Services

Low-level firmware development for microcontrollers, FPGAs, and embedded Linux platforms. From bare-metal drivers to complete embedded systems.

Bare-metal Firmware Development

Custom firmware for microcontrollers — written in C, close to the hardware. Experience across multiple platforms including STM32, ESP32, and other ARM Cortex-M architectures.

• STM32, ESP32, ARM Cortex-M
• Peripheral drivers (GPIO, ADC, DMA, timers)
• Communication interfaces (SPI, I2C, UART, CAN)
• Interrupt management & low-power modes
• HAL & register-level programming

FPGA Development (VHDL)

Digital logic design and implementation on FPGA platforms. From simple logic blocks to complex data acquisition and processing systems in VHDL.

• VHDL design & simulation
• Xilinx FPGA implementation (Vivado)
• Data acquisition & signal processing
• Custom IP core development
• Testbench writing & verification
• SoC integration (PS/PL) & MicroBlaze soft processor

Embedded Linux & Yocto

Building and customizing embedded Linux distributions for ARM-based platforms. BSP adaptation, Yocto layer creation, and system-level integration.

• Yocto image building
• BSP adaptation & configuration
• U-Boot bootloader customization
• Device Tree configuration
• System integration & bring-up

RTOS Development

Real-time firmware using FreeRTOS for applications requiring deterministic timing, task scheduling, and concurrent operations.

• FreeRTOS task & scheduler configuration
• Inter-task communication (queues, semaphores, mutexes)
• Real-time constraints & deadline management
• Memory management in constrained environments
• RTOS debugging & performance profiling

Multi-language Expertise

Fluent in the core languages of embedded systems — from high-performance C to hardware description languages, with Python for tooling and automation.

• C — primary language, expert level
• C++ — object-oriented embedded
• VHDL — FPGA & digital logic
• ARM Assembly — low-level optimization & RE
• Python — test scripts, automation, tooling
• Bash — scripting & automation

Offensive security for embedded systems and IoT devices. I find vulnerabilities before attackers do — from hardware attacks to firmware exploitation.

Embedded & IoT Pentesting

Comprehensive security assessment of IoT devices and embedded systems. Full-scope testing from physical access to firmware exploitation.

• Attack surface mapping & threat modeling
• Physical interface enumeration (UART, JTAG, SWD)
• Firmware extraction & analysis
• Network protocol analysis (BLE, BT/EDR, Wi-Fi, MQTT, Zigbee)
• Vulnerability research & PoC development
• Detailed vulnerability report & remediation advice

Hardware Hacking & Chip-off

Physical attacks on hardware targets — debug port exploitation, flash memory extraction, bus sniffing, and chip-off techniques for security analysis.

• JTAG / SWD debug port identification & exploitation
• In-circuit flash reading (SPI, eMMC, NAND)
• Chip-off — physical memory extraction via desoldering
• Flash memory dump & data recovery
• Bus sniffing & protocol analysis (logic analyzer)
• Test point & undocumented interface discovery

Firmware Reverse Engineering

Deep analysis of compiled firmware binaries — disassembly, decompilation, and functional reverse engineering to understand undocumented systems and find vulnerabilities.

• Firmware extraction (flash dump, OTA capture, update files)
• Binary analysis with Ghidra & Binwalk
• ARM / MIPS / x86 disassembly & decompilation
• File system extraction & analysis
• Cryptographic key & credential extraction
• Vulnerability identification & exploit development

Cryptography & Secure Boot

Security architecture review focused on cryptographic implementations, secure boot chains, and key management in embedded systems.

• Secure boot chain analysis & bypass testing
• Cryptographic implementation review
• TLS / certificate validation testing
• Key storage & management assessment
• Firmware signing & update mechanism audit
• Recommendations for secure architecture

SDR & Radio Hacking

Software-defined radio analysis for wireless protocols used in IoT and embedded devices. Signal capture, demodulation, and protocol reverse engineering.

• RF signal capture & analysis
• Wireless protocol reverse engineering
• Replay attacks & signal manipulation
• Proprietary protocol demodulation
• SDR platforms & GNU Radio
• Licensed amateur radio operator

Vulnerability Research & Exploits

In-depth vulnerability research on embedded targets — from discovery to proof-of-concept exploit. Finding and documenting security flaws that matter.

• 0-day vulnerability discovery
• Memory corruption analysis (buffer overflow, use-after-free)
• Proof-of-concept exploit development
• Responsible disclosure
• Threat modeling & risk assessment
• Remediation guidance & security hardening

Bug Bounty (HackerOne)

Active bug bounty hunter on HackerOne, focused on IoT and hardware targets. Proven track record of finding and reporting critical vulnerabilities in real-world products.

• Active HackerOne researcher
• Focus: IoT devices & embedded systems
• Hardware & firmware vulnerability hunting
• Responsible disclosure & vendor coordination
• Detailed technical reports