-io/StarSecurity-SURamDisk", "id": "scan-1348089824", "license": "MIT", "observed_at": "2026-10-16T11:54:30.083021Z", "pushed_at": "2026-08-27T05:12:32Z", "readme_sha256": "da259d37da10f64990d3e3fc9e0bb88c2169806beb8c21ca4cc687b041a458fd", "readme_url": "https://github.com/hideouts-io/StarSecurity-SURamDisk/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "apfs", "apple", "apple-configurator", "apple-t2", "bridgeos", "dfu", "digital-forensics", "firmware-analysis", "image4", "macos", "macos-monterey", "macos-recovery", "option-rom", "ramdisk", "ramrod", "reverse-engineering", "sealed-system-volume", "secure-boot", "usb-multiplexing", "x86-64" ], "url": "https://github.com/hideouts-io/StarSecurity-SURamDisk", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering, firmware analysis, and experimental mods for SmartBox HW501 USB CarPlay dongles sold on AliExpress.", "description_language": "bilingual", "description_zh": "针对 AliExpress 上出售的 SmartBox HW501 USB CarPlay 适配器开展逆向工程、固件分析及实验性修改。", "full_name": "kacper-serewis/smartbox-re", "id": "scan-1377291188", "license": null, "observed_at": "2026-10-16T11:54:33.523956Z", "pushed_at": "2026-09-20T19:13:22Z", "readme_sha256": "3c7b0bd3ca0a34556dd560437d5df8b432bd18a77e885f63c48f10862c7a14d9", "readme_url": "https://github.com/kacper-serewis/smartbox-re/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "aliexpress", "carplay", "carplay-adapter", "dongle", "embedded-linux", "firmware", "firmware-analysis", "hw501", "reverse-engineering", "riscv", "smartbox", "wireless-carplay" ], "url": "https://github.com/kacper-serewis/smartbox-re", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Python bindings for Binwalk v3, built with PyO3 and maturin.", "description_language": "bilingual", "description_zh": "使用 PyO3 和 maturin 构建的 Binwalk v3 Python 绑定。", "full_name": "kevinmuoz/pybinwalk", "id": "scan-1154062288", "license": "MIT", "observed_at": "2026-10-16T01:36:25.801323Z", "pushed_at": "2026-02-16T10:06:04Z", "readme_sha256": "c0fad91f41be4412e4dfb744c77b60f03661ebe7d7223c69d0772cc50a51efa7", "readme_url": "https://github.com/kevinmuoz/pybinwalk/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "binwalk", "cybersecurity", "firmware-analysis", "python", "reverse-engineering", "rust", "rust-bindings" ], "url": "https://github.com/kevinmuoz/pybinwalk", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "a tool to find individually obfuscated or encrypted filesystems in firmware dumps", "description_language": "bilingual", "description_zh": "用于在固件转储中查找单独混淆或加密的文件系统的工具。", "full_name": "kittennbfive/fsfuzz", "id": "scan-666450174", "license": "AGPL-3.0", "observed_at": "2026-10-18T14:36:05.230641Z", "pushed_at": "2023-07-14T15:00:13Z", "readme_sha256": "7d69b20709e73e8651d6e08a77e4070f8ec88c042f43814caf67b4ff795c52cf", "readme_url": "https://github.com/kittennbfive/fsfuzz/blob/bc79108ba555ba60ff36b21e5d6db50c43ca4d83/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "binwalk", "firmware", "reverse-engineering" ], "url": "https://github.com/kittennbfive/fsfuzz", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "TP-Link PG2400P reverse engineering", "description_language": "bilingual", "description_zh": "TP-Link PG2400P 逆向工程。", "full_name": "MikeeI/tp-link-pg2400p-reverse-engineering", "id": "scan-1333685730", "license": null, "observed_at": "2026-10-16T11:54:28.767069Z", "pushed_at": "2026-08-16T03:51:41Z", "readme_sha256": "899ea31df94a157d5e7d2644509345a8a541531635bb4d15527e4e373b72dd58", "readme_url": "https://github.com/MikeeI/tp-link-pg2400p-reverse-engineering/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "ghn", "pg2400p", "powerline", "reverse-engineering", "tp-link" ], "url": "https://github.com/MikeeI/tp-link-pg2400p-reverse-engineering", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "UAS security toolkit for Parrot OS covering SDR/RF analysis, Remote ID and DJI DroneID, MAVLink/DroneCAN, GNSS, counter-UAS awareness, firmware analysis, and flight-controller hardware workflows.", "description_language": "bilingual", "description_zh": "面向 Parrot OS 的无人航空系统安全工具包，涵盖 SDR/RF 分析、Remote ID 和 DJI DroneID、MAVLink/DroneCAN、GNSS、反无人机系统认知、固件分析及飞控硬件工作流。", "full_name": "njones920/parrot-drone-tools", "id": "scan-1355143654", "license": "GPL-3.0", "observed_at": "2026-10-16T11:54:30.725642Z", "pushed_at": "2026-09-24T23:09:16Z", "readme_sha256": "bc20cb1786797193deeaafa0082d46bbceabfc8778ff4a6f2ef2f47e46229c56", "readme_url": "https://github.com/njones920/parrot-drone-tools/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "c-uas", "drone", "drones-security", "drones-simulation", "firmware-analysis", "mavlink", "remote-id", "sdr", "security-research", "security-tools", "uas", "uav", "uav-detection" ], "url": "https://github.com/njones920/parrot-drone-tools", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Full security case file: Mercusys MW325R v2 recon, UPnP demo, modern panel, firmware forensics (own device)", "description_language": "bilingual", "description_zh": "完整安全案例档案：Mercusys MW325R v2 侦察、UPnP 演示、现代化面板及固件取证，使用自有设备。", "full_name": "NurMohammadDuari/mw325r-hack-lab", "id": "scan-1373937480", "license": "MIT", "observed_at": "2026-10-16T11:54:33.001236Z", "pushed_at": "2026-09-25T11:02:01Z", "readme_sha256": "cde3500bc437957aa818edbbb6f40536de13214bc0a5dec6a5bad0a73decfc52", "readme_url": "https://github.com/NurMohammadDuari/mw325r-hack-lab/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "mercusys", "minifs", "reverse-engineering", "router-security", "vxworks" ], "url": "https://github.com/NurMohammadDuari/mw325r-hack-lab", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Evidence-first Samsung Tizen TV security research: reversible debloating, firmware analysis, validated Remote PC/CIFS UID-0 injection, and hardening.", "description_language": "bilingual", "description_zh": "证据优先的 Samsung Tizen TV 安全研究，涵盖可逆的精简处理、固件分析、已验证的 Remote PC/CIFS UID-0 注入及加固。", "full_name": "sebastianspicker/tiz0wn", "id": "scan-1388930263", "license": "MIT", "observed_at": "2026-10-16T11:54:34.195947Z", "pushed_at": "2026-10-04T08:51:15Z", "readme_sha256": "800357d6ee43a38584809f54687d814bd319e65627e08eabf91ac5dc788afcfb", "readme_url": "https://github.com/sebastianspicker/tiz0wn/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "command-injection", "debloat", "firmware-analysis", "iot-security", "q60t", "responsible-disclosure", "reverse-engineering", "samsung-tv", "sdb", "security-hardening", "security-research", "smart-tv", "tizen", "tizen-tv", "vdfs", "vulnerability-research" ], "url": "https://github.com/sebastianspicker/tiz0wn", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering and protocol emulation of a closed smart battery system. Hardware and firmware implementation replicating original authentication behavior at embedded level.", "description_language": "bilingual", "description_zh": "对闭源智能电池系统进行逆向工程与协议仿真，在嵌入式层面通过硬件和固件实现复现原始认证行为。", "full_name": "sezgynus/g11-battery-protocol-emulation", "id": "scan-1160830255", "license": "MIT", "observed_at": "2026-10-16T01:37:00.355802Z", "pushed_at": "2026-09-30T09:35:40Z", "readme_sha256": "63f0315af435c9843aad564118e0b30129f6394fc4a7e493b22181c69c00ff95", "readme_url": "https://github.com/sezgynus/g11-battery-protocol-emulation/blob/master/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "3d-printing", "battery", "bms", "electronics", "embedded-systems", "esp32", "firmware", "hardware", "iot", "logic-analyzer", "protocol-analysis", "reverse-engineering", "reverse-engineering-", "reverse-engineering-asm", "reverse-engineering-source-code", "reverse-engineering-tutorial", "uart" ], "url": "https://github.com/sezgynus/g11-battery-protocol-emulation", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Automated IoT Firmware Security Assessment Platform with vulnerability detection, risk scoring, remediation guidance and security reporting.", "description_language": "bilingual", "description_zh": "自动化物联网固件安全评估平台，提供漏洞检测、风险评分、修复指导和安全报告。", "full_name": "smruthinayak2006/Firmware_Security_Assessment", "id": "scan-1257297324", "license": null, "observed_at": "2026-10-16T11:54:24.316624Z", "pushed_at": "2026-06-23T13:35:41Z", "readme_sha256": "87d048e4be9545f9286f5fd05e05d486a51089f16f7e9cbafce7bcabadaafa05", "readme_url": "https://github.com/smruthinayak2006/Firmware_Security_Assessment/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "cve", "cybersecurity", "devsecops", "firmware-analysis", "flask", "iot", "iot-security", "python", "security", "security-tools", "static-analysis", "vulnerability-scanner" ], "url": "https://github.com/smruthinayak2006/Firmware_Security_Assessment", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Live reports produced with the emua firmware analysis software. Each report takes over 3 hours of machine analysis and shows the locations of risky functions such as system and strcat in binaries, helping select binaries and function-tracing paths for further analysis.", "description_language": "bilingual", "description_zh": "使用 emua 固件检测软件生成的即时报告；每份报告的机器检测耗时超过 3 小时，可查看二进制中 system、strcat 等危险函数的具体位置，辅助选择后续要分析的二进制与函数溯源路径。", "full_name": "TangerineSec/FirmwareHTMLReportWithEmux", "id": "scan-744058653", "license": null, "observed_at": "2026-10-16T11:54:17.842480Z", "pushed_at": "2024-01-16T15:32:06Z", "readme_sha256": "f48add4b6b954e77b373d23941491257a31ea4cacb58c41870ea985ca740b862", "readme_url": "https://github.com/TangerineSec/FirmwareHTMLReportWithEmux/blob/main/readme.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "firmware-analysis" ], "url": "https://github.com/TangerineSec/FirmwareHTMLReportWithEmux", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Analyst-assisted tooling for reverse engineering orchestration-heavy embedded firmware.", "description_language": "bilingual", "description_zh": "用于逆向分析以复杂编排为主的嵌入式固件、由分析人员辅助使用的工具。", "full_name": "tony102741/firmware_project", "id": "scan-1206237182", "license": null, "observed_at": "2026-10-16T11:54:21.973612Z", "pushed_at": "2026-06-08T04:31:06Z", "readme_sha256": "b84d33a062f5001623b72db8fe0fe2ee40d16c165f055df468c83bea71f445b0", "readme_url": "https://github.com/tony102741/firmware_project/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "embedded-security", "firmware", "firmware-analysis", "iot-security", "openwrt", "reverse-engineering", "security-research", "static-analysis", "ubus" ], "url": "https://github.com/tony102741/firmware_project", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Unofficial Ubuntu/Debian .deb package for sasquatch, a SquashFS firmware extraction tool", "description_language": "bilingual", "description_zh": "SquashFS 固件提取工具 sasquatch 的非官方 Ubuntu/Debian .deb 软件包。", "full_name": "Tureto/sasquatch-deb", "id": "scan-1294026446", "license": "GPL-2.0", "observed_at": "2026-10-16T01:36:25.734685Z", "pushed_at": "2026-07-09T15:31:05Z", "readme_sha256": "62a87723844bd23a063e593d5f542a7e3fe90154ddc836f47c6902fc8b6870e6", "readme_url": "https://github.com/Tureto/sasquatch-deb/blob/main/README", "stars": 1, "targets": [ "firmware" ], "topics": [ "binwalk", "binwalkv3", "cybersecurity", "deb-package", "debian", "firmware", "firmware-analysis", "firmware-tools", "reverse-engineering", "sasquatch", "squashfs", "squashfs-tools", "ubuntu", "wsl" ], "url": "https://github.com/Tureto/sasquatch-deb", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware-grounded research into automatic content recognition in smart TVs and streaming devices", "description_language": "bilingual", "description_zh": "以固件为依据，研究智能电视和流媒体设备中的自动内容识别。", "full_name": "xusheng6/tv-acr-research", "id": "scan-1365116497", "license": "MIT", "observed_at": "2026-10-16T01:36:25.963289Z", "pushed_at": "2026-09-11T00:37:41Z", "readme_sha256": "7a86c75cac6efceb4bd8bf9655cfc82fd302e69790dadbd63391d6327815e3a9", "readme_url": "https://github.com/xusheng6/tv-acr-research/blob/main/README.md", "stars": 1, "targets": [ "firmware" ], "topics": [ "acr", "firmware-analysis", "privacy", "reverse-engineering", "smart-tv" ], "url": "https://github.com/xusheng6/tv-acr-research", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Binwalk-style implementation in pure Java", "description_language": "bilingual", "description_zh": "纯 Java 编写的 Binwalk 风格实现。", "full_name": "aayes89/jBinWalk", "id": "scan-1228324910", "license": "MIT", "observed_at": "2026-10-18T14:36:05.234241Z", "pushed_at": "2026-05-03T22:32:06Z", "readme_sha256": "cdc2cf1eaa6141be42b5e04b827be15bcd67e6b3669179e9925eb42bfcb577a6", "readme_url": "https://github.com/aayes89/jBinWalk/blob/7d35dfc10c7192b46da1333c959087a36338f09b/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "binwalk", "extract-data", "java", "reverse-engineering" ], "url": "https://github.com/aayes89/jBinWalk", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "This programm is used to auto discover vulnerabilities from extracted IoT device firmware", "description_language": "bilingual", "description_zh": "用于从已提取的物联网设备固件中自动发现漏洞的程序。", "full_name": "arunsigood/nforceit_IoT", "id": "scan-139312066", "license": null, "observed_at": "2026-10-16T11:54:16.026047Z", "pushed_at": "2018-07-01T08:47:59Z", "readme_sha256": "1299e32c31605fa6a7ce577ade847c622db5afb5a04be9195aaaf7ed8ead21ce", "readme_url": "https://github.com/arunsigood/nforceit_IoT/blob/master/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "iot-security-testing", "iotsecurity", "vfeed", "vulnerability-scanners" ], "url": "https://github.com/arunsigood/nforceit_IoT", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Recover TP-Link's renumbered Lua 5.1 opcode table, then convert and decompile the LuCI Lua bytecode inside their router firmware. Derived and verified on an Archer AX21 (US) V5.46, firmware 1.1.2.", "description_language": "bilingual", "description_zh": "恢复 TP-Link 重新编号的 Lua 5.1 操作码表，再转换并反编译其路由器固件中的 LuCI Lua 字节码。基于 Archer AX21（美版）V5.46、固件 1.1.2 推导并验证。", "full_name": "boyatoid/tp-link-lua-decompile", "id": "scan-1414744615", "license": "GPL-3.0", "observed_at": "2026-10-16T11:54:36.944668Z", "pushed_at": "2026-10-12T18:42:37Z", "readme_sha256": "6b0f2aa79aa945f8863b38a3761ebf86a446b631174fb19e6f98e81f8b48b8a1", "readme_url": "https://github.com/boyatoid/tp-link-lua-decompile/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "firmware", "firmware-analysis", "firmware-reversing", "firmware-security", "firmware-tools" ], "url": "https://github.com/boyatoid/tp-link-lua-decompile", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A lightweight, custom Python GUI forensic utility featuring signature scanning, entropy randomness analysis, and file carving capabilities.", "description_language": "bilingual", "description_zh": "轻量级、自定义的 Python GUI 取证工具，提供特征扫描、熵与随机性分析及文件雕刻恢复功能。", "full_name": "catiomic/forewalk", "id": "scan-1342871778", "license": null, "observed_at": "2026-10-18T14:36:05.232910Z", "pushed_at": "2026-08-22T14:18:56Z", "readme_sha256": "de0f7f76d5329d5a89d0f208a4d780dd979c86e6970234ca566f7f5a41c825fe", "readme_url": "https://github.com/catiomic/forewalk/blob/69eb91030343c1b8e21e43180f7aa3550c4bde60/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "binwalk", "customtkinter", "cybersecurity", "file-carving", "foremost", "forensics", "python", "windows" ], "url": "https://github.com/catiomic/forewalk", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Production-minded MCP servers for AI agents — passive website security audit, RSS digest, and firmware recon. Pure-stdlib cores, an SSRF guard red-teamed against the full public bypass corpus, 42 offline tests.", "description_language": "bilingual", "description_zh": "面向生产实践的 AI 智能体 MCP 服务，涵盖被动网站安全审计、RSS 摘要和固件侦察。核心仅使用标准库，SSRF 防护已针对完整公开绕过语料进行红队测试，附有 42 项离线测试。", "full_name": "clinton-oppong/mcp-servers", "id": "scan-1270760970", "license": null, "observed_at": "2026-10-16T11:54:25.203338Z", "pushed_at": "2026-06-16T03:00:13Z", "readme_sha256": "5a0e9be167c94e40288712845459a571564c941b67579d7dbe7baa3aabac5dc1", "readme_url": "https://github.com/clinton-oppong/mcp-servers/blob/main/README.md", "stars": 0, "targets": [ "firmware", "website" ], "topics": [ "ai-agents", "appsec", "cybersecurity", "devsecops", "firmware-analysis", "llm-tools", "mcp", "model-context-protocol", "python", "security", "security-tools", "ssrf" ], "url": "https://github.com/clinton-oppong/mcp-servers", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Powering Hardware, Radio, Web, and IoT Security Assessments Trilokya OS is a powerful, security-focused operating system designed for penetration testers, security researchers, and ethical hackers specializing in hardware security, radio frequency (RF) analysis, web application security, and IoT penetration testing.", "description_language": "bilingual", "description_zh": "为硬件、无线电、Web 与物联网安全评估提供支持的 Trilokya OS：面向硬件安全、射频（RF）分析、Web 应用安全和物联网渗透测试领域的渗透测试人员、安全研究人员及道德黑客的强大安全操作系统。", "full_name": "Dellon-Technology-Pvt-Ltd/Trilokya", "id": "scan-1377076933", "license": "AGPL-3.0", "observed_at": "2026-10-16T11:54:33.418005Z", "pushed_at": "2026-10-08T08:15:42Z", "readme_sha256": "4f4150b1d5631814d8e1a7795d7380a52e8e2a6cbd00fff8ccd712ab3de86e8b", "readme_url": "https://github.com/Dellon-Technology-Pvt-Ltd/Trilokya/blob/main/README.md", "stars": 0, "targets": [ "app", "firmware", "website" ], "topics": [ "cybersecurity", "cybersecurity-tools", "embedded-security", "firmware-analysis", "hardware-security", "ics-security", "iot-security", "linux", "penetration-testing", "reverse-engineering", "rf-security", "security-os", "security-research", "security-tools", "software-defined-radio", "web-security", "wireless-security" ], "url": "https://github.com/Dellon-Technology-Pvt-Ltd/Trilokya", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering the firmware of my Jensen CAR710W head unit to locate and modifiy UI assets such as boot animations and backgrounds.", "description_language": "bilingual", "description_zh": "对作者的 Jensen CAR710W 车机固件进行逆向工程，以定位和修改启动动画、背景等界面资源。", "full_name": "DerrickDW/car710w-research", "id": "scan-1178344702", "license": null, "observed_at": "2026-10-18T14:36:05.233751Z", "pushed_at": "2026-03-11T00:52:03Z", "readme_sha256": "b889c8a4d395e24d5dff857644e305b4999344ea748f3635bd02298b27e52722", "readme_url": "https://github.com/DerrickDW/car710w-research/blob/06a16de57d4bd3aee58a8ad221784cd8be02e0fc/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "binwalk", "busybox", "car-audio", "car-radio", "decode-im", "ffmpeg", "ffprobe", "headunit", "linux", "qt", "reverse-engineering", "squashfs" ], "url": "https://github.com/DerrickDW/car710w-research", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Offline config tool + protocol spec for the GAMEKB-K17 / HCY-K017 macropad (USB 0816:0220): remaps, firmware macros, per-key RGB", "description_language": "bilingual", "description_zh": "GAMEKB-K17 / HCY-K017 宏键盘（USB 0816:0220）的离线配置工具和协议规格：键位重映射、固件宏、逐键 RGB。", "full_name": "dvdarkin/gamekb-k17", "id": "scan-1419987281", "license": "MIT", "observed_at": "2026-10-18T13:14:42.169040Z", "pushed_at": "2026-10-15T00:31:54Z", "readme_sha256": "39441b22a9d9d00325cacb57fdc6c288e82ba0106dc23cedea2b272034ba4b14", "readme_url": "https://github.com/dvdarkin/gamekb-k17/blob/main/README.md", "stars": 0, "targets": [ "firmware", "protocol" ], "topics": [ "claude-code", "gamekb-k17", "hcy-k017", "hid", "keyboard", "macropad", "reverse-engineering", "sdcx", "webhid" ], "url": "https://github.com/dvdarkin/gamekb-k17", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Windows BIOS/UEFI backup tool and Nick Squires BIOS ROM recovery service. All Toughbook models welcome; other brands assessed. Public build has no password-hash extractor.", "description_language": "bilingual", "description_zh": "Windows BIOS/UEFI 备份工具与 Nick Squires BIOS ROM 恢复服务。欢迎所有 Toughbook 型号，其他品牌另行评估。公开构建不含密码哈希提取器。", "full_name": "essquireo0o/rom-bios-public", "id": "scan-1378646887", "license": "NOASSERTION", "observed_at": "2026-10-16T11:54:33.750670Z", "pushed_at": "2026-10-13T14:15:48Z", "readme_sha256": "73e083b453363b84eb9b7fcedfbb4d163863a42437132cf3a6b4acbc4df163dd", "readme_url": "https://github.com/essquireo0o/rom-bios-public/blob/master/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "backup", "bios", "bios-backup", "firmware", "firmware-analysis", "panasonic", "toughbook", "uefi", "windows" ], "url": "https://github.com/essquireo0o/rom-bios-public", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Independent research and Linux/Rockbox tooling for the Sony NW-A306.", "description_language": "bilingual", "description_zh": "针对 Sony NW-A306 的独立研究与 Linux／Rockbox 工具。", "full_name": "gblongiu/nw-a306-open", "id": "scan-1419725925", "license": "GPL-2.0", "observed_at": "2026-10-16T11:54:37.944983Z", "pushed_at": "2026-10-16T00:26:23Z", "readme_sha256": "d6a6a864904a6fc215e4d757127a928a75486b5c596506384adecd5788f9e842", "readme_url": "https://github.com/gblongiu/nw-a306-open/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "bootloader", "device-tree", "digital-audio-player", "embedded-linux", "firmware-analysis", "linux-kernal", "nw-a306", "open-source-firmware", "qualcomm", "reverse-engineering", "rockbox", "sony-walkman" ], "url": "https://github.com/gblongiu/nw-a306-open", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Zero-dependency IoT and embedded firmware unpacker, multi-format magic carver, and static vulnerability auditing engine in pure Rust.", "description_language": "bilingual", "description_zh": "使用纯 Rust 编写、零依赖的物联网与嵌入式固件解包器、多格式魔数文件雕刻工具和静态漏洞审计引擎。", "full_name": "GHSFS/firm-carver", "id": "scan-1416222198", "license": "Apache-2.0", "observed_at": "2026-10-16T11:54:37.421526Z", "pushed_at": "2026-10-15T12:35:34Z", "readme_sha256": "9d0265381c449a691b8073898e132addb1060e4acadbc68d957cace8869d46a9", "readme_url": "https://github.com/GHSFS/firm-carver/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "embedded", "firmware-analysis", "firmware-extraction", "forensics", "iot-security", "reverse-engineering", "rust", "security", "squashfs", "vulnerability-scanner" ], "url": "https://github.com/GHSFS/firm-carver", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Docs-only public-safety showcase for the GoblinFlash firmware evidence workflow.", "description_language": "bilingual", "description_zh": "仅包含文档、面向公共安全的 GoblinFlash 固件证据工作流展示。", "full_name": "goblinsoftwarelab/goblinflash-showcase", "id": "scan-1279935941", "license": null, "observed_at": "2026-10-16T11:54:25.732135Z", "pushed_at": "2026-09-21T12:34:26Z", "readme_sha256": "8dd9cb8f73b7d7a3f21d7dd491889ec2d16b1f8e47594919550b760aa4b5ee69", "readme_url": "https://github.com/goblinsoftwarelab/goblinflash-showcase/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "evidence", "firmware-analysis", "firmware-security", "governance", "safety", "uefi" ], "url": "https://github.com/goblinsoftwarelab/goblinflash-showcase", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Recover unencrypted TP-Link firmware for analysis — an independent Python reproduction of the tpbreak / WatchfulIP RSA-PSS-salt decryption technique.", "description_language": "bilingual", "description_zh": "恢复未加密的 TP-Link 固件以便分析，对 tpbreak / WatchfulIP 的 RSA-PSS 盐值解密技术进行独立 Python 复现。", "full_name": "haxorthematrix/tpbreak-cli", "id": "scan-1344388896", "license": "GPL-3.0", "observed_at": "2026-10-16T11:54:29.557836Z", "pushed_at": "2026-08-24T01:24:20Z", "readme_sha256": "e8b2c0e76a08fac972eeaf2b6f96ce9b9c8d78a22ab2664ef953fc06f713aeed", "readme_url": "https://github.com/haxorthematrix/tpbreak-cli/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "decryption", "firmware", "firmware-analysis", "iot", "reverse-engineering", "rsa-pss", "security-research", "tp-link" ], "url": "https://github.com/haxorthematrix/tpbreak-cli", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Web-based interactive static pattern discovery tool to locate structures from frequent patterns", "description_language": "bilingual", "description_zh": "基于 Web 的交互式静态模式发现工具，通过频繁出现的模式定位结构", "full_name": "HexLasso/FF-16-Web", "id": "scan-1354638919", "license": "MIT", "observed_at": "2026-10-16T11:54:30.601922Z", "pushed_at": "2026-09-05T13:37:15Z", "readme_sha256": "e457b015f53ba4450e6551f48dffc95b39d146cc1ab0bb2cea09b9d5b9744aff", "readme_url": "https://github.com/HexLasso/FF-16-Web/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware", "website" ], "topics": [ "binary-analysis", "firmware-analysis", "forensics", "reverse-engineering", "static-analysis" ], "url": "https://github.com/HexLasso/FF-16-Web", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A Windows tool for viewing and editing Mitsubishi elevator HEX firmware, with address navigation, byte editing, file comparison, and validation.", "description_language": "bilingual", "description_zh": "三菱电梯 HEX 固件查看与编辑工具（Windows），支持地址跳转、字节编辑、文件比较和校验。", "full_name": "heyPython2026/FirmwareQuickEdit", "id": "scan-1417100861", "license": null, "observed_at": "2026-10-16T11:54:37.425631Z", "pushed_at": "2026-10-13T15:04:37Z", "readme_sha256": "39cff883c5aeafce7bab02e6559d2317245101f2c98a5feb30d495c121e8370e", "readme_url": "https://github.com/heyPython2026/FirmwareQuickEdit/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "elevator", "firmware-analysis", "firmware-editor", "hex-editor", "intel-hex", "mitsubishi-elevator", "qt", "windows" ], "url": "https://github.com/heyPython2026/FirmwareQuickEdit", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Read-only PSdZData XML segment extraction and KIS metadata inspection tools", "description_language": "bilingual", "description_zh": "只读的 PSdZData XML 段提取与 KIS 元数据检查工具。", "full_name": "JackieZ123430/psdzdata-swfl-inspector", "id": "scan-1382046877", "license": "MIT", "observed_at": "2026-10-16T11:54:34.028788Z", "pushed_at": "2026-09-22T17:36:21Z", "readme_sha256": "485dea17949b09a628580d1d4ddc4c1c3e5216e4368d293d1c8523c28dc260e1", "readme_url": "https://github.com/JackieZ123430/psdzdata-swfl-inspector/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "bmw", "firmware-analysis", "powershell", "psdzdata", "reverse-engineering", "swfl" ], "url": "https://github.com/JackieZ123430/psdzdata-swfl-inspector", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse-engineering ZWO ASIAIR firmware with REA - findings, notes and tooling (no vendor firmware redistributed)", "description_language": "bilingual", "description_zh": "使用 REA 逆向分析 ZWO ASIAIR 固件，包含研究发现、笔记与工具，不重新分发厂商固件。", "full_name": "Jiang-sustech/REA-ZWO", "id": "scan-1414006396", "license": null, "observed_at": "2026-10-16T11:54:36.899443Z", "pushed_at": "2026-10-11T07:15:45Z", "readme_sha256": "e77a27d0b9d73ddfbeadf147092870fc9718879cf7118e1cc0c0e3e4ed583346", "readme_url": "https://github.com/Jiang-sustech/REA-ZWO/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "asiair", "astrophotography", "firmware-analysis", "indi", "reverse-engineering", "seestar", "zwo" ], "url": "https://github.com/Jiang-sustech/REA-ZWO", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A toolkit for extracting and documenting the data Nintendo Switch 2 accessories expose over USB, with a community accessory database.", "description_language": "bilingual", "description_zh": "用于提取并记录 Nintendo Switch 2 配件通过 USB 暴露的数据的工具集，附有社区配件数据库。", "full_name": "Jonaaaa/unshell", "id": "scan-1400076146", "license": "MIT", "observed_at": "2026-10-16T11:54:35.476197Z", "pushed_at": "2026-10-01T20:53:38Z", "readme_sha256": "8ce1f3bbe7fc7ba9c3367eb946eb4396c3e63e58c9d92e3593bed7c675b40a94", "readme_url": "https://github.com/Jonaaaa/unshell/blob/main/README.md", "stars": 0, "targets": [ "firmware", "game" ], "topics": [ "firmware-analysis", "game-controller", "hardware-hacking", "hardware-security", "nintendo-switch", "pyusb", "reverse-engineering", "spi-flash", "usb", "uvc" ], "url": "https://github.com/Jonaaaa/unshell", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "Khedr0x00/Binwalk-Web-GUI", "id": "scan-1029984511", "license": null, "observed_at": "2026-10-16T11:54:19.391600Z", "pushed_at": "2025-07-31T22:43:17Z", "readme_sha256": "7cc78927024d0be664f06e03c2b2bbc25ed7e150fe3864c121bee3d1353d2c64", "readme_url": "https://github.com/Khedr0x00/Binwalk-Web-GUI/blob/main/README.md", "stars": 0, "targets": [ "firmware", "website" ], "topics": [ "binwalk", "firmware-analysis", "iot-security", "reverse-engineering", "security-tools" ], "url": "https://github.com/Khedr0x00/Binwalk-Web-GUI", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Fujitsu Quaderno research, firmware notes, and mount tooling", "description_language": "bilingual", "description_zh": "Fujitsu Quaderno 研究、固件笔记与挂载工具。", "full_name": "lachlanchen/FujitsuQuaderno", "id": "scan-1267437800", "license": null, "observed_at": "2026-10-16T11:54:24.839772Z", "pushed_at": "2026-10-15T08:30:17Z", "readme_sha256": "b9ba5c33f3169e74567147739d701223ef70c9ec4618fb9d07fc36b0e17a51d4", "readme_url": "https://github.com/lachlanchen/FujitsuQuaderno/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "digital-paper", "e-ink", "firmware-analysis", "fujitsu-quaderno", "jailbreak-research", "macos", "mount-tools", "quaderno" ], "url": "https://github.com/lachlanchen/FujitsuQuaderno", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Multi-Agent Collaborative Embedded Firmware Defect Prediction and Automated Repair System", "description_language": "bilingual", "description_zh": "多智能体协作的嵌入式固件缺陷预测与自动修复系统。", "full_name": "Lenny-AGI/firmware-defect-prediction", "id": "scan-1239662635", "license": "NOASSERTION", "observed_at": "2026-10-16T11:54:23.655238Z", "pushed_at": "2026-05-15T11:03:53Z", "readme_sha256": "d3679f8c5a13652656b38949f3a15e4fdb6568e71f3ce75dab256c79a06b010f", "readme_url": "https://github.com/Lenny-AGI/firmware-defect-prediction/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "automated-repair", "bug-detection", "defect-prediction", "embedded-systems", "firmware-analysis", "freertos", "llm", "multi-agent", "rtos", "static-analysis" ], "url": "https://github.com/Lenny-AGI/firmware-defect-prediction", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Youdao Dictionary Pen S6 (YDPS6-1) firmware analysis notes — ADB auth, OTA security, WebSocket 9307, setAdbEnable call chain. Read-only research archive, no exploits.", "description_language": "bilingual", "description_zh": "有道词典笔 S6（YDPS6-1）固件分析笔记，涵盖 ADB 认证、OTA 安全、WebSocket 9307 及 setAdbEnable 调用链。只读研究档案，不含漏洞利用。", "full_name": "likzq30-ship-it/youdao-dictpen-s6-notes", "id": "scan-1253760359", "license": "CC-BY-4.0", "observed_at": "2026-10-16T11:54:24.146526Z", "pushed_at": "2026-09-16T16:21:20Z", "readme_sha256": "8d11a59f32d4c31334235b1bc433b36914c7395e0aeda13c20ad856cbc3a91d6", "readme_url": "https://github.com/likzq30-ship-it/youdao-dictpen-s6-notes/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "dictionary-pen", "embedded-linux", "firmware-analysis", "research", "reverse-engineering", "youdao" ], "url": "https://github.com/likzq30-ship-it/youdao-dictpen-s6-notes", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Professional interactive Firmware Audit Tool for static security analysis. Detects hardcoded credentials, private keys, and shell backdoors in firmware filesystems.", "description_language": "bilingual", "description_zh": "用于静态安全分析的专业交互式固件审计工具，可检测固件文件系统中的硬编码凭据、私钥和 Shell 后门。", "full_name": "M-Tarantino/PFAT-Firmware-Audit-Tool", "id": "scan-1128944909", "license": "MIT", "observed_at": "2026-10-16T11:54:20.341444Z", "pushed_at": "2026-01-06T15:18:30Z", "readme_sha256": "552262347a137ef581867cc7254dabb485d79937cda92605845fbc534d11f6c0", "readme_url": "https://github.com/M-Tarantino/PFAT-Firmware-Audit-Tool/blob/main/README.MD", "stars": 0, "targets": [ "firmware" ], "topics": [ "audit", "cybersecurity", "cybersecurity-tools", "firmware-analysis", "infosec", "python", "python3" ], "url": "https://github.com/M-Tarantino/PFAT-Firmware-Audit-Tool", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "rooting a $30 camera.", "description_language": "bilingual", "description_zh": "为一台 30 美元的摄像头获取 root 权限。", "full_name": "Matin22/tenda-cp3-security-research", "id": "scan-1339665973", "license": "MIT", "observed_at": "2026-10-16T11:54:28.863090Z", "pushed_at": "2026-09-01T08:03:08Z", "readme_sha256": "2902fe112214962a9a5992f5faeac130b82f812648e99d27d50c55ed2626957a", "readme_url": "https://github.com/Matin22/tenda-cp3-security-research/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "iot", "iot-security", "ip-camera", "tenda" ], "url": "https://github.com/Matin22/tenda-cp3-security-research", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "ESP32 firmware inspector and Xtensa symbol matcher", "description_language": "bilingual", "description_zh": "ESP32 固件检查器与 Xtensa 符号匹配工具。", "full_name": "mkrlabs-io/espfw", "id": "scan-1383893072", "license": "Apache-2.0", "observed_at": "2026-10-16T11:54:34.882030Z", "pushed_at": "2026-09-23T17:12:27Z", "readme_sha256": "dd6752b1d82aa9e80f74073bb4c3ebe10e7f9c19a562c43b9477669566998523", "readme_url": "https://github.com/mkrlabs-io/espfw/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "esp32", "firmware-analysis", "reverse-engineering", "xtensa" ], "url": "https://github.com/mkrlabs-io/espfw", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Professional Firmware Crash Dump Analyzer written in C and Python with CRC verification, stack tracing, symbol resolution, crash signature generation, and crash statistics dashboard.", "description_language": "bilingual", "description_zh": "使用 C 与 Python 编写的专业固件崩溃转储分析器，提供 CRC 校验、栈跟踪、符号解析、崩溃特征生成及崩溃统计仪表板。", "full_name": "nayanapriyaknaik-stack/Firmware-Crash-Dump-Analyzer", "id": "scan-1295471216", "license": "MIT", "observed_at": "2026-10-16T11:54:26.583964Z", "pushed_at": "2026-07-09T17:08:29Z", "readme_sha256": "cbd8f4a04cef372b454b1baf71dbfebcdc1b40fe7332acfaf7cd952de627f623", "readme_url": "https://github.com/nayanapriyaknaik-stack/Firmware-Crash-Dump-Analyzer/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "c", "crash-dump", "crc32", "debugging", "embedded", "embedded-systems", "firmware", "firmware-analysis", "python", "stack-trace" ], "url": "https://github.com/nayanapriyaknaik-stack/Firmware-Crash-Dump-Analyzer", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reproducible pipeline that turns gateway firmware images into facts about the OpenWebNet protocol — frame formats, code tables, and gateway behaviour.", "description_language": "bilingual", "description_zh": "可复现的流程，将网关固件镜像转化为关于 OpenWebNet 协议的事实，包括帧格式、代码表和网关行为。", "full_name": "OpenWebNet-HA/own-firmware-oracle", "id": "scan-1402996196", "license": "Apache-2.0", "observed_at": "2026-10-16T11:54:36.132686Z", "pushed_at": "2026-10-16T09:54:36Z", "readme_sha256": "01c8bd368ca437872e6224882c0eabbc495efa68512f61084d898328587976d9", "readme_url": "https://github.com/OpenWebNet-HA/own-firmware-oracle/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "bticino", "firmware-analysis", "legrand", "myhome", "openwebnet", "test-oracle" ], "url": "https://github.com/OpenWebNet-HA/own-firmware-oracle", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Scripts to probe a K2Plus for analysis and to generate filesystem snapshots for review.", "description_language": "bilingual", "description_zh": "用于探测 K2Plus 以开展分析，并生成文件系统快照供审阅的脚本。", "full_name": "RayWilliamsII/k2plus-maintenance", "id": "scan-1248864938", "license": null, "observed_at": "2026-10-16T11:54:24.056282Z", "pushed_at": "2026-05-30T21:51:50Z", "readme_sha256": "5d8af5ee952bcc53ef5e0fe81dacc7498ca88ce13aa47fb9c8c6ad701f8078c7", "readme_url": "https://github.com/RayWilliamsII/k2plus-maintenance/blob/master/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "configuration-files", "firmware-analysis", "k2plus" ], "url": "https://github.com/RayWilliamsII/k2plus-maintenance", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "acccessing the root shell of tp-link router (TL-WR850n) via UART and a bit of reverse engineering", "description_language": "bilingual", "description_zh": "通过 UART 和少量逆向工程，访问 TP-Link 路由器（TL-WR850n）的 root shell。", "full_name": "rudra-patell/tp-link_UART-root-shell", "id": "scan-1193403508", "license": "MIT", "observed_at": "2026-10-16T11:54:21.960153Z", "pushed_at": "2026-06-11T05:20:32Z", "readme_sha256": "838749f4a0d6d26ab71589ac5ac90a484cedbd55fc6d5bb3254766ba43d167e6", "readme_url": "https://github.com/rudra-patell/tp-link_UART-root-shell/blob/main/readme.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "embedded-security", "firmware-analysis", "reverse-engineering" ], "url": "https://github.com/rudra-patell/tp-link_UART-root-shell", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Firmware security research on public targets: patch-diff case studies of router command injection (DrayTek and D-Link n-days), a reusable triage, diff and report toolchain, and a MAVLink security test harness for PX4/ArduPilot SITL.", "description_language": "bilingual", "description_zh": "针对公开目标的固件安全研究：路由器命令注入的补丁差异案例（DrayTek 和 D-Link 已知漏洞）、可复用的初筛／差异比较／报告工具链，以及用于 PX4／ArduPilot SITL 的 MAVLink 安全测试框架。", "full_name": "samyoon727ca/firmware-security-research", "id": "scan-1364030149", "license": "MIT", "observed_at": "2026-10-18T14:35:50.488555Z", "pushed_at": "2026-10-01T12:42:30Z", "readme_sha256": "961a066932c5b1087d44d194396915419d8c7d8753394a4e2f7c853267b05f87", "readme_url": "https://github.com/samyoon727ca/firmware-security-research/blob/e2e32e4fe2bd08a72ca5967b10395932856e4603/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "ardupilot", "binary-diffing", "command-injection", "cvss", "embdedded-security", "firmware-analysis", "ghidra", "iot-security-testing", "mavlink", "patch-diffing", "px4", "reverse-engineering-", "vulnerability-research" ], "url": "https://github.com/samyoon727ca/firmware-security-research", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A practical walk through SWD (Serial Wire Debug) reconnaissance, memory mapping, and firmware acquisition; because debug interfaces rarely keep secrets for long :)", "description_language": "bilingual", "description_zh": "SWD（Serial Wire Debug）探查、内存映射与固件获取的实践教程；毕竟调试接口很难长久保守秘密 :)", "full_name": "sanisapatrikar/SWD-Recon", "id": "scan-1324464711", "license": null, "observed_at": "2026-10-16T11:54:28.091975Z", "pushed_at": "2026-08-27T11:42:36Z", "readme_sha256": "133125b47c855741122397f7ca1ef7ebd94b035184430c020436e71055191911", "readme_url": "https://github.com/sanisapatrikar/SWD-Recon/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "arm", "cortex-m", "debugging", "embedded-security", "embedded-systems", "firmware", "firmware-analysis", "gnss", "hardware", "hardware-hacking", "hardware-security", "jlink", "linux", "stm32", "swd" ], "url": "https://github.com/sanisapatrikar/SWD-Recon", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A practical walk from the PCB to Root Shell, because turns out 4 copper pads had a lot to say :)", "description_language": "bilingual", "description_zh": "从 PCB 到 Root Shell 的实践之旅，因为 4 个铜焊盘原来藏着不少信息 :)", "full_name": "sanisapatrikar/UART-Recon", "id": "scan-1320701314", "license": null, "observed_at": "2026-10-16T11:54:27.980843Z", "pushed_at": "2026-08-09T10:41:41Z", "readme_sha256": "47e881b4a63216d0d57c1c4e7ec549b96e7e5effcda794d5c1ea710b354f069d", "readme_url": "https://github.com/sanisapatrikar/UART-Recon/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "embedded", "embedded-security", "firmware", "firmware-analysis", "hardware", "hardware-hacking", "hardware-security", "iot", "iot-device", "iot-security", "linux", "uart", "uart-interface" ], "url": "https://github.com/sanisapatrikar/UART-Recon", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": ".FirmEx is a unified framework for embedded device security that combines automated firmware extraction with real-time sensor anomaly detection. This work was accepted at IEEE Intelligent Computing and Systems at the Edge (ICEEdge) Student Forum 2025", "description_language": "bilingual", "description_zh": "FirmEx 是统一的嵌入式设备安全框架，将自动固件提取与实时传感器异常检测相结合。该工作已被 IEEE Intelligent Computing and Systems at the Edge（ICEEdge）Student Forum 2025 接收。", "full_name": "santhoshgandham/FirmEx", "id": "scan-1026922352", "license": null, "observed_at": "2026-10-16T11:54:19.466084Z", "pushed_at": "2025-11-29T12:11:30Z", "readme_sha256": "aa40d22c0dbc6518cea4d014770678d901c439b5300a48a2bf19c83e3b03713e", "readme_url": "https://github.com/santhoshgandham/FirmEx/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "embedded-systems", "firmware-analysis", "hardware-hacking", "hardware-security" ], "url": "https://github.com/santhoshgandham/FirmEx", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Audit extracted IoT firmware for hardcoded credentials, default accounts, and outdated components", "description_language": "bilingual", "description_zh": "审计已提取的物联网固件，检查硬编码凭据、默认账号和过时组件", "full_name": "shadow-ciper/iot-firmware-auditor", "id": "scan-1400766257", "license": null, "observed_at": "2026-10-16T11:54:35.846255Z", "pushed_at": "2026-10-01T22:04:55Z", "readme_sha256": "e5eea1209e08e03de7da06f77efc65db0acec6b53a1ca9ac072ad2d702c65810", "readme_url": "https://github.com/shadow-ciper/iot-firmware-auditor/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "binwalk", "embedded", "firmware", "firmware-analysis", "iot", "penetration-testing", "python", "security" ], "url": "https://github.com/shadow-ciper/iot-firmware-auditor", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "RSS-Webs / GoAhead auth bypass and configuration leak. Vulnerability research affecting Ralink/MediaTek SDK router firmware across multiple vendors", "description_language": "bilingual", "description_zh": "RSS-Webs／GoAhead 认证绕过与配置泄露漏洞研究，影响多家厂商基于 Ralink／MediaTek SDK 的路由器固件。", "full_name": "superswan/rss-webs-vuln", "id": "scan-1295490420", "license": null, "observed_at": "2026-10-16T11:54:27.093009Z", "pushed_at": "2026-07-09T15:41:42Z", "readme_sha256": "cdb55cd1f41385ef707b19d3a26e0914cdcb8632cba208d62e147a3757e35f9b", "readme_url": "https://github.com/superswan/rss-webs-vuln/blob/master/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "auth-bypass", "embedded", "firmware-analysis", "iot-security", "router-security", "vulnerability-research" ], "url": "https://github.com/superswan/rss-webs-vuln", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Defensive IoT firmware static analysis and AFL++ fuzzing lab", "description_language": "bilingual", "description_zh": "防御用途的物联网固件静态分析与 AFL++ 模糊测试实验室", "full_name": "teriyakki-jin/firm-sentry", "id": "scan-1331799960", "license": "MIT", "observed_at": "2026-10-16T11:54:28.357252Z", "pushed_at": "2026-08-12T08:35:53Z", "readme_sha256": "168a2f657e5a5e995e6616523d3e1996afdbcf2094cee89212aa5d5b899ce440", "readme_url": "https://github.com/teriyakki-jin/firm-sentry/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "aflplusplus", "firmware-analysis", "fuzzing", "iot-security", "python" ], "url": "https://github.com/teriyakki-jin/firm-sentry", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Integrated suite for accelerating Linux hardware driver development through automated capture, ML-assisted firmware analysis, and community-driven knowledge sharing — making reverse engineering 10x faster and accessible beyond kernel specialists.", "description_language": "bilingual", "description_zh": "集成工具套件，通过自动捕获、机器学习辅助固件分析及社区知识共享，加快 Linux 硬件驱动开发，使逆向工程速度提升 10 倍，并让内核专家之外的人也能参与。", "full_name": "tpt-solutions/tpt-res", "id": "scan-1282496810", "license": "NOASSERTION", "observed_at": "2026-10-16T11:54:26.210536Z", "pushed_at": "2026-06-27T21:17:28Z", "readme_sha256": "50b46ea1189208a8d0d3de78b6d241d4b1fedc5c612eb5b06eb4bb669930cb65", "readme_url": "https://github.com/tpt-solutions/tpt-res/blob/master/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "firmware-analysis", "hardware-analysis", "hardware-compatibility", "kernel-development", "knowledge-graph", "linux", "linux-drivers", "machine-learning", "reverse-engineering", "rust" ], "url": "https://github.com/tpt-solutions/tpt-res", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering and Linux tools for the HONOR MagicBook built-in NFC tag (Fudan FM11NT082C / ACPI NTAG0001): variant detection (NTCI vs NTCZ), safe NDEF backup and write", "description_language": "bilingual", "description_zh": "针对 HONOR MagicBook 内置 NFC 标签（Fudan FM11NT082C／ACPI NTAG0001）的逆向工程与 Linux 工具，包括变体检测（NTCI 与 NTCZ）以及安全的 NDEF 备份和写入。", "full_name": "varyashine/honor-magicbook-nfc", "id": "scan-1414839336", "license": "MIT", "observed_at": "2026-10-16T11:54:37.082770Z", "pushed_at": "2026-10-11T23:08:01Z", "readme_sha256": "9cddd8dad4d72b2ced3013aaf625a1e088e893c1befef74c307959f29f92c655", "readme_url": "https://github.com/varyashine/honor-magicbook-nfc/blob/master/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "firmware-analysis", "fm11nt082c", "fudan", "ghidra", "hardware-hacking", "honor", "i2c", "linux", "magicbook", "magicbook-pro-14", "ndef", "nfc", "nfc-tag", "ntag", "ntag0001", "one-tap-handoff", "python", "reverse-engineering", "windows-driver" ], "url": "https://github.com/varyashine/honor-magicbook-nfc", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "A package of tools for decrypting, signature switching, decompiling, and extraction of TJC and Nextion Firmware .tft files", "description_language": "bilingual", "description_zh": "用于 TJC 和 Nextion 固件 .tft 文件解密、签名切换、反编译及提取的工具包。", "full_name": "xXHenneBXx/TFTTools_V2_Decompiler", "id": "scan-1342365009", "license": null, "observed_at": "2026-10-16T11:54:29.131486Z", "pushed_at": "2026-08-22T02:54:43Z", "readme_sha256": "1c7f9380c94e755bd068b37f05f4763365aa3f7028e8dcf95bb69fe5b43ee5ad", "readme_url": "https://github.com/xXHenneBXx/TFTTools_V2_Decompiler/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "creality", "creality3d", "ender", "ender-3", "ender3", "ender3v2", "firmware", "firmware-analysis", "firmware-development", "firmware-tools", "nextion", "nextion-device", "nextion-display", "nextion-hmi", "tjc", "tjc-device", "tjc-firmware", "usart", "usart-hmi" ], "url": "https://github.com/xXHenneBXx/TFTTools_V2_Decompiler", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Modular IoT Firmware Security Scanner with CVE and Compliance Analysis", "description_language": "bilingual", "description_zh": "模块化物联网固件安全扫描器，提供 CVE 和合规分析", "full_name": "youemeeare/IoT-Firmware-Security-Scanner", "id": "scan-1139277960", "license": null, "observed_at": "2026-10-16T11:54:20.645678Z", "pushed_at": "2026-01-21T18:54:01Z", "readme_sha256": "6cd22557a25ffceab54fab1dd29b7746f5bf7ef9ac2cb6d2d5d28e23228d19e9", "readme_url": "https://github.com/youemeeare/IoT-Firmware-Security-Scanner/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "blue-team", "cybersecurity", "firmware-analysis", "iot-security", "python", "vulnerability-scanner" ], "url": "https://github.com/youemeeare/IoT-Firmware-Security-Scanner", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Next-gen firmware security analysis workbench for CLI, web, and desktop. Scan firmware, detect secrets, generate SBOM/CVE candidates, compare versions, and explain risk with Firmware Risk DNA.", "description_language": "bilingual", "description_zh": "面向命令行、Web 与桌面的新一代固件安全分析工作台，可扫描固件、检测秘密信息、生成 SBOM／CVE 候选结果、比较版本，并通过 Firmware Risk DNA 解释风险。", "full_name": "YukiCodepth/firmware-security-workbench", "id": "scan-1217403516", "license": "MIT", "observed_at": "2026-10-16T11:54:22.742747Z", "pushed_at": "2026-04-24T10:35:10Z", "readme_sha256": "9942b4363c5524806a7022bb0aa175ac51e2802afb4ea498237c3d3937f1f8cc", "readme_url": "https://github.com/YukiCodepth/firmware-security-workbench/blob/main/README.md", "stars": 0, "targets": [ "app", "firmware", "website" ], "topics": [ "cve", "cybersecurity", "embedded-security", "fastapi", "firmware-analysis", "firmware-security", "iot-security", "sbom", "tauri", "yara" ], "url": "https://github.com/YukiCodepth/firmware-security-workbench", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Open technical handbook and reproducible preservation research for Bose SoundTouch devices, firmware, local protocols, playback, multiroom and interoperability.", "description_language": "bilingual", "description_zh": "面向 Bose SoundTouch 设备、固件、本地协议、播放、多房间与互操作性的开放技术手册和可复现保存研究。", "full_name": "Zimbo88/soundtouch-preservation-research", "id": "scan-1358469022", "license": "NOASSERTION", "observed_at": "2026-10-16T11:54:31.736141Z", "pushed_at": "2026-09-05T18:46:22Z", "readme_sha256": "f6fc312a527747b325341bf5d57bd6ac07254d3c5817d6b07d6df9c2d2ecfd39", "readme_url": "https://github.com/Zimbo88/soundtouch-preservation-research/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "airplay2", "bose-soundtouch", "device-preservation", "embedded-linux", "firmware-analysis", "interoperability", "multiroom", "protocol-analysis", "reverse-engineering", "soundtouch" ], "url": "https://github.com/Zimbo88/soundtouch-preservation-research", "verification": "automated-readme-scan" }, { "category": "firmware", "description_en": "Reverse engineering and full security audit of a legacy Broadcom BCM96338 router. Features firmware exfiltration, SquashFS analysis, and DES hash cracking.", "description_language": "bilingual", "description_zh": "对旧款 Broadcom BCM96338 路由器进行逆向工程和完整安全审计，涵盖固件导出、SquashFS 分析及 DES 哈希破解。", "full_name": "zuhtuEren/bcm96338-re", "id": "scan-1176858231", "license": "MIT", "observed_at": "2026-10-16T11:54:21.472038Z", "pushed_at": "2026-03-09T13:05:35Z", "readme_sha256": "0da90e7007799019d10de0d474cab1fe49038b2b51fcadd57a6795df981ea274", "readme_url": "https://github.com/zuhtuEren/bcm96338-re/blob/main/README.md", "stars": 0, "targets": [ "firmware" ], "topics": [ "bcm6338", "broadcom", "embedded-linux", "firmware-analysis", "hardware-hacking", "hash-cracking", "netcat", "penetration-testing", "reverse-engineering" ], "url": "https://github.com/zuhtuEren/bcm96338-re", "verification": "automated-readme-scan" } ], "snapshot": "2026-10-20", "verification": "automated-readme-scan", "version": 1 }