Platform Security Assessment Framework
-
Updated
Aug 7, 2026 - Python
#
firmware-security
Here are 50 public repositories matching this topic...
Toolkit to emulate firmware and analyse it for security vulnerabilities
iot security firmware reverse-engineering binary-analysis iot-security firmware-tools vulnerability-scanner firmware-analysis firmware-security iot-security-tools
-
Updated
Sep 16, 2024 - Python
IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.
firmware openwrt owasp iot-security embedded-linux iot-security-testing firmware-security vulnerability-challenges
-
Updated
Oct 5, 2025 - C
Autonomous AI pentesting engine, continuous offensive security across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes and IoT firmware. Agentic reasoning plus real exploit execution deliver proof-based vulnerabilities. Privacy gateway: the LLM never sees your real IPs, hosts or creds, nothing leaves your perimeter.
kubernetes mcp active-directory self-hosted penetration-testing pentesting offensive-security iot-security red-team multi-agent-systems autonomous-agents security-automation security-tools ai-agents cloud-security firmware-security llm ai-red-team local-llm ai-security-tool
-
Updated
Aug 6, 2026 - Python
D-Link firmware decryption PoC
-
Updated
Dec 21, 2023 - C
Firmware Guide
awesome hardware firmware software uefi awesome-list firmware-updater firmware-updates firmware-library firmware-tools firmware-image firmware-analysis firmware-development firmware-update firmware-security
-
Updated
Jan 23, 2022 - C
Openwrt 18.06.5 featured with the Exein's security framework
linux machine-learning embedded firmware openwrt linux-kernel linux-kernel-module linux-security-module security-tools lsm machine-learning-algorithm embedded-security netlink-protocol exein firmware-security exein-framework exein-interface firmwaresec
-
Updated
Jan 18, 2020 - C
Self-hosted, agentic vulnerability research for binaries & firmware: an AI agent decompiles, fuzzes, and verifies exploits inside a sandbox, recording every finding to a typed graph. BYOK, fully local.
security mcp reverse-engineering cybersecurity fuzzing pentesting binary-analysis iot-security security-tools ai-agents claude exploit-development vulnerability-research ghidra firmware-security llm agentic-ai claude-code
-
Updated
Jul 31, 2026 - Python
Offline security checklist & report generator
python automation cybersecurity testcase pentesting security-tools github-actions firmware-security cybersecurity-tools llm-security cloud-secu checkli security-asse
-
Updated
Jan 19, 2026 - Python
Deterministic firmware-to-exploit evidence engine. Drop a firmware blob, get hash-anchored findings with SARIF + CycloneDX SBOM + verified exploit chains.
mcp static-analysis reverse-engineering vex binary-analysis iot-security security-automation sarif vulnerability-scanner pcode firmware-analysis embedded-security sbom ghidra cyclonedx slsa firmware-security exploit-chain evidence-chain
-
Updated
Jun 8, 2026 - Python
Open-source NVMe sanitization framework with 50 cycles and per-cycle Log Page 0x81 hardware confirmation. PDF Certificate of Destruction. Aligns with NIST SP 800-88 Rev.2 & IEEE 2883.1-2025. Source code: GPL v3. Specification: CC BY 4.0.
python windows linux open-source sanitization privacy cybersecurity gpl nvme windows-gui secure-erase anti-forensic data-erasure firmware-security data-destruction storage-security nand-flash nist-800-88 nvme-sanitize ieee-2883
-
Updated
Aug 9, 2026 - Python
A simple 16-bit RISC CPU written from scratch in C. topics: cpu risc virtual-machine c computer-architecture systems-programming emulator
c cpu virtual-machine bootloader system-programming computer-architecture risc firmware-security memory-protection
-
Updated
Dec 11, 2025 - C
Bootloader for tinyAVR 0-, 1- and 2-series, and megaAVR 0-series, supporting signed and encrypted firmware loaded from external I2C memory.
mac iot avr cryptography encryption cipher firmware i2c bootloader decryption avr-microcontroller message-authentication-code firmware-tools cipher-algorithms xtea-cipher firmware-security
-
Updated
Feb 22, 2022 - C
Lab about hacking, vulnerabilities exploitation, ...
reverse-engineering binary-exploitation web-exploitation exploit-development vulnerability-research firmware-emulation firmware-security
-
Updated
Apr 6, 2025
Bare-metal secure bootloader for STM32F407 with AES-GCM encrypted transfer, ECDSA signature verification and anti-rollback protection
firmware stm32 embedded-systems ecdsa aes-gcm bootloader cortex-m4 stm32f4 bare-metal firmware-security
-
Updated
Jun 29, 2026 - C
CVE-2021-21735 write-up: ZTE ZXHN H168N V3.5 wizard-page information leak, firmware routing flaw, and the path from exposed PPPoE/WLAN data to full admin compromise.
bug-bounty cve zte vulnerability-research embedded-security firmware-security router-security cve-2021-21735 zxhn-h168n
-
Updated
May 25, 2026 - HTML
Runs Exein Analyzer as a GitHub Action to scan firmware, container images, and SBOMs for vulnerabilities.
iot security embedded firmware ci-cd vulnerability cve scanning devsecops runtime-security sbom github-actions firmware-security preemptive-security
-
Updated
Aug 5, 2026 - TypeScript
Open-source Rust-based post-quantum secure embedded OS for critical edge infrastructure — ARM Cortex-M & RISC-V | Apache-2.0
rust open-source embedded-systems post-quantum-cryptography secure-boot no-std quantum-safe iot-security risc-v critical-infrastructure edge-computing apache-2 firmware-security arm-cortex-m embedded-os ml-kem ml-dsa
-
Updated
Feb 14, 2026 - Rust
20 hands-on security engineering labs covering attack surface discovery, reverse engineering, protocol analysis, fuzzing, CVSS scoring, and responsible disclosure.
reverse-engineering fuzzing threat-modeling offensive-security vulnerability-management cvss responsible-disclosure product-security protocol-analysis firmware-security attack-surface-management
-
Updated
Jun 13, 2026 - Python
Palimpsest is an LLM-assisted semantic code enhancement framework that bridges Ghidra decompilation and CodeQL database construction. It is optimized for IoT device firmware analysis and for generating CodeQL-buildable source code.
static-analysis decompiler reverse-engineering binary-analysis iot-security firmware-analysis ghidra codeql firmware-security llm llm-agent
-
Updated
Jul 9, 2026 - Python
Improve this page
Add a description, image, and links to the firmware-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the firmware-security topic, visit your repo's landing page and select "manage topics."