EMBA - The firmware security analyzer

A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

Toolkit to emulate firmware and analyse it for security vulnerabilities

Firmware Analysis and Comparison Tool

a tool to analyze filesystem images for security

The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, and Information Security professionals with conducting firmware security assessments.

EMBArk - The firmware security scanning environment

A firmware base address search tool.

Data Visualization Plugin for IDA Pro

D-Link firmware decryption PoC

A tool for firmware cartography

Firmware Guide

Recent security papers on firmware analysis

A distributed fuzzing management framework

Presented hardware reverse engineering workshops since 2019

A faster firmware base address scanner.

Finds the base address of a firmware by comparing string addresses with target pointer addresses

An old CLI tool to parse Intel/Motorola formatted HEX ASCII firmware files into binary blobs

Tool to trace ARM Cortex-M assembly instructions and extract arguments to configuration APIs (supervisor calls or function calls).

Extract information and files from Reolink firmwares.

Track and analyze binary size and memory footprint in embedded firmware

Astell&Kern iRiver LS150 SPI firmware dump + telnet access

Additional material for our paper "Breaking all the Things - A Systematic Survey of Firmware Extraction Techniques for IoT Devices" (CARDIS 2018)

Decrypt and extract voice guidance MP3 prompts from Sony WH-1000XM4 encrypted voice packs. AES key extracted via Bluetooth firmware dump of the Airoha MT2811 SoC.

Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.

Android OTA image analysis preprocessing automation tool.

Next-Generation Firmware Analysis Toolkit. A hybrid Rust/Python toolkit for deep firmware analysis, extraction, and vulnerability discovery.

Integrates Firmadyne into FACT

A Raspberry Pi Pico RP2040 debug template repo with step-by-step instructions on how to freeze your MicroPython files into C firmware and reverse engineer the binary with OpenOCD and GDB.

immune Guard agent application