Hardware Security & Vulnerability Research

This repository serves as a centralized public archive for my independent vulnerability research, hardware audits, and Coordinated Vulnerability Disclosures (CVD).

All proof-of-concept scripts, firmware extractions, and hardware teardowns are published here strictly for educational purposes and defensive security research. Disclosures are made following standard industry timelines (CERT/CC 90-day embargoes or 45-day unresponsive vendor exceptions).

Published Disclosures

Methodology

My research primarily focuses on bridging the gap between localized physical hardware flaws and systemic infrastructure risk. Methodologies include:

• Physical hardware audits (UART, JTAG, SPI Flash dumping).
• Bootloader analysis and bypass techniques (U-Boot).
• Static firmware analysis and reverse engineering.
• Cloud infrastructure mapping and credential exposure validation.