Bjoern Kerler

mtkclient. MTK reverse engineering and flash tool

edl. Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)

exploit_me. Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 29 vulnerability techniques)

oppo_decrypt. Oppo .ofp Firmware decrypter and oneplus .ops de-/encrypter

Loaders. EDL Loaders

oppo_ozip_decrypt. Oppo Firmware .ozip decrypter

android_universal. Universal android boot to root

MR. Mobile Revelator

opencl_brute. MD5,SHA1,SHA256,SHA512,HMAC,PBKDF2,SCrypt Bruteforcing tools using OpenCL (GPU, yay!) and Python

netgear_telnet. Netgear Enable Telnet (New Crypto)

NANDReader_FTDI. 8Bit Nand universal reader for FTDI FT2323H Breakout Board, based on basic code from http://spritesmods.com/?art=ftdinand

ghidra_installer. Helper scripts to set up OpenJDK 11 and scale Ghidra for 4K on Ubuntu 18.04 / 18.10

Sniffle. A sniffer for Bluetooth 5 and 4.x LE

DroneID. OpenDrone ID sniffer/spoofer for Bluetooth + WIFI

gr-gsm. Gnuradio blocks and tools for receiving GSM transmissions

sboot_dump. SUC - A tool to dump RAM using Samsung S-Boot Upload Mode

SierraWirelessGen. Sierra Wireless OpenMEP Generator

dump_avb_signature. Dump Android Verified Boot Signature

tee_research. Some tee/trustzone helper stuff

LibreSDR_UHD_B220_Mini_FPGA. Updated FPGA source code and binaries for UHD B220 Clone with XC7A200T+AD9361

qcpatchtools. Some stuff for doing insane qc chipset pwning.

qc_modem_tools. Some tools for reversing QDSP hexagon

slides_and_papers. Here be dragons. Or Slides. Or Papers. Or Nothing :)

OregonDecoder. Oregon Scientific V1/V2 Gnuradio Decoder

edl_emulate. QC EDL Emulator based on Qiling

adb-cheatsheet. Your journey to master Android™ Shell begins here

gr-bluetooth. A Bluetooth receiver implementation for GNU Radio

annotate. Binary Ninja plugin for annotation of arguments for functions

JEB_Scripts. JEB Scripts

AutoSatTracker-ESP. Autonomous Satellite Tracker with ESP8266-Huzzah

idp_hexagon. Hexagon processor module for IDA Pro disassembler

mtk_bp. Mediatek BP firmware tools

gnuradio_install. Full build script for gnuradio including most oot modules (i386/i686/x86_64/arm) on linux

pwndbg. Exploit Development and Reverse Engineering with GDB Made Easy

bypass_payloads. Python

CVE-2016-5195. CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android

antsdr_new. Latest firmware for antsdr E310 based on PlutoSDR

firehorse. Research & Exploitation framework for Qualcomm EDL Firehorse programmers

bypass_utility. Python

sahara_emulator. QC Sahara emulator

qualcomm_baseband_scripts. Collection of scripts for reversing Qualcomm Hexagon baseband / modem firmware

routerstuff. Some collection of router firmware tools

sattracker. Standalone Satellite Tracker Project based on ESP32 and Micropython

GnuRadio-Wireshark-Example. Simple example to show how to capture ZigBee/IEEE 802.15.4 and send it to WIreShark wpan using RFtap under GnuRadio

exploits_collection.

QCSuper. QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

gr-ais. Automatic Information System decoder for shipborne position reporting for the Gnuradio project

gr-tempest. An implementation of TEMPEST en GNU Radio

exploit_mt6765. C

gr-lte. GNU Radio LTE receiver

exploit_common. C

nfc-laboratory. NFC signal and protocol analyzer using SDR receiver

AMIE. A Minimalist Instruction Extender for the ARM architecture and IDA Pro

buildroot. Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. Forked from https://git.busybox.net/buildroot/

hashcat. World's fastest and most advanced password recovery utility

adbi. Android Dynamic Binary Instrumentation Toolkit

firehorse_land. EDL exploit for Redmi 3S

vmlinux-to-elf. A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

UsbDk. Usb Drivers Development Kit for Windows