Disposable vapes show up all the time in e-waste and are often found as litter at the side of the road (shame!) but they contain some useful components that can be reused by the cost-conscious hacker.
Note: Wear gloves when handling used devices and don't allow the vape liquid to contact your skin or eyes.
I've reverse engineered a number of different brands and placed the schematics and layout files in this repository. The summary table below is a good starting point.
Many of the vapes have debugging connections accessible through the USB-C charging cable interface, typically SWD on the CC pins, so you may be able to reprogram the vape without even opening up the case.
Disassembly of an IBM PC/AT BIOS variant, from ROMs imaged by GearTechWolf and shared on the Vintage Computer Federation Forums. This version was not previously known to exist, and differs from all three AT BIOS revisions which IBM is known to have released.
These days, the world has many excellent disassemblers, but when writing assembly in a weird languages, many of us just fall back to handwriting bytes in Nasm or painfully adjusting to yet another macro assembler. GoodASM is my attempt to fix that.
This assembler is very easy to retarget by extending C++ class and calling a few functions. You pretty much just define the endianness and byte size, then copy the instruction definitions almost verbatim from the programmer's guide.
Defining a new target is completely symmetric. While assembly is the primary purpose of this tool, a disassembler is also produced. An example for each instruction automatically becomes a unit test, insuring that you don't accidentally fat-finger a bitfield or two.
When writing assembly, particularly shellcode, you often have questions that a calculator should answer. What are all the instruction that begin with ro in this language? What are all of the potential forms of the jmp instruction? Does ror a assemble to ASCII? An interactive REPL mode answers these in a jiffy, with tab completion.
A desktop version of goodasm can be built if you have the Qt devkit installed.
ChartDB is a powerful, web-based database diagramming editor. Instantly visualize your database schema with a single "Smart Query." Customize diagrams, export SQL scripts, and access all features—no account required. Experience seamless database design here.
Run a single query to instantly retrieve your database schema as JSON. This makes it incredibly fast to visualize your database schema, whether for documentation, team discussions, or simply understanding your data better. Our AI-driven export feature allows you to generate the DDL script in the dialect of your choice. Whether you're migrating from MySQL to PostgreSQL or from SQLite to MariaDB, ChartDB simplifies the process by providing the necessary scripts tailored to your target database. Fine-tune your database schema using our intuitive editor. Easily make adjustments or annotations to better visualize complex structures.
Supports multiple databases: Postgres, MySQL/MariaDB, SQLserver, SQLite, CockroachDB, Clickhouse.
LLM support is optional.
Ergonomy Joe has done a lot of decompilation and reverse engineering of classic games, including parts of Final Fantasy VII, Karateka, and some of the Ultima games. The decompilation projects he's done are all re-compilable (assuming that you have the other game assets)
Scripts for scraping vintage x86 C/C++ libraries in Ghidra, in order to generate FunctionID databases. Supported libraries:
- blc200 - Borland C++ 2.0 (1990)
- blc300 - Borland C++ 3.0 (1991)
- blc310 - Borland C++ 3.1 (1992)
- msc300 - Microsoft C Compiler 3.0 (1985)
- msc400 - Microsoft C Compiler 4.0 (1986)
- msc500 - Microsoft C Compiler 5.0 (1987)
- msc510 - Microsoft C Compiler 5.1 (1988)
- msc600 - Microsoft C Compiler 6.0 (1991)
- msc700 - Microsoft C/C++ 7.0 (1992)
- msvc152c - Microsoft Visual C++ 1.52c (1995)
JTAGulator alternative for RP2040 microcontroller based development boards including RPi Pico.
Connect the RP2040 microcontroller based development board running blueTag to your computer using USB cable. Connect the development board's GPIO pins (GPIO0-GPIO15 so 16 channels in all) to your target's testpoints on the PCB. Connect the development board's "GND" pin to target's "GND". Connect to your RP2040 using a terminal emulator. blueTag supports auto-baudrate detection so you should not have to perform any additional settings. Press any key in the terminal emulator program to start using blueTag. The firmware methodically pokes at all of the connected lines to figure out what kind of interface it is (JTAG, I2C, SPI, etc) and which line is hooked to which pin of that interface for you.
iaito is the official graphical interface for radare2, a libre reverse engineering framework. Based on radare2 and Qt-5/6. Iaito was the original name before being forked as Cutter. Use all your favourite r2 plugins and scripts (nothing is specific to iaito). Focus on simplicity, parity with commands, features, keybindings. Forensics, bindiffing, binary patching... not just a static disassembler.
r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed mostly under LGPLv3, each plugin can have different licenses (see r2 -L, rasm2 -L, ...).
The radare project started as a simple command-line hexadecimal editor focused on forensics. Today, r2 is a featureful low-level command-line tool with support for scripting with the embedded Javascript interpreter or via r2pipe.
r2 can edit files on local hard drives, view kernel memory, and debug programs locally or via a remote gdb/windbg servers. r2's wide architecture support allows you to analyze, emulate, debug, modify, and disassemble any binary.
Ever wanted to be an old-school game programmer? Learn how classic game hardware worked. Write code and see it run instantly. An IDE and full emulator, running natively in a web browser. Supports a large number of platforms, from game consoles to microcomputers to arcade game mainboards. Supports C development for sure, I don't know about any other languages. Has a full devkit, too - a disassembler, memory explorer, logic probe, scanline I/O checker, even an asset editor.
Github: https://github.com/sehugg/8bitworkshop
Has real instructions for compiling and running it, not just Docker webshit.
This project the result of reverse engineering the iconic Commodore 64 game Archon (c) 1983 by Free Fall Associates.
The reproduction code is intended to be a true replication of the source logic with the exception of original memory locations.
The code is fully relocatable and pays no heed to original memory locations. Original memory locations are provided as comments above each variable, constant or routine for reference.
Extensive comments have been provided to help understand the source code.
This repository is my own list of tools / useful stuff for pentest, defensive activities, programming, lockpicking and physical security (all resources are in English only).
OpenLGTV is a collective, non-commercial project for legal reverse engineering and research of LG (Smart and non Smart) TVs firmware, which is partially Open Source. The main goal of the project is to improve the functionality of the TVs by adding new features, fixing bugs and providing new software.
Github: https://github.com/OpenLGTV
SamyGO is a project for legal reverse engineering and research on Samsung Television firmwares which is Open Sourced, partially. We try to fix problems that in the firmware. We don't want money from you. We make this modifications for us and ourself but you are allowed to join us.
(The recent set of Samsung TV Firmwares is based on Linux core (GPL), which our work will be building upon. Therefore all work done is in compliance with and subject to the GPL.)
SamyGo supports LED, LCD and Plasma TV models made by Samsung from 2009.
Repair info and schematics for mostly older MFM hard drives. The maintainer is getting their hands on as many ancient drives as possible and reverse engineering the circuitry, not only so people will (hopefully) be able to repair them, but possibly so that replacements can be manufactured.
A collection of tools I use to reverse engineer PAL (programmable array logic) devices. These tools are meant to satisfy my needs. I'm sharing them here in case someone finds them useful.
Stuff discovered while analyzing the malware hidden in xz-utils 5.6.0 and 5.6.1.
This repository contains RCEd code extracted from Stuxnet binaries via disassembler and decompilers.
Many of you might find it wrong that both I and Mr. Amr Thabet copyrighted our code, I mean it is "stolen" code extracted from malware binaries, right?
I understand that it might look silly, but both of us spent hundreds, if not thousands, of hours between ASM code trying to figure out what was behind those binaries and we are providing the product of our hard work (i.e. readable C code) to you for free. It is not a simple job and it is not a short job, both our licenses are extremely permissive, you can do whatever you want with the code provided in this repository, the only thing I'd like to ask you is that our job get recognized and that when you use this code for analysis, blog posts, or university thesis you show us your support by giving us credit for what we did.
That's all. Thanks to all of you!
I've reverse engineered the power board from a Thinkpad 700C. The P/N is 35G4785, and the FRU number is 48G3712. A very similar or identical board is also present in the Thinkpad 700. The schematic isn't perfect. Open a bug report if you find a mistake. Not all components were identified. A number of parts did not have designators on the silkscreen, so I assigned them new ones starting at 300.
The circuit board has four layers and an aluminum core, presumably for heat dissipation.
Do not fabricate this design. The PCB layout is for reference only. There are ground plane cuts in layer User.9 that need to get transferred to the ground plane. There are minor footprint differences as well. There are still unidentified components in the bill of materials.
Did you know that Ghidra automatically detects and renders image and audio files embedded in a binary, including animated GIFs?
Open surprise in Ghidra for a nice surprise.
Build with make. I used CC=arm-linux-androideabi-gcc for the heck of it.