
Umay
IoT Malware Similarity Analysis Platform

IoT Malware Similarity Analysis Platform

Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in silicon.

Lightweight telnet honeypot for capturing IoT malware samples and identifying active command-and-control infrastructure, designed for educational…

Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept…

idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

Python telnet honeypot for catching botnet binaries

Toolkit for implant attack of IoT devices

IoT firmware identification and extraction

A session-unique RISC-V ISA — every boot speaks a different dialect. Old binaries become invalid. Malware cannot persist.