intel-me-research

Ingeniería inversa del firmware de Intel ME — Análisis en vivo de CSME 16.x "Tu ordenador tiene un segundo ordenador secreto en su interior. Lo encontramos, lo mapeamos y documentamos lo que se esconde ahí dentro." 🔥 PRUÉBALO TÚ MISMO — HECI SPY 🔥 Un script de Python. Cero dependencias. Habla...

workshop_firmware_reverse_engineering

Taller: Ingeniería inversa de firmware Este repositorio contiene las diapositivas y los materiales prácticos del taller de Emproof sobre ingeniería inversa de firmware, presentado en ScapyCon Automotive 2025. El taller está dirigido a un público técnico con experiencia mínima en seguridad y enseñ...

ida-efitools2

About It is an IDA plugin for extending UEFI reverse engineering capabilities. Based on ida-efitools with a bunch of fixes and new features. Works with both Python 2 and Python 3. Supports outdated versions of IDA Pro 7.x with no guarantees. Features GUIDs defining Structures propagating register...

Philips-PM-5139-5138A-5136-Firmware-Project

Philips PM5139 — Ingeniería inversa del firmware Un generador de funciones de 20 MHz de alrededor de 1994, desmontado en software: dos volcados de EPROM, un emulador de 8051 usado como instrumento de medición, y 35 secciones de documentación donde cada afirmación está respaldada por una dirección...

isa_recovery

Sistema de Recuperación ISA Un pipeline de ingeniería inversa que convierte un binario de firmware y su desensamblado posiblemente incorrecto en una especificación de procesador funcional para Ghidra. Cuando te encuentras con un procesador propietario sin documentación y sin soporte en Ghidra, es...

yealink_tools

Ingeniería inversa del firmware de Yealink Este repositorio contiene algunas utilidades de script utilizadas durante la ingeniería inversa del firmware de los teléfonos VoIP de Yealink. Para obtener más información sobre esta investigación, lea la entrada del blog...

firmware-reverse-engineering

Habilidades de Ingeniería Inversa de Firmware Cinco habilidades de agente de OrbitCurve para extracción de firmware, análisis estático, ingeniería inversa con Ghidra, emulación y reportes de seguridad, por Hussein Muhaisen. La colección empaqueta los flujos de trabajo existentes, referencias,...

IIITA-IoT-Security-Research

IIIT Allahabad – Prácticas de Investigación en Seguridad IoT Resumen Este repositorio muestra el trabajo realizado durante mis Prácticas de Investigación en el Indian Institute of Information Technology, Allahabad IIIT Allahabad en el Laboratorio de Criptografía y Seguridad de Redes CNS. Durante...

study_embedded_security

studyembeddedsecurity A hands-on study...

CVE-2025-1242

The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicio...

EUVD-2025-208113

The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicio...

CVE-2025-1242 Administrative Credentials Can Be Extracted Through Gardyn API Responses

The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicio...

CVE-2025-1242 Administrative Credentials Can Be Extracted Through Gardyn API Responses

The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicio...

CVE-2025-1242

CVE-2025-1242 affects Gardyn Home Kit via Gardyn IoT Hub. Root cause: hard-coded administrative credential iothubowner exposed across multiple vectors (API responses, mobile app, and device firmware), enabling unauthenticated full admin access to the hub and connected devices. Connected documents...

PT-2026-21920

Name of the Vulnerable Software and Affected Versions Gardyn IoT Hub affected versions not specified Description Administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. This exposure may allow ...

Gardyn 4 信任管理问题漏洞

Gardyn 4 is a home-use vertical hydroponic cultivation system developed by the American company Gardyn. Gardyn 4 has a vulnerability related to trust management. This vulnerability stems from the ability to extract management credentials through application API responses, mobile application rever...

Enterprise Security Incident Analysis and Countermeasures Based on the T-Mobile Data Breach

This paper presents a comprehensive analysis of T-Mobile's critical data breaches in 2021 and 2023, alongside a full-spectrum security audit targeting its systems, infrastructure, and publicly exposed endpoints. By combining case-based vulnerability assessments with active ethical hacking...

Fuzzy matching with Ghidra BSim, a guide

TL;DR BSim, Ghidra’s new built-in plugin is a game-changer for reversing firmware and other stripped binaries. Rapidly identify and annotate functions from known libraries. Fuzzy matching works with unknowns, like exact library versions and compiler options. Automatically define custom variable...

Reverse Engineering Keys from Firmware. A how-to

TL;DR It is possible to reverse engineer keys from firmware with some tips: 1. Always looks for strings/constants. 2. Make guesses about the original source. 3. Find a function you can recognise and work backwards to identify other functions. 4. It helps if they use open-source code so you can cr...

Turning an OBD-II reader into a USB / NFC attack tool

One of my favourite sorts of hardware hacking is making a device do something it was never intended for. It's creative, disruptive, and fun. Everyone has their own way of going about things. Different methodologies, habits, and skill sets mean that approaches will be diverse. This is how I work...