Embedded and IoT Security

Analyze security of firmware based on customized rules. Intended as additional step in DevSecOps, similar to CI.

A comprehensive reverse engineering and manipulation framework for gate-level netlists.

Swiss Army Knife for Pentesting of IoT Devices.

Framework for Testing & Auditing ZigBee and IEEE 802.15.4 Networks.

Printer Exploitation Toolkit.

Framework dedicated to exploit embedded devices.

Searches a binary for "interesting" stuff, as well as extracts arbitrary files.

Finds vulnerable patterns in binary executables - ELF support for x86, ARM, and MIPS, experimental bare-metal support.

Analyze Linux-based firmware of embedded devices.

Tries to emulate and pentest a firmware.

Searches extracted firmware images for interesting files and information.

Discovering vulnerabilities in firmware through concolic analysis and function clustering.

Software Reverse Engineering framework, also handles popular formats and arbitrary binaries, has an extensive command line toolset.

Searches extracted firmware images for interesting files and information.

Finds vulnerable patterns in binary executables - ELF support for x86, ARM, and MIPS, experimental bare-metal support.

Detects container format automatically and executes the corresponding extraction tool.

Extraction tools for several container formats.

Add JTAG capabilities to an Arduino.

Set of tools for security testing of Internet of Things devices using specific network IoT protocols.

Low-level NAND Flash dump and parsing utility.

Tool for detecting, reading, writing, verifying and erasing flash chips.

Decrypt Samsung SSD firmware updates.

Workshop @ BSides Munich 2019.