# Firmware

> Browse 228 repositories with project descriptions, upstream links, and license information.

Automatically discovered repository index, unreviewed. Stars, licenses and last-push times are collection-time snapshots.
Selection published: 2026-10-20 UTC

- HTML: <https://awesomerea.org/browse/firmware/>
- JSON: <https://awesomerea.org/browse/firmware/index.json>
- 简体中文: <https://awesomerea.org/zh/browse/firmware/index.md>

- [ReFirmLabs/binwalk](https://github.com/ReFirmLabs/binwalk): 14,491 stars · MIT · last push 2026-08 · Firmware Analysis Tool
- [LongSoft/UEFITool](https://github.com/LongSoft/UEFITool): 5,752 stars · BSD-2-Clause · last push 2026-07 · UEFI firmware image viewer and editor
- [e-m-b-a/emba](https://github.com/e-m-b-a/emba): 3,712 stars · GPL-3.0 · last push 2026-10 · EMBA - The firmware security analyzer
- [ma1co/Sony-PMCA-RE](https://github.com/ma1co/Sony-PMCA-RE): 2,916 stars · MIT · last push 2024-07 · Reverse Engineering Sony Digital Cameras
- [onekey-sec/unblob](https://github.com/onekey-sec/unblob): 2,577 stars · MIT · last push 2026-10 · Extract files from any kind of container formats
- [firmadyne/firmadyne](https://github.com/firmadyne/firmadyne): 2,114 stars · MIT · last push 2024-07 · Platform for emulation and dynamic analysis of Linux-based firmware
- [redballoonsecurity/ofrak](https://github.com/redballoonsecurity/ofrak): 2,080 stars · last push 2026-08 · OFRAK: unpack, modify, and repack binaries.
- [marin-m/vmlinux-to-elf](https://github.com/marin-m/vmlinux-to-elf): 1,832 stars · GPL-3.0 · last push 2026-10 · A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
- [attify/firmware-analysis-toolkit](https://github.com/attify/firmware-analysis-toolkit): 1,615 stars · last push 2026-09 · Firmware security research platform combining binary analysis, taint tracing, and emulation across IoT, edge AI, mobile devices, and robotics.
- [fkie-cad/FACT_core](https://github.com/fkie-cad/FACT_core): 1,468 stars · GPL-3.0 · last push 2026-10 · Firmware Analysis and Comparison Tool
- [platomav/MEAnalyzer](https://github.com/platomav/MEAnalyzer): 1,335 stars · BSD-2-Clause-Patent · last push 2026-09 · Intel Engine & Graphics Firmware Analysis Tool
- [REhints/efiXplorer](https://github.com/REhints/efiXplorer): 1,138 stars · GPL-3.0 · last push 2026-10 · IDA plugin and loader for UEFI firmware analysis and reverse engineering automation
- [Anime4000/RTL960x](https://github.com/Anime4000/RTL960x): 1,053 stars · Unlicense · last push 2026-06 · Hacking & Reverse Engineering RTL960x-based xPON ONTs to suit your OLT
- [gcarmix/HexWalk](https://github.com/gcarmix/HexWalk): 1,027 stars · GPL-3.0 · last push 2026-09 · Hex Viewer/Editor/Analyzer compatible with Linux/Windows/MacOS
- [pr0v3rbs/FirmAE](https://github.com/pr0v3rbs/FirmAE): 949 stars · MIT · last push 2026-06 · Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis
- [FirmWire/FirmWire](https://github.com/FirmWire/FirmWire): 891 stars · BSD-3-Clause · last push 2026-08 · FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares
- [sigrokproject/pulseview](https://github.com/sigrokproject/pulseview): 805 stars · GPL-3.0 · last push 2025-11 · Read-only mirror of the official repo at git://sigrok.org/pulseview. Pull requests welcome. Please file bugreports at sigrok.org/bugzilla.
- [airbus-seclab/cpu_rec](https://github.com/airbus-seclab/cpu_rec): 757 stars · Apache-2.0 · last push 2024-03 · Recognize cpu instructions in an arbitrary binary file
- [maddiestone/IDAPythonEmbeddedToolkit](https://github.com/maddiestone/IDAPythonEmbeddedToolkit): 690 stars · MIT · last push 2019-08 · IDA Python Embedded Toolkit -- IDAPython scripts for automating analysis of firmware of embedded devices
- [quarkslab/binbloom](https://github.com/quarkslab/binbloom): 586 stars · Apache-2.0 · last push 2024-06 · Raw binary firmware analysis software
- [avatartwo/avatar2](https://github.com/avatartwo/avatar2): 579 stars · Apache-2.0 · last push 2025-03 · Python core of avatar²
- [cruise-automation/fwanalyzer](https://github.com/cruise-automation/fwanalyzer): 516 stars · Apache-2.0 · last push 2023-10 · a tool to analyze filesystem images for security
- [al3xtjames/ghidra-firmware-utils](https://github.com/al3xtjames/ghidra-firmware-utils): 506 stars · last push 2026-09 · Ghidra utilities for analyzing PC firmware
- [scriptingxss/owasp-fstm](https://github.com/scriptingxss/owasp-fstm): 502 stars · CC-BY-SA-4.0 · last push 2026-06 · The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, and Information Security professionals with conducting firmware security assessments.
- [ChrisTheCoolHut/Firmware_Slap](https://github.com/ChrisTheCoolHut/Firmware_Slap): 476 stars · GPL-3.0 · last push 2020-09 · Discovering vulnerabilities in firmware through concolic analysis and function clustering.
- [nmatt0/moria](https://github.com/nmatt0/moria): 418 stars · MIT · last push 2026-10 · IoT firmware identification and extraction
- [DSecurity/efiSeek](https://github.com/DSecurity/efiSeek): 408 stars · Apache-2.0 · last push 2024-06 · Ghidra analyzer for UEFI firmware.
- [e-m-b-a/embark](https://github.com/e-m-b-a/embark): 395 stars · MIT · last push 2026-07 · EMBArk - The firmware security scanning environment
- [sgayou/rbasefind](https://github.com/sgayou/rbasefind): 375 stars · MIT · last push 2020-09 · A firmware base address search tool.
- [nmatt0/mithril](https://github.com/nmatt0/mithril): 363 stars · MIT · last push 2026-10 · IoT static scanner for secrets, SBOM, CVEs and more.
- [binarly-io/fwhunt-scan](https://github.com/binarly-io/fwhunt-scan): 246 stars · GPL-3.0 · last push 2025-05 · Tools for analyzing UEFI firmware and checking UEFI modules with FwHunt rules
- [chrivers/samsung-firmware-magic](https://github.com/chrivers/samsung-firmware-magic): 238 stars · last push 2021-04 · Tool for decrypting the firmware files for Samsung SSDs
- [D3CRYPT-1/Infiltra-Firmware](https://github.com/D3CRYPT-1/Infiltra-Firmware): 205 stars · GPL-2.0 · last push 2026-03 · Infiltra Firmware is an open-source firmware for wireless security testing, network analysis, and hardware hacking. FLASH IT BELOW USING OUR WEB FLAHSER!
- [0xricksanchez/dlink-decrypt](https://github.com/0xricksanchez/dlink-decrypt): 201 stars · GPL-3.0 · last push 2023-12 · D-Link firmware decryption PoC
- [quarkslab/pyrrha](https://github.com/quarkslab/pyrrha): 172 stars · Apache-2.0 · last push 2026-10 · A tool for firmware cartography
- [dslsdzc/rev-skills](https://github.com/dslsdzc/rev-skills): 162 stars · Apache-2.0 · last push 2026-10 · 122 AI skills for reverse engineering: malware analysis, software reversing, firmware and embedded systems, protocol reversing, mobile apps, unpacking and deobfuscation, software cracking, vulnerability research, managed code, forensics and intelligence, and CTFs.
- [MCUSec/uEmu](https://github.com/MCUSec/uEmu): 152 stars · last push 2023-11 · A Universal MCU Firmware Emulator for Dynamic Analysis without Any Hardware Dependence.
- [SamuelTulach/PatchBoot](https://github.com/SamuelTulach/PatchBoot): 144 stars · last push 2024-06 · Guide for patching AMI Aptio V UEFI firmware to circumvent Secure Boot checks
- [patois/RETracker](https://github.com/patois/RETracker): 136 stars · last push 2024-06 · Reverse Engineering Framework for the Polyend Tracker
- [DavidClawson/OpenScope-2C53T](https://github.com/DavidClawson/OpenScope-2C53T): 119 stars · GPL-3.0 · last push 2026-10 · Open-source reverse engineering and firmware development for the FNIRSI 2C53T oscilloscope/multimeter/signal generator
- [Accenture/FirmLoader](https://github.com/Accenture/FirmLoader): 109 stars · Apache-2.0 · last push 2024-12 · No description supplied by the upstream repository.
- [djr-747/nokia-dct3-emulator](https://github.com/djr-747/nokia-dct3-emulator): 92 stars · GPL-2.0 · last push 2026-07 · Open-source emulator + analysis toolkit for Nokia DCT3 phones (3310/3410/5210/8210/8250/8850…). Boots real firmware in the browser (WASM) and a native SDL GUI. Bring-your-own firmware — none included. GPL-2.
- [nmatt0/firmwaretools](https://github.com/nmatt0/firmwaretools): 90 stars · MIT · last push 2025-04 · a set of scripts and tools for various firmware analysis tasks
- [alexander-pick/shannon_modem_loader](https://github.com/alexander-pick/shannon_modem_loader): 87 stars · MIT · last push 2025-01 · Exynos Modem / Shannon baseband firmware loader for IDA Pro 8.x/9.x
- [matiaspl/LinkPi-ENCx](https://github.com/matiaspl/LinkPi-ENCx): 86 stars · last push 2026-07 · Reverse engineering and unofficial documentation of LinkPi ENC series (ENC1/ENC5/ENC9) and TBS 2603SE video encoders based on the F3520D platform — hardware analysis, firmware internals, streaming fixes, and hidden features.
- [Cr4sh/smram_parse](https://github.com/Cr4sh/smram_parse): 83 stars · GPL-3.0 · last push 2024-08 · System Management RAM analysis tool
- [cn0xroot/IFDA](https://github.com/cn0xroot/IFDA): 70 stars · Apache-2.0 · last push 2026-09 · IoT Firmware Deep Analysis: Automated reverse engineering and vulnerability discovery for IoT firmware binaries.
- [fkie-cad/LuckyCAT](https://github.com/fkie-cad/LuckyCAT): 70 stars · GPL-3.0 · last push 2020-07 · A distributed fuzzing management framework
- [RiS3-Lab/DICE-DMA-Emulation](https://github.com/RiS3-Lab/DICE-DMA-Emulation): 67 stars · last push 2023-10 · DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis
- [C00kie-/IoT-workshop-materials](https://github.com/C00kie-/IoT-workshop-materials): 65 stars · CC0-1.0 · last push 2024-08 · Presented hardware reverse engineering workshops since 2019
- [jowinjohnchemban/winbinwalk](https://github.com/jowinjohnchemban/winbinwalk): 60 stars · last push 2022-11 · binwalk for Windows
- [soyersoyer/basefind2](https://github.com/soyersoyer/basefind2): 60 stars · MIT · last push 2022-05 · A faster firmware base address scanner.
- [8051Enthusiast/allyourbase](https://github.com/8051Enthusiast/allyourbase): 57 stars · MIT · last push 2025-03 · Finds the base address of a firmware by comparing string addresses with target pointer addresses
- [xdarklight/mktplinkfw3](https://github.com/xdarklight/mktplinkfw3): 56 stars · GPL-2.0 · last push 2023-02 · Firmware format analysis for TP-Link firmwares with the version 3 header (0x03000000)
- [mosajjal/fortitool](https://github.com/mosajjal/fortitool): 50 stars · MIT · last push 2026-09 · Fortinet Firmware decryption and analysis tools
- [giek2000/ipod-classic-firmware-research](https://github.com/giek2000/ipod-classic-firmware-research): 45 stars · MIT · last push 2026-08 · iPod RetailOS firmware research — decryption, analysis, and wInd3x Classic support patch
- [tr4m0ryp/ios-26-activation-research](https://github.com/tr4m0ryp/ios-26-activation-research): 45 stars · last push 2026-07 · iOS 26.3 activation lock research -- 31 firmware vulnerabilities + VU#346053 BAA injection PoC
- [xchwarze/magic-extractor](https://github.com/xchwarze/magic-extractor): 43 stars · last push 2026-08 · Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.
- [theopolis/subzero](https://github.com/theopolis/subzero): 41 stars · MIT · last push 2014-08 · Firmware analysis gone wild.
- [HexLasso/FF-16-TUI](https://github.com/HexLasso/FF-16-TUI): 39 stars · MIT · last push 2026-09 · Interactive static pattern discovery tool to locate structures from frequent patterns
- [zhang-xr/FirmLLM](https://github.com/zhang-xr/FirmLLM): 35 stars · last push 2025-04 · LLMs for autonomous reasoning and analysis of firmware
- [schlarpc/insta360-link-firmware-re](https://github.com/schlarpc/insta360-link-firmware-re): 32 stars · last push 2026-08 · Reverse engineering of the Insta360 Link webcam firmware: UVC extension-unit control protocol, gesture pipeline, gimbal/PTZ command path, and firmware container format
- [lumirth/pw](https://github.com/lumirth/pw): 31 stars · CC0-1.0 · last push 2026-09 · A human-readable matching decompilation of the Pokéwalker firmware.
- [rweijnen/marstek-venus-e-firmware-notes](https://github.com/rweijnen/marstek-venus-e-firmware-notes): 31 stars · MPL-2.0 · last push 2025-08 · Reverse engineering notes, firmware analysis, and extracted content from the Marstek Venus E plug-in home battery
- [HelgeSverre/sony-vp-extract](https://github.com/HelgeSverre/sony-vp-extract): 30 stars · MIT · last push 2026-07 · Decrypt and extract voice guidance MP3 prompts from Sony WH-1000XM4 encrypted voice packs. AES key extracted via Bluetooth firmware dump of the Airoha MT2811 SoC.
- [chris-ritsen/samsung-tv-root](https://github.com/chris-ritsen/samsung-tv-root): 28 stars · Unlicense · last push 2026-09 · Samsung QN90B and QN90F root
- [shadowlamer/MDB-USB-adapter](https://github.com/shadowlamer/MDB-USB-adapter): 28 stars · last push 2025-01 · MDB-USB-adapter: An open-source hardware and software solution for converting Multi-Drop Bus (MDB) protocol to USB. Designed for vending machine integration, device emulation, and data analysis. Includes schematics, firmware, and documentation. Licensed under CERN Open Hardware License.
- [AT0myks/reolink-fw](https://github.com/AT0myks/reolink-fw): 26 stars · GPL-3.0 · last push 2024-11 · Extract information and files from Reolink firmwares.
- [schlarpc/elgato-cam-link-4k-firmware-re](https://github.com/schlarpc/elgato-cam-link-4k-firmware-re): 22 stars · MIT · last push 2026-08 · Firmware reverse engineering of the Elgato Cam Link 4K (USB 0fd9:0066): vendor HID protocol, SPI flash layout, FX3 and ECP5 firmware formats, update path, security analysis, and an independent flashing tool.
- [ethteck/lfgfx](https://github.com/ethteck/lfgfx): 21 stars · MIT · last push 2022-12 · N64 Graphics data detection and analysis
- [sheabot/binwalk-docker](https://github.com/sheabot/binwalk-docker): 21 stars · MIT · last push 2020-12 · Docker container with all extra tools installed to get the most out of binwalk
- [avatarone/avatar-samples](https://github.com/avatarone/avatar-samples): 20 stars · Apache-2.0 · last push 2017-06 · Samples of Avatar firmware analysis (including NDSS'14 cases)
- [c0brabaghdad1/FETB](https://github.com/c0brabaghdad1/FETB): 20 stars · last push 2021-02 · FETB : Take URL of File For Analysis using File + ExifTool + Binwalk Commands
- [david-oswald/iot-fw-extraction](https://github.com/david-oswald/iot-fw-extraction): 19 stars · last push 2019-09 · Additional material for our paper "Breaking all the Things - A Systematic Survey of Firmware Extraction Techniques for IoT Devices" (CARDIS 2018)
- [Crymeiriver/LS150](https://github.com/Crymeiriver/LS150): 18 stars · last push 2019-01 · Astell&Kern iRiver LS150 SPI firmware dump + telnet access
- [BadChemical/IoT-Vulnerability-Research-Public](https://github.com/BadChemical/IoT-Vulnerability-Research-Public): 17 stars · last push 2026-10 · Independent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws.
- [MikeWuPing/bios-security-analysis](https://github.com/MikeWuPing/bios-security-analysis): 17 stars · MIT · last push 2026-06 · A Claude Code skill for comprehensive UEFI/BIOS firmware security vulnerability analysis. Distills years of BIOS security research expertise into reusable AI capabilities, covering firmware image parsing, deep decompression, microcode extraction, certificate auditing, and final report generation.
- [Coreymillia/Shark-Bait-add-on-Bruce-firmware-M5stackc-plus-](https://github.com/Coreymillia/Shark-Bait-add-on-Bruce-firmware-M5stackc-plus-): 16 stars · last push 2025-10 · *Features:* *Real-time WiFi threat detection* *4 targeted counter-attack methods* (Karma poisoning, Evil twin disruption, etc.) - *Threat monitoring* - packet analysis - *Coreymillia & GitHub Copilot Created* - *Based on:* Bruce firmware by @pr3y & team - *Inspiration:* Evil-Cardputer by @7h30th3r0n3 - Feel free to use, modify, and distribute
- [TermuxHackz/Enhanced-IPSW-Firmware-Analysis-Tool](https://github.com/TermuxHackz/Enhanced-IPSW-Firmware-Analysis-Tool): 15 stars · GPL-2.0 · last push 2024-11 · This tool provides detailed analysis of changes between iOS firmware versions and their potential impact on device functionality.
- [ander1044/wairz](https://github.com/ander1044/wairz): 14 stars · AGPL-3.0 · last push 2026-03 · An open-source AI assisted firmware analysis tool
- [Mimoja/MFT](https://github.com/Mimoja/MFT): 14 stars · AGPL-3.0 · last push 2020-05 · Mimojas Firmware Toolkit for unpacking and analysis firmware images
- [numbpill3d/spi_flash_auto_unlocker](https://github.com/numbpill3d/spi_flash_auto_unlocker): 14 stars · MIT · last push 2026-10 · Python utility for dumping and patching SPI firmware to remove supported BIOS and UEFI passwords.
- [osecurio/mtkview](https://github.com/osecurio/mtkview): 14 stars · MIT · last push 2026-10 · A BinaryNinja loader plugin for MTK Preloaders and Little Kernels
- [OTARIS/FirmwareCheck](https://github.com/OTARIS/FirmwareCheck): 14 stars · Apache-2.0 · last push 2021-07 · Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.
- [Bin2Own/SinkTaint](https://github.com/Bin2Own/SinkTaint): 13 stars · last push 2025-10 · A prototype of taint-style vulnerablity discovery method in embedded firmware (SinkTaint), a precise a novel taint-style vulnerability discovery method by employsing backtracking and constraint analysis to achieve high precision.
- [cetio/VEXAPI](https://github.com/cetio/VEXAPI): 13 stars · Apache-2.0 · last push 2026-09 · Reverse analysis and documentation of VEX Robotics internal firmware and APIs.
- [furrtek/HanoverFlipDot](https://github.com/furrtek/HanoverFlipDot): 13 stars · Unlicense · last push 2017-10 · Analysis of a Hanover Displays flip-dot display firmware
- [R00T-Kim/SCOUT](https://github.com/R00T-Kim/SCOUT): 13 stars · Apache-2.0 · last push 2026-06 · Deterministic firmware-to-exploit evidence engine. Drop a firmware blob, get hash-anchored findings with SARIF + CycloneDX SBOM + verified exploit chains.
- [ismailtsdln/firmalyzer](https://github.com/ismailtsdln/firmalyzer): 12 stars · MIT · last push 2026-01 · Next-Generation Firmware Analysis Toolkit. A hybrid Rust/Python toolkit for deep firmware analysis, extraction, and vulnerability discovery.
- [root-hunter/lenovo_bios](https://github.com/root-hunter/lenovo_bios): 12 stars · MIT · last push 2026-08 · Reverse engineering Lenovo IdeaPad Gaming 3 15ARH05 firmware: BIOS extraction, AMD PSP analysis, QEMU tracing, IFR recovery, and hidden Advanced menu research.
- [ByteHub-1337/SignalRF](https://github.com/ByteHub-1337/SignalRF): 11 stars · MIT · last push 2026-02 · Multi-tool RF analysis firmware for M5Stack Cardputer - WiFi scanner, BLE scanner, ultrasonic detector, signal mapper, and tracker detector
- [Ganapati/Firmware_web_rce_finder](https://github.com/Ganapati/Firmware_web_rce_finder): 11 stars · last push 2015-08 · FWRF is a open source tool for firmware web-side analysis.
- [NerdyProjects/usb2can_stm32f103](https://github.com/NerdyProjects/usb2can_stm32f103): 11 stars · last push 2017-12 · Analysis and firmware suggestion for cheap chinese USB2CAN adapter based on STM32F103
- [schlarpc/shure-mv7-firmware-re](https://github.com/schlarpc/shure-mv7-firmware-re): 11 stars · MIT · last push 2026-08 · Reverse engineering the Shure MV7: vendor HID console, PSoC 4 firmware, ADAU1761 SigmaDSP, and the firmware update protocol
- [TheMalwareGuardian/UEFI-Firmware-Analysis](https://github.com/TheMalwareGuardian/UEFI-Firmware-Analysis): 11 stars · GPL-3.0 · last push 2026-07 · UEFI firmware analysis & research on known vulnerabilities in early boot components
- [CouchTurtle/sc2-research](https://github.com/CouchTurtle/sc2-research): 10 stars · MIT · last push 2026-08 · Notes and Python tools for the Steam Controller 2 (Triton): HID reports, the firmware-update protocol, and firmware-blob analysis.
- [dirky9687/DIRK](https://github.com/dirky9687/DIRK): 10 stars · GPL-3.0 · last push 2026-10 · DIRK is open-source Red/Blue Team firmware for the M5Stack Cardputer ADV, featuring dual-band Wi-Fi with LAB5 MonsterC5, Bluetooth analysis, LoRa and IR tools, GPS wardriving via the official M5Stack LoRa/GPS Cap, and authorized security-testing labs.
- [kolezka/NL5H00X](https://github.com/kolezka/NL5H00X): 10 stars · MIT · last push 2026-09 · Firmware analysis and modification tools. Bypass security restrictions, install custom launchers, and safely modify locked-down Chinese projector devices with comprehensive backup and recovery scripts.
- [MilkAlien/tcrevenge](https://github.com/MilkAlien/tcrevenge): 10 stars · GPL-3.0 · last push 2021-01 · Hacking TrendChip Firmware FG824CD (ADSL modem/router *****v4)
- [Nester420/Firmware-Hunter-Pro](https://github.com/Nester420/Firmware-Hunter-Pro): 10 stars · MIT · last push 2026-05 · Advanced offline firmware triage and analysis tool for routers, IoT devices, DVRs, IP cameras, and embedded Linux firmware.
- [chi111i/binwalk_for_windows](https://github.com/chi111i/binwalk_for_windows): 9 stars · last push 2025-01 · Packaged Windows version of binwalk: https://github.com/ReFirmLabs/binwalk/releases/tag/v3.1.0
- [DatanoiseTV/revenant](https://github.com/DatanoiseTV/revenant): 9 stars · Apache-2.0 · last push 2026-07 · LLM-powered automated reverse-engineering engine for vendor-abandoned hardware and software
- [K1LLLAGT/SAAB_SUITE](https://github.com/K1LLLAGT/SAAB_SUITE): 9 stars · last push 2026-10 · “Full SAAB/GM diagnostic suite with Python engine, CAN tools, GDS2/Tech2Win integrations, SPS workflows, firmware packages, drivers, VM environments, documentation, and automation scripts. Includes UI/TUI modules, J2534 support, data analysis tools, and complete diagnostic/tuning workflows.”
- [zekog/oneplus-watch-3-firmware-dump](https://github.com/zekog/oneplus-watch-3-firmware-dump): 9 stars · last push 2026-10 · OnePlus Watch 3 (OPWWE251) Firmware Analysis, DTS Dump & Kernel Symbols
- [daumbrella/Gerbil](https://github.com/daumbrella/Gerbil): 8 stars · last push 2019-07 · A firmware analysis tool for lightweight IoT firmware
- [fkie-cad/FACT_firmadyne_analysis_plugin](https://github.com/fkie-cad/FACT_firmadyne_analysis_plugin): 8 stars · GPL-3.0 · last push 2018-07 · Integrates Firmadyne into FACT
- [h3adshotzz/htoolv3](https://github.com/h3adshotzz/htoolv3): 8 stars · last push 2023-06 · Static analysis and reverse engineering tool for iOS/macOS firmware files built for my final-year University project
- [immune-gmbh/agent](https://github.com/immune-gmbh/agent): 8 stars · MIT · last push 2023-12 · immune Guard agent application
- [LEO-Ricardo20/MetaCore-Studio](https://github.com/LEO-Ricardo20/MetaCore-Studio): 8 stars · last push 2026-08 · AI-assisted embedded and IoT development platform for hardware design, firmware generation, and local project analysis.
- [omarelshopky/pax-pos-app-pentest-guide](https://github.com/omarelshopky/pax-pos-app-pentest-guide): 8 stars · last push 2025-12 · Comprehensive pentest and reverse engineering guide for PAX Linux-based Point of Sale (PoS) merchant applications — firmware analysis, network interception, and app reversing.
- [paulwuertz/pexplorer](https://github.com/paulwuertz/pexplorer): 8 stars · MIT · last push 2026-10 · Static firmware analysis - for symbol files generated by puncover and as an experiment to do it all in-browser on just an debug ELF file
- [TheMalwareGuardian/SANS-SEC556-IoT-Penetration-Testing](https://github.com/TheMalwareGuardian/SANS-SEC556-IoT-Penetration-Testing): 8 stars · GPL-3.0 · last push 2026-05 · Review, resources, and pre-lab exercises for the SANS SEC556 IoT Penetration Testing course, covering hardware hacking, firmware analysis, wireless protocols and SDR.
- [VimRev/dma-lab](https://github.com/VimRev/dma-lab): 8 stars · MIT · last push 2026-05 · DMA Lab - Hardware-level anti-cheat research, firmware configs, FPGA guides and PCILeech resources
- [aw-junaid/embedded-and-iot-security](https://github.com/aw-junaid/embedded-and-iot-security): 7 stars · GPL-3.0 · last push 2026-07 · Explore embedded & IoT security: secure firmware, device hardening, encryption, and vulnerability analysis. Practical examples for secure IoT development.
- [Bin2Own/CINDY](https://github.com/Bin2Own/CINDY): 7 stars · last push 2023-04 · Accelerating Command Injection Vulnerability Discovery in Embedded Firmware with Static Backtracking Analysis
- [Excalibra/scripts](https://github.com/Excalibra/scripts): 7 stars · last push 2026-09 · Platform: Windows/Mac/Linux. Scripting: Various, no restrictions; customized as needed. Tasks: Desktop checks, software cracking, AV evasion, privilege execution, firmware read/write, password checks, Wi-Fi scans, cloud security, log analysis, NLP, and data analysis in humanities/social sciences.
- [fishilico/tpm-firmware](https://github.com/fishilico/tpm-firmware): 7 stars · last push 2020-04 · Analysis of the update of TPM firmware
- [mchristou/stegtool](https://github.com/mchristou/stegtool): 7 stars · MIT · last push 2024-05 · Steganography tool that extracts data from images
- [RLee203/Purple](https://github.com/RLee203/Purple): 7 stars · MIT · last push 2026-05 · Purple is a dual-mode Cardputer ADV firmware for Red Team and Blue Team field workflows, combining wireless recon, RF visibility, GPS tools, IR/NFC utilities, and on-device analysis in a compact handheld platform.
- [5h4d0wn1k/i1-firmware-extract](https://github.com/5h4d0wn1k/i1-firmware-extract): 6 stars · last push 2026-09 · Firmware extraction toolkit - unpacks and enumerates embedded images for IoT security analysis.
- [bluesadi/Yasat](https://github.com/bluesadi/Yasat): 6 stars · MIT · last push 2023-06 · (Undergraduate Capstone Project) Yasat - Yet Another Static Analysis Tool to detect cryptographic API misuses in firmware
- [cHo0s3N/JustCTF](https://github.com/cHo0s3N/JustCTF): 6 stars · last push 2019-11 · writeups! #JUSTCTF
- [CrimsonGlory/wairz](https://github.com/CrimsonGlory/wairz): 6 stars · AGPL-3.0 · last push 2026-10 · A free (as in freedom) AI assisted firmware analysis tool
- [efi4st/efi4st](https://github.com/efi4st/efi4st): 6 stars · MIT · last push 2026-10 · Automatic Firmware Analysis of Embedded Linux Devices as Preparation for Security Testing / Fuzzing
- [hitodama/libps4-symbols](https://github.com/hitodama/libps4-symbols): 6 stars · last push 2016-04 · Most recent PS4 symbols by firmware for analysis and convenience
- [jeremylaratro/PhotoSec](https://github.com/jeremylaratro/PhotoSec): 6 stars · GPL-3.0 · last push 2026-05 · A security-oriented Python script with bulk image analysis and security features such as metadata scrubbing, image file analysis, GPS data check, and file renaming.
- [msam13/wyze-cam-firmware-analysis](https://github.com/msam13/wyze-cam-firmware-analysis): 6 stars · last push 2022-05 · The firmware for the Wyze Cam V3 is hosted on the website of its manufacturer for anyone to download. We plan to download the firmware and perform a variety of analysis techniques on it until we have a solid understanding of the device and/or have identified potentially exploitable vulnerabilitie
- [nmatt0/homebrew-tap](https://github.com/nmatt0/homebrew-tap): 6 stars · last push 2026-10 · Homebrew tap for moria (firmware identification/extraction) and mithril (firmware content analysis)
- [OlegBezverhii/SchEl-firmware](https://github.com/OlegBezverhii/SchEl-firmware): 6 stars · last push 2024-01 · Schneider Electric firmware
- [PNWcoastie/REA-Argonaut](https://github.com/PNWcoastie/REA-Argonaut): 6 stars · MIT · last push 2026-10 · Zero-G Reverse Engineering Anything & Verified Safe Rust Reconstruction for Gemini 4 Argon + Google Antigravity 2.0 (4-Mount Recon Kits, Whole-Subgraph Extraction, 10,000-Vector Differential Parity Referee)
- [renaudallard/hikvision_R2_firmware](https://github.com/renaudallard/hikvision_R2_firmware): 6 stars · last push 2026-04 · unpack and repack hikvision R2 firmware files
- [rotenkatz/ecos_romfs_unpacker](https://github.com/rotenkatz/ecos_romfs_unpacker): 6 stars · last push 2016-08 · It is a simple ecos ROMFS unpacker for forensics and firmware analysis needs
- [deviousprophet/vscode-hex-scope](https://github.com/deviousprophet/vscode-hex-scope): 5 stars · MIT · last push 2026-09 · VS Code extension for Intel HEX & Motorola SREC memory exploration and editing
- [harman-f/MHI2-MHI2Q-MH2P-Firmware-Toolkit](https://github.com/harman-f/MHI2-MHI2Q-MH2P-Firmware-Toolkit): 5 stars · GPL-3.0 · last push 2026-10 · Host-side extraction and analysis toolkit for MHI2/MHI2Q/MH2P firmware packages
- [jakino0/mvave-blackbox-reverse-engineering](https://github.com/jakino0/mvave-blackbox-reverse-engineering): 5 stars · MIT · last push 2026-09 · Reverse engineering and read-only tools for the M-VAVE ANN BlackBox: firmware, USB Audio, BLE/M-EFCS, OTA, DSP routing, and runtime internals.
- [mtlabs-dev/fw_region_diff](https://github.com/mtlabs-dev/fw_region_diff): 5 stars · MIT · last push 2026-05 · Firmware Region Diff
- [Bender1011001/quadzilla-adrenaline-reversed](https://github.com/Bender1011001/quadzilla-adrenaline-reversed): 4 stars · last push 2026-09 · Complete reverse engineering of the Quadzilla Adrenaline diesel tuner — firmware decryption, BLE protocol, 117 parameters, decompiled code. Done entirely by AI.
- [JM00NJ/HPE-Aruba-AOS8-Vulnerabilities](https://github.com/JM00NJ/HPE-Aruba-AOS8-Vulnerabilities): 4 stars · last push 2026-06 · ArubaOS 8.13.2.0 pre-auth attack surface research. XXE+SSRF, ICMP reflection, buffer over-read, hardcoded credentials — all submitted to HPE Bugcrowd, marked N/A. No fixes issued.
- [bongijo/InformationSecurityProject](https://github.com/bongijo/InformationSecurityProject): 3 stars · last push 2021-10 · Extraction and static analysis of IoT devices firmware as project for the "Information Security M" course at the University of Bologna (UNIBO)
- [Hitheshkaranth/noyce-ide-dist](https://github.com/Hitheshkaranth/noyce-ide-dist): 3 stars · last push 2026-10 · AI-native Code-OSS workbench for safety-critical firmware. DO-178C evidence, MISRA, CBMC, CodeQL, measured MC/DC and hardware tooling in one window — with compliance runs that record what was actually measured, and claim nothing else.
- [Jarrettgohxz/iotsec.tools](https://github.com/Jarrettgohxz/iotsec.tools): 3 stars · last push 2026-10 · Potential Swiss Army Knife Framework for IoT/Hardware Hacking/Vulnerability Research
- [khushalmistry/IoTwizz](https://github.com/khushalmistry/IoTwizz): 3 stars · last push 2026-03 · IoTwizz - A modular IoT security testing framework for hardware hackers, firmware analysts, and IoT security researchers. Features AI-powered assistant, UART debugging, firmware analysis, JTAG/SWD scanning, SPI flashing, and protocol fuzzing.
- [LFE89/FirmwareSplitter](https://github.com/LFE89/FirmwareSplitter): 3 stars · last push 2022-04 · Fast and reliable software to extract different sections / partitions from firmware images.
- [minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak](https://github.com/minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak): 3 stars · last push 2026-05 · Zyxel super-admin credential exposure write-up across CPE/ONT/LTE/5G firmware, with an adapted VMG8825-B50B genpass lab.
- [abdul4rehman215/Product-Security-Supply-Chain-Assurance](https://github.com/abdul4rehman215/Product-Security-Supply-Chain-Assurance): 2 stars · last push 2026-06 · 20 hands-on security engineering labs covering attack surface discovery, reverse engineering, protocol analysis, fuzzing, CVSS scoring, and responsible disclosure.
- [andrew867/CoinLine-emu](https://github.com/andrew867/CoinLine-emu): 2 stars · last push 2026-05 · Hardware-faithful MAME-based emulator for Millennium-compatible Z180 payphone terminals. Boots real firmware on a cycle-accurate Z180 with a full device tree and a byte-transparent host bridge. Companion to the CoinLine Payphone Management Platform.
- [atellaluca/humax-mstar-guardian](https://github.com/atellaluca/humax-mstar-guardian): 2 stars · MIT · last push 2026-09 · ESP32-based UART guardian and Python tooling for safe, controlled reverse engineering of MStar MBoot embedded systems.
- [djnnvx/balrog](https://github.com/djnnvx/balrog): 2 stars · last push 2026-09 · post-extraction firmware triage for ELF files
- [dsirov/docker-binwalk-cpurec](https://github.com/dsirov/docker-binwalk-cpurec): 2 stars · last push 2021-10 · Binwalk docker image with the cpu_rec plugin for CPU instruction set identification.
- [EngineerMazeed/Vendor](https://github.com/EngineerMazeed/Vendor): 2 stars · MIT · last push 2026-08 · Firmware dumps for specialized OEM and carrier hardware. Research, analysis, and legacy device preservation.
- [HexLasso/FF-16](https://github.com/HexLasso/FF-16): 2 stars · MIT · last push 2026-09 · Static pattern discovery tool to locate structures from frequent patterns and understand file layout
- [Hosbulduk/Hosbulduk-Profil-Analiz](https://github.com/Hosbulduk/Hosbulduk-Profil-Analiz): 2 stars · last push 2026-09 · Tool to unlock PVR, Netflix and hidden features on Smart TVs. Includes firmware editor and UART parser ,reapply HW/SW profiles via USB. Supports Vestel-based mainboards.
- [lsroe/IPC-Firmware](https://github.com/lsroe/IPC-Firmware): 2 stars · last push 2020-06 · Interprocess communication analysis tools for firmware
- [MangoKiwiPlumGrape/intelmetool_thinkpad](https://github.com/MangoKiwiPlumGrape/intelmetool_thinkpad): 2 stars · GPL-2.0 · last push 2026-03 · intelmetool fork adds missing PCI IDs from 8th gen through Pnthr Lake. Upstream has incomplete platform coverage from CNL onwards — ICL completely absent, CML/TGL/ADL/RPL/MTL/ARL/PTL all missing. Adds entries to both platform scan and MEI interface tables. Corrects wrong ADL-S and RPL-S device IDs.
- [Meth-Raily/p11idu-openwrt-repeater](https://github.com/Meth-Raily/p11idu-openwrt-repeater): 2 stars · MIT · last push 2026-10 · Tozed P11IDU (MT7628AN): stock firmware dump, an authenticated RCE in the vendor web UI, official OpenWrt flash, and a verified single-radio NAT Wi-Fi repeater. Full write-up and configs by Nipun Methmal.
- [minanagehsalalma/zte-router-tools](https://github.com/minanagehsalalma/zte-router-tools): 2 stars · MIT · last push 2026-05 · Reverse-engineering tools for ZTE H188A/H288A firmware, raw NAND, JFFS2 webfs, HTTPD Lua bytecode, and hardcode analysis
- [multi-zhangyang/pi-recon-agent](https://github.com/multi-zhangyang/pi-recon-agent): 2 stars · MIT · last push 2026-07 · REPI: a local agent platform for reverse engineering, penetration testing, and digital forensics
- [Niix-Dan/ZTE-F670L-Firmware-Audit](https://github.com/Niix-Dan/ZTE-F670L-Firmware-Audit): 2 stars · last push 2026-03 · A technical security analysis and forensic audit of the ZTE ZXHN F670L ONT firmware, focused on attack vectors, data extraction, and embedded-device hardening.
- [renaudallard/reolink_firmwares](https://github.com/renaudallard/reolink_firmwares): 2 stars · last push 2026-03 · analysis of reolink firmwares
- [tony102741/CVE-2026-15469](https://github.com/tony102741/CVE-2026-15469): 2 stars · last push 2026-08 · CVE-2026-15469 — Hard-coded RSA-512 mesh group private key in TP-Link Deco XE75/XE5300/WE10800 (CWE-321). Advisory, analysis & PoC methodology (EN/KO).
- [varungor365/firmwareforge](https://github.com/varungor365/firmwareforge): 2 stars · last push 2026-08 · Firmware analysis and IoT security research toolkit for authorized extraction, UART/JTAG workflows, and vulnerability triage.
- [akkauppi/mr60bha2-internals](https://github.com/akkauppi/mr60bha2-internals): 1 stars · MIT · last push 2026-08 · Reverse engineering and experimental tooling for the Seeed Studio MR60BHA2 / ADT6101P 60 GHz FMCW radar: coherent range-Doppler streams, guarded firmware patching, and ESP32-C6 web visualization.
- [AlBrmagawi/FirmLens](https://github.com/AlBrmagawi/FirmLens): 1 stars · Apache-2.0 · last push 2026-09 · Local firmware security research workbench: isolated analysis, evidence-backed findings, SBOMs, release comparison and optional AI assistance.
- [anaselfaijah/Firmware_Diffing](https://github.com/anaselfaijah/Firmware_Diffing): 1 stars · last push 2026-08 · Python tool for firmware diffing using SHA256 and ssdeep fuzzy hashing to detect modified, added, and deleted files between firmware versions
- [carbon-evolution/ics-yara-scanner](https://github.com/carbon-evolution/ics-yara-scanner): 1 stars · AGPL-3.0 · last push 2026-07 · Go + YARA-X aggregator and scan engine: collects 18k+ public YARA rules and scans engineering workstations (EWS) and firmware dumps for ICS/OT and commodity malware
- [cas1m1r/Certshaker](https://github.com/cas1m1r/Certshaker): 1 stars · last push 2025-10 · shake out hardcoded keys, certificates and other artifacts from firmware
- [Chaz-Ortiz/EMBA-CS-4613-901](https://github.com/Chaz-Ortiz/EMBA-CS-4613-901): 1 stars · last push 2025-06 · EMBA is a firmware security analysis tool. I created a module for EMBA (p51 mustang binwalk extractor) that checks if the firmware file system being analyzed has a deep max depth that can benefit from an optimized extractor (>50 levels deep), leverages GPUs for processing speed and uses parallelization for file operations.
- [daedalus/mcp_reverse_engineering](https://github.com/daedalus/mcp_reverse_engineering): 1 stars · MIT · last push 2026-05 · MCP reverse engineering tools
- [DroidKali/iot-firmware-vuln-hunting](https://github.com/DroidKali/iot-firmware-vuln-hunting): 1 stars · Apache-2.0 · last push 2026-10 · IoT Firmware Vulnerability Hunting Skill
- [ericyoc/cyber-domain-tools-ref-poc](https://github.com/ericyoc/cyber-domain-tools-ref-poc): 1 stars · last push 2024-09 · Cyber analysis tools used in different domains of cybersecurity.
- [eth-man/ps3-cell-re-tools](https://github.com/eth-man/ps3-cell-re-tools): 1 stars · GPL-2.0 · last push 2026-09 · The Cell/SPU RE tooling behind 'Execution Is Not Extraction' — SPU emulator, sound SLEIGH decompiler, offline lv1 executor, isolation harness. Tooling only.
- [hideouts-io/StarSecurity-SURamDisk](https://github.com/hideouts-io/StarSecurity-SURamDisk): 1 stars · MIT · last push 2026-08 · Forensic & architectural research into Apple's Software Update RAMDisk (macOS Monterey 21G115 x86_64), ramrod restore pipeline, APFS SSV sealing, and firmware Option ROMs.
- [kacper-serewis/smartbox-re](https://github.com/kacper-serewis/smartbox-re): 1 stars · last push 2026-09 · Reverse engineering, firmware analysis, and experimental mods for SmartBox HW501 USB CarPlay dongles sold on AliExpress.
- [kevinmuoz/pybinwalk](https://github.com/kevinmuoz/pybinwalk): 1 stars · MIT · last push 2026-02 · Python bindings for Binwalk v3, built with PyO3 and maturin.
- [kittennbfive/fsfuzz](https://github.com/kittennbfive/fsfuzz): 1 stars · AGPL-3.0 · last push 2023-07 · a tool to find individually obfuscated or encrypted filesystems in firmware dumps
- [MikeeI/tp-link-pg2400p-reverse-engineering](https://github.com/MikeeI/tp-link-pg2400p-reverse-engineering): 1 stars · last push 2026-08 · TP-Link PG2400P reverse engineering
- [njones920/parrot-drone-tools](https://github.com/njones920/parrot-drone-tools): 1 stars · GPL-3.0 · last push 2026-09 · UAS security toolkit for Parrot OS covering SDR/RF analysis, Remote ID and DJI DroneID, MAVLink/DroneCAN, GNSS, counter-UAS awareness, firmware analysis, and flight-controller hardware workflows.
- [NurMohammadDuari/mw325r-hack-lab](https://github.com/NurMohammadDuari/mw325r-hack-lab): 1 stars · MIT · last push 2026-09 · Full security case file: Mercusys MW325R v2 recon, UPnP demo, modern panel, firmware forensics (own device)
- [sebastianspicker/tiz0wn](https://github.com/sebastianspicker/tiz0wn): 1 stars · MIT · last push 2026-10 · Evidence-first Samsung Tizen TV security research: reversible debloating, firmware analysis, validated Remote PC/CIFS UID-0 injection, and hardening.
- [sezgynus/g11-battery-protocol-emulation](https://github.com/sezgynus/g11-battery-protocol-emulation): 1 stars · MIT · last push 2026-09 · Reverse engineering and protocol emulation of a closed smart battery system. Hardware and firmware implementation replicating original authentication behavior at embedded level.
- [smruthinayak2006/Firmware_Security_Assessment](https://github.com/smruthinayak2006/Firmware_Security_Assessment): 1 stars · last push 2026-06 · Automated IoT Firmware Security Assessment Platform with vulnerability detection, risk scoring, remediation guidance and security reporting.
- [TangerineSec/FirmwareHTMLReportWithEmux](https://github.com/TangerineSec/FirmwareHTMLReportWithEmux): 1 stars · last push 2024-01 · Live reports produced with the emua firmware analysis software. Each report takes over 3 hours of machine analysis and shows the locations of risky functions such as system and strcat in binaries, helping select binaries and function-tracing paths for further analysis.
- [tony102741/firmware_project](https://github.com/tony102741/firmware_project): 1 stars · last push 2026-06 · Analyst-assisted tooling for reverse engineering orchestration-heavy embedded firmware.
- [Tureto/sasquatch-deb](https://github.com/Tureto/sasquatch-deb): 1 stars · GPL-2.0 · last push 2026-07 · Unofficial Ubuntu/Debian .deb package for sasquatch, a SquashFS firmware extraction tool
- [xusheng6/tv-acr-research](https://github.com/xusheng6/tv-acr-research): 1 stars · MIT · last push 2026-09 · Firmware-grounded research into automatic content recognition in smart TVs and streaming devices
- [aayes89/jBinWalk](https://github.com/aayes89/jBinWalk): 0 stars · MIT · last push 2026-05 · Binwalk-style implementation in pure Java
- [arunsigood/nforceit_IoT](https://github.com/arunsigood/nforceit_IoT): 0 stars · last push 2018-07 · This programm is used to auto discover vulnerabilities from extracted IoT device firmware
- [boyatoid/tp-link-lua-decompile](https://github.com/boyatoid/tp-link-lua-decompile): 0 stars · GPL-3.0 · last push 2026-10 · Recover TP-Link's renumbered Lua 5.1 opcode table, then convert and decompile the LuCI Lua bytecode inside their router firmware. Derived and verified on an Archer AX21 (US) V5.46, firmware 1.1.2.
- [catiomic/forewalk](https://github.com/catiomic/forewalk): 0 stars · last push 2026-08 · A lightweight, custom Python GUI forensic utility featuring signature scanning, entropy randomness analysis, and file carving capabilities.
- [clinton-oppong/mcp-servers](https://github.com/clinton-oppong/mcp-servers): 0 stars · last push 2026-06 · Production-minded MCP servers for AI agents — passive website security audit, RSS digest, and firmware recon. Pure-stdlib cores, an SSRF guard red-teamed against the full public bypass corpus, 42 offline tests.
- [Dellon-Technology-Pvt-Ltd/Trilokya](https://github.com/Dellon-Technology-Pvt-Ltd/Trilokya): 0 stars · AGPL-3.0 · last push 2026-10 · Powering Hardware, Radio, Web, and IoT Security Assessments Trilokya OS is a powerful, security-focused operating system designed for penetration testers, security researchers, and ethical hackers specializing in hardware security, radio frequency (RF) analysis, web application security, and IoT penetration testing.
- [DerrickDW/car710w-research](https://github.com/DerrickDW/car710w-research): 0 stars · last push 2026-03 · Reverse engineering the firmware of my Jensen CAR710W head unit to locate and modifiy UI assets such as boot animations and backgrounds.
- [dvdarkin/gamekb-k17](https://github.com/dvdarkin/gamekb-k17): 0 stars · MIT · last push 2026-10 · Offline config tool + protocol spec for the GAMEKB-K17 / HCY-K017 macropad (USB 0816:0220): remaps, firmware macros, per-key RGB
- [essquireo0o/rom-bios-public](https://github.com/essquireo0o/rom-bios-public): 0 stars · last push 2026-10 · Windows BIOS/UEFI backup tool and Nick Squires BIOS ROM recovery service. All Toughbook models welcome; other brands assessed. Public build has no password-hash extractor.
- [gblongiu/nw-a306-open](https://github.com/gblongiu/nw-a306-open): 0 stars · GPL-2.0 · last push 2026-10 · Independent research and Linux/Rockbox tooling for the Sony NW-A306.
- [GHSFS/firm-carver](https://github.com/GHSFS/firm-carver): 0 stars · Apache-2.0 · last push 2026-10 · Zero-dependency IoT and embedded firmware unpacker, multi-format magic carver, and static vulnerability auditing engine in pure Rust.
- [goblinsoftwarelab/goblinflash-showcase](https://github.com/goblinsoftwarelab/goblinflash-showcase): 0 stars · last push 2026-09 · Docs-only public-safety showcase for the GoblinFlash firmware evidence workflow.
- [haxorthematrix/tpbreak-cli](https://github.com/haxorthematrix/tpbreak-cli): 0 stars · GPL-3.0 · last push 2026-08 · Recover unencrypted TP-Link firmware for analysis — an independent Python reproduction of the tpbreak / WatchfulIP RSA-PSS-salt decryption technique.
- [HexLasso/FF-16-Web](https://github.com/HexLasso/FF-16-Web): 0 stars · MIT · last push 2026-09 · Web-based interactive static pattern discovery tool to locate structures from frequent patterns
- [heyPython2026/FirmwareQuickEdit](https://github.com/heyPython2026/FirmwareQuickEdit): 0 stars · last push 2026-10 · A Windows tool for viewing and editing Mitsubishi elevator HEX firmware, with address navigation, byte editing, file comparison, and validation.
- [JackieZ123430/psdzdata-swfl-inspector](https://github.com/JackieZ123430/psdzdata-swfl-inspector): 0 stars · MIT · last push 2026-09 · Read-only PSdZData XML segment extraction and KIS metadata inspection tools
- [Jiang-sustech/REA-ZWO](https://github.com/Jiang-sustech/REA-ZWO): 0 stars · last push 2026-10 · Reverse-engineering ZWO ASIAIR firmware with REA - findings, notes and tooling (no vendor firmware redistributed)
- [Jonaaaa/unshell](https://github.com/Jonaaaa/unshell): 0 stars · MIT · last push 2026-10 · A toolkit for extracting and documenting the data Nintendo Switch 2 accessories expose over USB, with a community accessory database.
- [Khedr0x00/Binwalk-Web-GUI](https://github.com/Khedr0x00/Binwalk-Web-GUI): 0 stars · last push 2025-07 · No description supplied by the upstream repository.
- [lachlanchen/FujitsuQuaderno](https://github.com/lachlanchen/FujitsuQuaderno): 0 stars · last push 2026-10 · Fujitsu Quaderno research, firmware notes, and mount tooling
- [Lenny-AGI/firmware-defect-prediction](https://github.com/Lenny-AGI/firmware-defect-prediction): 0 stars · last push 2026-05 · Multi-Agent Collaborative Embedded Firmware Defect Prediction and Automated Repair System
- [likzq30-ship-it/youdao-dictpen-s6-notes](https://github.com/likzq30-ship-it/youdao-dictpen-s6-notes): 0 stars · CC-BY-4.0 · last push 2026-09 · Youdao Dictionary Pen S6 (YDPS6-1) firmware analysis notes — ADB auth, OTA security, WebSocket 9307, setAdbEnable call chain. Read-only research archive, no exploits.
- [M-Tarantino/PFAT-Firmware-Audit-Tool](https://github.com/M-Tarantino/PFAT-Firmware-Audit-Tool): 0 stars · MIT · last push 2026-01 · Professional interactive Firmware Audit Tool for static security analysis. Detects hardcoded credentials, private keys, and shell backdoors in firmware filesystems.
- [Matin22/tenda-cp3-security-research](https://github.com/Matin22/tenda-cp3-security-research): 0 stars · MIT · last push 2026-09 · rooting a $30 camera.
- [mkrlabs-io/espfw](https://github.com/mkrlabs-io/espfw): 0 stars · Apache-2.0 · last push 2026-09 · ESP32 firmware inspector and Xtensa symbol matcher
- [nayanapriyaknaik-stack/Firmware-Crash-Dump-Analyzer](https://github.com/nayanapriyaknaik-stack/Firmware-Crash-Dump-Analyzer): 0 stars · MIT · last push 2026-07 · Professional Firmware Crash Dump Analyzer written in C and Python with CRC verification, stack tracing, symbol resolution, crash signature generation, and crash statistics dashboard.
- [OpenWebNet-HA/own-firmware-oracle](https://github.com/OpenWebNet-HA/own-firmware-oracle): 0 stars · Apache-2.0 · last push 2026-10 · Reproducible pipeline that turns gateway firmware images into facts about the OpenWebNet protocol — frame formats, code tables, and gateway behaviour.
- [RayWilliamsII/k2plus-maintenance](https://github.com/RayWilliamsII/k2plus-maintenance): 0 stars · last push 2026-05 · Scripts to probe a K2Plus for analysis and to generate filesystem snapshots for review.
- [rudra-patell/tp-link_UART-root-shell](https://github.com/rudra-patell/tp-link_UART-root-shell): 0 stars · MIT · last push 2026-06 · acccessing the root shell of tp-link router (TL-WR850n) via UART and a bit of reverse engineering
- [samyoon727ca/firmware-security-research](https://github.com/samyoon727ca/firmware-security-research): 0 stars · MIT · last push 2026-10 · Firmware security research on public targets: patch-diff case studies of router command injection (DrayTek and D-Link n-days), a reusable triage, diff and report toolchain, and a MAVLink security test harness for PX4/ArduPilot SITL.
- [sanisapatrikar/SWD-Recon](https://github.com/sanisapatrikar/SWD-Recon): 0 stars · last push 2026-08 · A practical walk through SWD (Serial Wire Debug) reconnaissance, memory mapping, and firmware acquisition; because debug interfaces rarely keep secrets for long :)
- [sanisapatrikar/UART-Recon](https://github.com/sanisapatrikar/UART-Recon): 0 stars · last push 2026-08 · A practical walk from the PCB to Root Shell, because turns out 4 copper pads had a lot to say :)
- [santhoshgandham/FirmEx](https://github.com/santhoshgandham/FirmEx): 0 stars · last push 2025-11 · .FirmEx is a unified framework for embedded device security that combines automated firmware extraction with real-time sensor anomaly detection. This work was accepted at IEEE Intelligent Computing and Systems at the Edge (ICEEdge) Student Forum 2025
- [shadow-ciper/iot-firmware-auditor](https://github.com/shadow-ciper/iot-firmware-auditor): 0 stars · last push 2026-10 · Audit extracted IoT firmware for hardcoded credentials, default accounts, and outdated components
- [superswan/rss-webs-vuln](https://github.com/superswan/rss-webs-vuln): 0 stars · last push 2026-07 · RSS-Webs / GoAhead auth bypass and configuration leak. Vulnerability research affecting Ralink/MediaTek SDK router firmware across multiple vendors
- [teriyakki-jin/firm-sentry](https://github.com/teriyakki-jin/firm-sentry): 0 stars · MIT · last push 2026-08 · Defensive IoT firmware static analysis and AFL++ fuzzing lab
- [tpt-solutions/tpt-res](https://github.com/tpt-solutions/tpt-res): 0 stars · last push 2026-06 · Integrated suite for accelerating Linux hardware driver development through automated capture, ML-assisted firmware analysis, and community-driven knowledge sharing — making reverse engineering 10x faster and accessible beyond kernel specialists.
- [varyashine/honor-magicbook-nfc](https://github.com/varyashine/honor-magicbook-nfc): 0 stars · MIT · last push 2026-10 · Reverse engineering and Linux tools for the HONOR MagicBook built-in NFC tag (Fudan FM11NT082C / ACPI NTAG0001): variant detection (NTCI vs NTCZ), safe NDEF backup and write
- [xXHenneBXx/TFTTools_V2_Decompiler](https://github.com/xXHenneBXx/TFTTools_V2_Decompiler): 0 stars · last push 2026-08 · A package of tools for decrypting, signature switching, decompiling, and extraction of TJC and Nextion Firmware .tft files
- [youemeeare/IoT-Firmware-Security-Scanner](https://github.com/youemeeare/IoT-Firmware-Security-Scanner): 0 stars · last push 2026-01 · Modular IoT Firmware Security Scanner with CVE and Compliance Analysis
- [YukiCodepth/firmware-security-workbench](https://github.com/YukiCodepth/firmware-security-workbench): 0 stars · MIT · last push 2026-04 · Next-gen firmware security analysis workbench for CLI, web, and desktop. Scan firmware, detect secrets, generate SBOM/CVE candidates, compare versions, and explain risk with Firmware Risk DNA.
- [Zimbo88/soundtouch-preservation-research](https://github.com/Zimbo88/soundtouch-preservation-research): 0 stars · last push 2026-09 · Open technical handbook and reproducible preservation research for Bose SoundTouch devices, firmware, local protocols, playback, multiroom and interoperability.
- [zuhtuEren/bcm96338-re](https://github.com/zuhtuEren/bcm96338-re): 0 stars · MIT · last push 2026-03 · Reverse engineering and full security audit of a legacy Broadcom BCM96338 router. Features firmware exfiltration, SquashFS analysis, and DES hash cracking.