A high-performance port of the classic Tomb Raider engine (OpenLara) for the ESP32-P4. Delivers 30 FPS via software rendering with fully integrated audio.
Halo: Combat Evolved running natively on the Anbernic RG35XX H (RG35XXH) and other Allwinner H700 handhelds with Knulli. ARM64 port of the halo-ce-universal decompilation for the Mali-G31: 60 fps menus, about 40–55 fps campaign. No emulation. Ready-to-install release; bring your own Xbox disc.
Editor visual para OLED SSD1306
Burnout 3: Takedown, reverse engineered (partly) It runs! The crashes, the takedowns, the handling are a pretty good rendition. Bring your own copy of the disc.
—
Open-source reading-first firmware for the Xteink X3 and X4
An unofficial extensible hack framework for Ableton Push 3 Standalone.
—
Decompilation source code of Halo Combat Evolved Anniversary (Xbox360)
—
ORCA port to Gameboy Classic
A pure C inference engine designed for Intel Xe-LP iGPUs and Gemma 4 26B-A4B QAT.
This is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.
Experimental NFSU2 VR build for Windows PCVR and Meta Quest 3 standalone. DEV BUILD: not fully tested; bugs and performance issues may occur. No game content included.
A native NetEase Cloud Music homebrew client for Nintendo 3DS with dual-screen playback, lyrics, search, and SD card caching.
the CVE-2026-43499 by iqooneo11
This repository contains the documentation, hardware designs, and source code for a Thrust Vector Control (TVC) drone. Built to demonstrate flight control capabilities in amateur rocketry, the vehicle dynamically vectors thrust to balance itself and maintain precise orientation set-points, mirroring actual rocket systems.
Native AmigaOS client for Home Assistant — configurable MUI dashboard, WebSocket live updates, ARexx port
CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC
XDJ-XZ style Mixxx 2.5 skin + DDJ-1000 mapping + Raspberry Pi 4 DJ box toolkit
parts of the Playstation2's OSDSYS reverse engineered
PS Vita port of The Binding of Isaac: Repentance by static recompilation of the PC executable to ARM.
A QEMU machine that emulates the Amazon Kindle 4 (i.MX50 'Yoshi'), with an e-ink display, Wi-Fi, a Kindle bezel skin, and a portable macOS app.
emini.ink Home: a calm, four-colour poster of your day for the ZECTRIX NOTE4C e-paper devkit. Weather, one headline, your note, the sky and the air. ESP-IDF firmware, set up from a phone.
54 key column staggered split, with hall effect
—
Open-source NVMe SSD firmware development and simulation on Linux: portable C, FTL/GC, NAND controller modeling and persistent media. 开源 NVMe SSD 固件开发与仿真实验室。
Experimental dual-screen Android Auto projection via MHI2 stock GAL hooking. For personal use; tested on VW MIB2.5 High (EU MU1367).
A mini osciloscope project
A technique that mixes NTDLL unhooking and hellsgate gate varients
A tiny physics-aware animation engine for remarkably fluid GUIs. Written in single-header C
Linux recoil compensation script for FPS games using a virtual mouse via uinput, with per-weapon JSON patterns and a sensitivity calculator.
QoL missing features for the CDJ-3000
Experimental Linux DRM/KMS driver for the SM750G10 SE-DP750A-HDMI, with HDMI, custom RGB565 dithering, DMA and software-scaled ultrawide modes.
Demo firmware for the Read Pico ESP32-S3 e-paper dev board
Native Android port of the Sonic R PC decompilation (jnmartin84). Features a custom GLES2 shader pipeline, 60 FPS, customizable touch controls, and SAF asset installation. Requires original PC game files (no retail assets included). Non-commercial open-source project.
—
SPC970 Mechacon dumper
Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain root privileges.
Native original Xbox port of Animal Crossing (GameCube decomp)
OpenWrt nativo su Nubia RedMagic 7 (NX679J, SM8450): documentazione verificata, reverse engineering della catena di boot, payload del port. MIT (codice) + CC BY 4.0 (documentazione).
Raw 802.11 frame injection on ESP-IDF v5+/v6+ via a one-command objcopy --weaken-symbol patch. Enables Authentication (SAE Commit), Deauth, Reassoc, Disassoc, and Control frames (RTS/CTS/ACK) through esp_wifi_80211_tx()
attempt to Sp12 on Fm-1 m-vave
Made with PSXrecomp, a Sony PlayStation game static recompiler ecosystem · Part of the R.A.I.D. community
Omarchy/Linux on a T1 MacBook Pro (2016-2017 Touch Bar): working Touch Bar, 5 GHz Wi-Fi with a 26 dB signal fix, and CS8409 audio. Includes two driver bug fixes and the ESP/T1 firmware rule that decides whether any of it is possible.
—
Full duplex sdr from two esp32
Native original Xbox port of Super Smash Bros. Melee
EasyInput hardware metronome and drum machine
Linux Binder binder_free_transaction() process-lifetime use-after-free (CVE-2026-64468): unprivileged PoC + x86_64 LPE. Authorised security research.
—
—
AI-driven native recompilation project for ISS Deluxe on SNES
Win16-on-Win32 host for Stars! (4x game)
A self-hosting compiler for Bend 2, written in Bend 2.
—
PWNCUBE v1.0 is a Cubesat hardware based platform for aerospace cybersecurity research
LLM inference in C, compiled per model and per chip. Up to 14x faster.
A simple utility in C to detect windows hidden from screen capture
The Elgato Cam Link 4K, rebuilt with open-source LiteX gateware and bare-metal FX3 firmware.