awesome-embedded-security

Active learning module (PlutoSDR) used to explore software-defined radio, RF experimentation, and wireless communications.

Receive-only SDRs with high dynamic range and front-end filtering, covering HF through 1.8 GHz depending on model.

A collection of Awesome resources for the Flipper Zero device.

Full-duplex 2x2 MIMO SDR tuning 47 MHz to 6 GHz, with an on-board FPGA for signal processing at the edge.

Powerful open-source ESP32 firmware designed for offensive security and Red Team operations.

Open source hacker multi-tool that talks to electronic stuff. It's got a bunch of features an intrepid hacker might need to prototype their next project.

A coverage-guided fuzzer with enhanced mutations, QEMU and Unicorn emulation modes, and custom power schedules.

AMD guidance and security bulletin coverage related to firmware TPM behavior on supported platforms.

Secure Encrypted Virtualization for encrypting VM memory with AMD-V hardware assistance.

Platform-agnostic binary analysis framework. Brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot.

Multi-architecture binary analysis toolkit, with the capability to perform dynamic symbolic execution (like Mayhem, KLEE, etc.) and various static analyses on binaries. If you'd like to learn how to use it, you're in the right place!

Statically extracts arguments to SVC calls and HAL functions from stripped ARM Cortex-M BLE firmware without symbol tables, enabling security audits of Nordic and similar binaries. ACSAC 2021.

Android reverse engineering, exploitation, and mobile application security tooling.

Secure development practices, code analysis, and application security testing.

The root Awesome list, indexing curated lists across every topic.

Vehicle security research covering CAN, ECUs, telematics, and automotive standards.

CAN bus tooling, adapters, protocol documentation, and reverse engineering resources.

Catalogue of decoded CAN bus identifiers and message formats across vehicle makes and models.

ISO/IEC 15408 security evaluation framework, with the public database of certified products and the protection profiles they were evaluated against.

Damn Vulnerable IoT Device: open hardware ATmega328p board (Gerbers published) purpose-built for practicing UART extraction, firmware dumping, and Bluetooth sniffing attacks on physical hardware.

Damn Vulnerable Router Firmware: modified Linksys firmware containing intentional MIPS/ARM binary exploitation challenges (buffer overflows, format strings, heap bugs) runnable under QEMU without physical hardware.

Beginners resource on embedded systems security.

Consumer IoT security baseline of 33 provisions, used as the basis for national schemes in the UK, Singapore, Finland, and Australia.

Regulation 2024/2847, setting security requirements and vulnerability reporting obligations for products with digital elements sold in the EU.