pixma

What is this? Some little tools to unpack firmware of Canon PIXMA series for analysis. Motivation Some Pixma printer is unable to reset the Waste Ink counter and refuses to print now, even though waste ink container has been swapped out. So I was curious about the inner workings of the firmware t...

efiXplorer

efiXplorer - IDA plugin and loader for UEFI firmware analysis and reverse engineering automation Documentation Plugin wiki Loader wiki Build instructions and installation Publications efiXplorer: Hunting for UEFI Firmware Vulnerabilities at Scale with Automated Static Analysis Static...

Firmware_Slap

Firmware Slap Firmware slap combines concolic analysis with function clustering for vulnerability discovery and function similarity in firmware. Firmware slap is built as a series of libraries and exports most information as either pickles or JSON for integration with other tools. Slides from the...

FirmWire

-. .-. | |+ \ \ / /+ .-. .- \ / \ | | | | '| ' \ // / | | '/ - / \ / '-' '-|| | || |||// | || |-' '-' FirmWire FirmWire is a full-system baseband firmware analysis platform that supports Samsung and MediaTek. It enables fuzzing, root-cause analysis, and debugging of baseband firmware images...

FACT_core

The Firmware Analysis and Comparison Tool FACT Contents Why FACT? Setup Usage Documentation Contribute Additional plugins Analysis Import/Export Presentations Social Acknowledgments License Why FACT? Firmware analysis can be used to achieve several interesting goals. Chief among those are...

binwalk

Binwalk v3 This is an updated version of the Binwalk firmware analysis tool, re-written in Rust for speed and accuracy. What does it do? Binwalk can identify, and optionally extract, files and data that have been embedded inside of other files. While its primary focus is firmware analysis, it...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

emba

EMBA El analizador de seguridad para firmware de dispositivos embebidos EMBA está diseñado como la herramienta central de análisis de firmware y SBOM para pentesters, equipos de seguridad de producto, desarrolladores y responsables de producto. Soporta el proceso completo de análisis de seguridad...

awesome-connected-things-sec

🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS...

firmware-analysis-toolkit

FAT — Firmware Analysis Toolkit Descargar la última versión · Registro de cambios · Instalación Firmware Analysis Toolkit es un conjunto de herramientas de investigación de seguridad para investigar la seguridad del firmware de IoT, IA física, dispositivos móviles y robótica. Está diseñado...

unblob

unblob Suite de extracción precisa, rápida y fácil de usar para blobs binarios. unblob analiza blobs binarios desconocidos para más de 78 formatos de archivo, compresión y sistema de archivos , extrae su contenido de forma recursiva y extrae fragmentos desconocidos. Es el compañero perfecto para...

chipsec

CHIPSEC: Marco de Evaluación de Seguridad de la Plataforma CHIPSEC es un marco de trabajo para analizar la seguridad de plataformas de PC, incluyendo hardware, firmware del sistema BIOS/UEFI y componentes de la plataforma. Incluye un conjunto de pruebas de seguridad, herramientas para acceder a...

Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

IoT-Vulnerability-Research-Public

Hardware Security & Vulnerability Research This repository serves as a centralized public archive for my independent vulnerability research, hardware audits, and Coordinated Vulnerability Disclosures CVD. All proof-of-concept scripts, firmware extractions, and hardware teardowns are published her...

attifyos

AttifyOS v3.0 AttifyOS es una distribución diseñada para ayudarte a realizar evaluaciones de seguridad y pruebas de penetración en dispositivos de Internet de las Cosas IoT. Te ahorra mucho tiempo al proporcionar un entorno preconfigurado con todas las herramientas necesarias cargadas. La nueva...

attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

binbloom

Acerca de El propósito de este proyecto es analizar un firmware binario crudo y determinar automáticamente algunas de sus características. Esta herramienta es compatible con todas las arquitecturas, ya que básicamente, solo realiza estadísticas simples sobre él. Características principales:...

polypyus

Polypyus Historiador de Firmware Polypyus aprende a localizar funciones en binarios sin procesar extrayendo funciones conocidas de binarios similares. Por lo tanto, es un historiador de firmware. Polypyus trabaja sin desensamblar estos binarios, lo cual es una ventaja para binarios complejos de...

ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole è una piattaforma di analisi e modifica binaria. OFRAK combina la capacità di: Identificare e Decomprimere molti formati binari Analizzare binari decompressi con strumenti di reverse engineering collaudati Modificare e Ricompattare binari con...