Hardware teardowns, firmware analysis walkthroughs, CVE disclosures, and IoT security research from the CyberKartel team.
A practical methodology for firmware analysis that goes beyond the typical extract-and-boot tutorials. Learn to identify, unpack, map, and emulate firmware effectively — without losing your mind to error messages.
A complete step-by-step walkthrough of identifying exposed debug ports on a budget surveillance camera, gaining serial console access, and dumping the full root filesystem. Hardcoded credentials, a private SSL key, and an open Telnet port — all for ₹500.
In IoT firmware exploitation, control comes from understanding execution at runtime. Most devices expose their functionality through a web interface, and behind that interface sits a lightweight server binary (httpd). Learn how live debugging turns crashes into controlled execution.
We move from observation to exploitation. This post covers finding the precise offset, understanding the memory layout, crafting a two-stage MIPS shellcode, and building the final exploit to achieve a remote shell.