Wyoming, USA

Max Thomas

Elite
@shinyquagsire23

I do reverse engineering work, vulnerability research, hardware drivers, modding tools and VR tinkering. Currently @ NVIDIA

OpenJKDF2. A cross-platform reimplementation of JKDF2 in C

732

Switch-Fightstick. Proof-of-Concept LUFA Project for the Nintendo Switch. Pretends to be a HORI Pokken Pad which only prints Splatoon 2 Posts

693

HID-Joy-Con-Whispering. Talk to Joy-Con from a PC because it's cool

198

Switch-Linux. Device trees, patches, etc for Linux on Switch

115

lg_display_manager. I put way too much effort into controlling my LG DualUp's inputs from my laptop

115

SaltyNX. Background process for the Nintendo Switch for file/code modification

78

SaltySD. A collection of SD redirect patches for 3DS games

77

MEH. Map Editor of Happiness, an open-source Pokemon Gen III map editor written in Java!

70

u-boot. u-boot on the Nintendo Switch and other devices I mess with

69

libusbd. Cross-OS library for implementing USB device-mode interfaces

56

XRGyroControls_OpenXR. Input plugin for the visionOS Xcode simulator to allow control with an external gyro (WIP)

53

GBA-Rick. Rick Astley on the GBA, for all your Rickrolling needs.

50

DesktopAdventures. A recreation of the Desktop Adventures engine in C

49

dsiwifi. AR6012/AR6013 LwIP drivers for DSi and 3DS

48

CVE-2020-12753-PoC. A proof-of-concept for CVE-2020-12753

45

vive_ultimate_tracker_re. Reverse engineering the protocol for the VIVE wireless dongle and the 6DoF Ultimate tracker

45

gpsp. gpsp - 3DS Port

44

GBA-GB-ROMDumper. A GBA/GB(C) ROM dumper for the Arduino Mega (MEGA2560)

41

moooooooo. low-level Tegra X1 AArch64 emulator using Unicorn

40

DisFire. A compilable disassembly of Pokemon Fire Red for GBA

37

xrsp_tests. Attempting to talk to Meta Quest's USB/XRSP interface

34

gwcard. Gateway Card Init and Protocol Implementation

30

Wii-Glitching. Wii Mini Glitching Scripts/Resources for CWLite

29

supermysterychunkhax. 3DS Userland Exploit for Pokemon Super Mystery Dungeon

28

bootstrap. ARM11 Kernel from ninjhax

27

MysteryMachine-Patcher. Dumps and patches code for Mystery Machine

27

HashtagBlessedII. Nintendo Switch/T210 hypervisor written in Rust

26

monado. https://gitlab.freedesktop.org/monado/monado

26

nds2elf. Tools for converting Nintendo DS binaries to an ELF file for Ghidra/IDA

26

GBAUtils. A Java library for creating GBA ROM Hacking Tools

23

macos_usb_gadget_poc. A userland USB gadget driver for macOS 12 which emulates a HID keyboard

20

InfiniteCampusAPI. Infinite Campus API, written in Java

20

RealityKitShenanigans. Can I create a stereoscopic/40PPD Metal renderer in RealityKit? Probably.

18

switch-repair-docs. Reverse-engineered schematics, pinouts, etc for Nintendo Switch repairs

18

therainsdowninafrica. Nintendo Switch Horizon microkernel in-kernel SVC MiTM for doing literally anything

18

v_hax. 3DS Userland Exploit for VVVVVV v1.0

15

Q710-SIGNhax-EL3-Warmboot. Exploit for LG Q710ULM (Stylo 4 AMZ variant) for writing arbitrary contents to eMMC and patching aboot via S-EL3 warmboot takeover

15

crotools. A collection of tools for CROs

14

everdrive-cfw. GBAOS alternative for Everdrive GBA flashcarts

14

makefst. CDN FST packer and packager for Wii U homebrew

13

woominstaller. Homebrew Package Installer for Wii U

13

arcshark. Super Smash Bros Ultimate arc extraction

13

ESP32-Joy-Con-Whisperer. Make Joy-Con spill their deepest, darkest secrets over UART with an ESP32

12

VRRClarityTestbench. Apple Vision Pro clarity and VRR testbench, which uses mipmaps to display VRR maps

11

woominstaller_gx2. Woominstaller but like, cooler looking or something.

11

ESP32-GBA-SIO. Bitbanged GBA SIO with an ESP32

10

pokeemerald-warprandomizer. A warp randomizer for pokeemerald

9

gba-multiboot-dump. Dumps GBA Multiboot Transfers to EZIV SD

9

sxr2250_edl_prog. WIP EDL thingy for unfused SXR2250 devices

8

gx2texture2D. Basic GX2 sample for rendering 2D textures

7

3DSGBA. GBA emulator for the 3DS.

5
51
Apply