From Firmware To 0-Day.

Offensive security research on embedded systems and beyond.

Research notes

2026-06-14 KR available

Technical analysis of CVE-2026-6250, an authenticated format string vulnerability in the Tapo C110 v2 ONVIF service.

IoT 0-Day 10 min

2026-03-30 KR available

A hands-on teardown of an eCos-based embedded system, from flash dumping and bootloaders to RTOS internals.

IoT RTOS 15 min