I do reverse engineering work, vulnerability research, hardware drivers, modding tools and VR tinkering. Currently @ NVIDIA
OpenJKDF2. A cross-platform reimplementation of JKDF2 in C
732Switch-Fightstick. Proof-of-Concept LUFA Project for the Nintendo Switch. Pretends to be a HORI Pokken Pad which only prints Splatoon 2 Posts
693HID-Joy-Con-Whispering. Talk to Joy-Con from a PC because it's cool
198Switch-Linux. Device trees, patches, etc for Linux on Switch
115lg_display_manager. I put way too much effort into controlling my LG DualUp's inputs from my laptop
115SaltyNX. Background process for the Nintendo Switch for file/code modification
78SaltySD. A collection of SD redirect patches for 3DS games
77MEH. Map Editor of Happiness, an open-source Pokemon Gen III map editor written in Java!
70u-boot. u-boot on the Nintendo Switch and other devices I mess with
69libusbd. Cross-OS library for implementing USB device-mode interfaces
56XRGyroControls_OpenXR. Input plugin for the visionOS Xcode simulator to allow control with an external gyro (WIP)
53GBA-Rick. Rick Astley on the GBA, for all your Rickrolling needs.
50DesktopAdventures. A recreation of the Desktop Adventures engine in C
49dsiwifi. AR6012/AR6013 LwIP drivers for DSi and 3DS
48CVE-2020-12753-PoC. A proof-of-concept for CVE-2020-12753
45vive_ultimate_tracker_re. Reverse engineering the protocol for the VIVE wireless dongle and the 6DoF Ultimate tracker
45gpsp. gpsp - 3DS Port
44GBA-GB-ROMDumper. A GBA/GB(C) ROM dumper for the Arduino Mega (MEGA2560)
41moooooooo. low-level Tegra X1 AArch64 emulator using Unicorn
40DisFire. A compilable disassembly of Pokemon Fire Red for GBA
37xrsp_tests. Attempting to talk to Meta Quest's USB/XRSP interface
34gwcard. Gateway Card Init and Protocol Implementation
30Wii-Glitching. Wii Mini Glitching Scripts/Resources for CWLite
29supermysterychunkhax. 3DS Userland Exploit for Pokemon Super Mystery Dungeon
28bootstrap. ARM11 Kernel from ninjhax
27MysteryMachine-Patcher. Dumps and patches code for Mystery Machine
27HashtagBlessedII. Nintendo Switch/T210 hypervisor written in Rust
26monado. https://gitlab.freedesktop.org/monado/monado
26nds2elf. Tools for converting Nintendo DS binaries to an ELF file for Ghidra/IDA
26GBAUtils. A Java library for creating GBA ROM Hacking Tools
23macos_usb_gadget_poc. A userland USB gadget driver for macOS 12 which emulates a HID keyboard
20InfiniteCampusAPI. Infinite Campus API, written in Java
20RealityKitShenanigans. Can I create a stereoscopic/40PPD Metal renderer in RealityKit? Probably.
18switch-repair-docs. Reverse-engineered schematics, pinouts, etc for Nintendo Switch repairs
18therainsdowninafrica. Nintendo Switch Horizon microkernel in-kernel SVC MiTM for doing literally anything
18v_hax. 3DS Userland Exploit for VVVVVV v1.0
15Q710-SIGNhax-EL3-Warmboot. Exploit for LG Q710ULM (Stylo 4 AMZ variant) for writing arbitrary contents to eMMC and patching aboot via S-EL3 warmboot takeover
15crotools. A collection of tools for CROs
14everdrive-cfw. GBAOS alternative for Everdrive GBA flashcarts
14makefst. CDN FST packer and packager for Wii U homebrew
13woominstaller. Homebrew Package Installer for Wii U
13arcshark. Super Smash Bros Ultimate arc extraction
13ESP32-Joy-Con-Whisperer. Make Joy-Con spill their deepest, darkest secrets over UART with an ESP32
12VRRClarityTestbench. Apple Vision Pro clarity and VRR testbench, which uses mipmaps to display VRR maps
11woominstaller_gx2. Woominstaller but like, cooler looking or something.
11ESP32-GBA-SIO. Bitbanged GBA SIO with an ESP32
10pokeemerald-warprandomizer. A warp randomizer for pokeemerald
9gba-multiboot-dump. Dumps GBA Multiboot Transfers to EZIV SD
9sxr2250_edl_prog. WIP EDL thingy for unfused SXR2250 devices
8gx2texture2D. Basic GX2 sample for rendering 2D textures
73DSGBA. GBA emulator for the 3DS.
5