This repository contains the tools we used in our research on the Google Titan M chip
☆206Aug 22, 2022Updated 3 years ago
Alternatives and similar repositories for titanm
Users that are interested in titanm are comparing it to the libraries listed below
Sorting:
- ☆189Mar 21, 2025Updated 11 months ago
- Reverse-engineering tools and exploits for Samsung's implementation of TrustZone☆158Dec 16, 2019Updated 6 years ago
- ☆51Mar 9, 2022Updated 3 years ago
- Debugger for the Shannon Baseband☆58Jun 15, 2020Updated 5 years ago
- A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices☆973Jan 7, 2026Updated last month
- ☆42Aug 5, 2021Updated 4 years ago
- A set of tools for fuzzing SecureROM. Managed to find and trigger checkm8.☆164Sep 18, 2021Updated 4 years ago
- Android user space components for the Trustonic Trusted Execution Environment☆39Sep 29, 2015Updated 10 years ago
- Lightweight toolkit to explore and modify address translation for ARM64.☆43Jul 25, 2021Updated 4 years ago
- FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband fir…☆844Jan 5, 2026Updated 2 months ago
- Fuzzing harness for testing proprietary image codecs supported by Skia on Android☆356Jan 10, 2021Updated 5 years ago
- Collection of scripts for reversing Qualcomm Hexagon baseband / modem firmware☆181Jul 13, 2023Updated 2 years ago
- CVE-2020-27950 exploit☆34Dec 1, 2020Updated 5 years ago
- PoC 2019-2215 exploit for S8/S8 active with DAC + SELinux + Knox/RKP bypass☆235Jun 19, 2020Updated 5 years ago
- Research tools developed for Intel Wi-Fi chips☆57Jun 14, 2025Updated 8 months ago
- ☆83Feb 21, 2022Updated 4 years ago
- slides for conference talks☆105Jul 27, 2025Updated 7 months ago
- trustonic tbase research☆32Jan 28, 2018Updated 8 years ago
- SEP firmware splitter, made in rust.☆45Oct 11, 2024Updated last year
- Android 14 kernel exploit for Pixel7/8 Pro☆543Apr 23, 2024Updated last year
- ☆95Jul 29, 2021Updated 4 years ago
- A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)☆1,692Updated this week
- Environment with vulnerable kernel for exploitation of the TEE driver (CVE-2021-44733)☆76Dec 28, 2021Updated 4 years ago
- A plugin for Binary Ninja to query the Symgrate2 database.☆14Sep 11, 2021Updated 4 years ago
- Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android☆1,293Jan 13, 2026Updated last month
- An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.☆688Oct 22, 2022Updated 3 years ago
- QASan is a custom QEMU 3.1.1 that detects memory errors in the guest using AddressSanitizer.☆350Jul 30, 2024Updated last year
- This is a simple how-to to create your own android kernel debugging cable using commercially available parts.☆217Aug 15, 2021Updated 4 years ago
- Emulation and Feedback Fuzzing of Firmware with Memory Sanitization☆165Jun 26, 2021Updated 4 years ago
- An IDAPython module for enhancing c++ support on top of ida_kernelcache☆140May 15, 2025Updated 9 months ago
- ☆448Oct 3, 2024Updated last year
- ASPFuzz: Fuzzing the AMD SP's ROM bootloader with LibAFL using QEMU full-system emulation☆30Apr 12, 2023Updated 2 years ago
- ☆32Jun 13, 2023Updated 2 years ago
- Qualcomm image unpacker☆88Jul 7, 2023Updated 2 years ago
- Supplemental material to our paper: "One Glitch to Rule Them All: Fault Injection Attacks Against AMD's Secure Encrypted Virtualization"☆95Sep 5, 2022Updated 3 years ago
- A proof-of-concept for CVE-2020-12753☆45Jun 1, 2020Updated 5 years ago
- Scripts, plugins, and information for working with Samsung's Shannon baseband.☆175Jul 2, 2024Updated last year
- Raw binary firmware analysis software☆569Jun 6, 2024Updated last year
- Exynos Modem / Shannon baseband firmware loader for IDA Pro 8.x/9.x☆81Jan 3, 2025Updated last year