nstarke

raspberrypi4-bootloader-analysis

My Analysis of the VC4 Assembly Code from the RPI4

bootfuzz

A MBR Fuzzer

nstarke.github.io

github pages repository

BaseAddressDiscoverererer

A python3 script for generating a list of possible base addresses given a raw binary program

instrfuzz

A CPU Instruction Fuzzer for QEMU x86

thecus-firmware-decrypt

A few scripts to decrypt Thecus NAS firmware images

linux-firmware-db

Linux Firmware DB

backdoored-grub2

Grub2 with backdoor modifications allowing the LUKS password to be sent over HTTP to a remote server when it is entered.

papers

Papers I have written

at51-libfind-linux-firmware-results

AT51 Libfind Results for Linux-firmware

cvely

utk-web

a visual toolkit for exploring and editing firmware images, running on web platforms

armsifter

efiSeek

Ghidra analyzer for UEFI firmware.

FACT_core

Firmware Analysis and Comparison Tool

ghidra-xtensa

Xtensa processor module for Ghidra - Big Endian

macos-arm64-emulation

A guide for emulating macOS arm64e on an x86-based host.

metasploit-framework

Metasploit Framework

brick

chipsec

Platform Security Assessment Framework

coreboot

efi_fuzz

FuzzNDIS

A Fuzzer for Windows NDIS Drivers OID Handlers

ghidra-firmware-utils

Ghidra utilities for analyzing PC firmware

iGoat-Swift

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

kaiju

CERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is the primary, canonical repository for this project -- file bug reports and wishes here!

sagemcom-fast-3890-exploit

scapy

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

scripts

Scripts for setup/install/firmware update for ChromeOS devices

secdsm.github.io

SecDSM Blog