We publish what we learn in the lab.

18 step-by-step engineering guides across 6 series, written by the researchers who run our physical assessments. Free, reproducible, and open to the community.

RESEARCH SERIES 01 // BLE

BLE Research Series

3 part comprehensive laboratory series covering protocol reversing, hardware exploitation, and security verification.

BLE 101: The Basics

BLE 101: The Basics

Learn Bluetooth Low Energy fundamentals, architecture, protocols, and core concepts. Master GAP, GATT, advertising, scanning, and security models for modern IoT devices and wireless communication.

Module:Part 1 of 3

Read Laboratory Guide→

BLE 102: Analyzing BLE

BLE 102: Analyzing BLE

Learn to capture and analyze Bluetooth Low Energy traffic using HCI snoop logs and Wireshark. Master packet filtering, handle identification, and payload extraction for practical BLE security analysis.

Module:Part 2 of 3

Read Laboratory Guide→

BLE 103: Practical BLE Attacks

BLE 103: Practical BLE Attacks

Learn practical Bluetooth Low Energy attacks and security testing techniques. Master gatttool, payload crafting, and hands-on BLE device exploitation methods.

Module:Part 3 of 3

Read Laboratory Guide→

RESEARCH SERIES 02 // FIRMWARE

Firmware Research Series

2 part comprehensive laboratory series covering protocol reversing, hardware exploitation, and security verification.

Firmware Emulation 101: Exploring the NETGEAR WNAP320

Firmware Emulation 101: Exploring the NETGEAR WNAP320

Learn firmware analysis and emulation techniques for embedded devices. Discover how to extract, analyze, and emulate firmware images safely using the Firmware Analysis Toolkit (FAT).

Module:Part 1 of 2

Read Laboratory Guide→

Firmware Emulation 102: Advanced Techniques

Firmware Emulation 102: Advanced Techniques

Learn advanced firmware emulation techniques with FAT and Firmadyne tools. Master the complete setup process and run your first NETGEAR WNAP320 emulation with step-by-step instructions.

Module:Part 2 of 2

Read Laboratory Guide→

RESEARCH SERIES 03 // JTAG

JTAG Research Series

3 part comprehensive laboratory series covering protocol reversing, hardware exploitation, and security verification.

JTAG 101: The Basics

JTAG 101: The Basics

Learn JTAG fundamentals, boundary scan, daisy chain, and hardware debugging techniques. Master the essential concepts for testing, programming, and debugging electronic devices through JTAG interface.

Module:Part 1 of 3

Read Laboratory Guide→

JTAG 102: JTAG Pin Identification

JTAG 102: JTAG Pin Identification

Learn advanced JTAG pin identification techniques using JTAGulator and manual methods. Master the systematic approach to locate and validate JTAG interfaces on embedded devices with practical hands-on guidance.

Module:Part 2 of 3

Read Laboratory Guide→

JTAG 103: Hardware Debugging

JTAG 103: Hardware Debugging

Learn practical JTAG debugging techniques with Arduino Due, Shikra, and OpenOCD. Master hands-on hardware debugging including halting CPU, reading registers, and interacting with embedded devices through JTAG interface.

Module:Part 3 of 3

Read Laboratory Guide→

RESEARCH SERIES 04 // NETWORKING

Networking Research Series

4 part comprehensive laboratory series covering protocol reversing, hardware exploitation, and security verification.

Networking 101: The Internet & Protocols

Networking 101: The Internet & Protocols

Learn fundamental networking concepts, internet architecture, and communication protocols. Master the OSI model, TCP/IP, and understand how modern networks actually work.

Module:Part 1 of 4

Read Laboratory Guide→

Networking 102: The OSI Model Breakdown

Networking 102: The OSI Model Breakdown

Learn detailed OSI model layers, protocols, and real-world applications. Master physical, data link, network, transport, session, presentation, and application layers.

Module:Part 2 of 4

Read Laboratory Guide→

Networking 103: The TCP/IP Stack

Networking 103: The TCP/IP Stack

Learn TCP/IP protocol suite, layers, encapsulation, and real-world applications. Master application, transport, internet, and network access layers with practical examples.

Module:Part 3 of 4

Read Laboratory Guide→

Networking 104: Understanding IP Addresses

Networking 104: Understanding IP Addresses

Learn IP addressing, IPv4/IPv6, subnetting, NAT, DHCP, and ICMP. Master IP address classes, subnet masks, and network configuration fundamentals.

Module:Part 4 of 4

Read Laboratory Guide→

RESEARCH SERIES 05 // SPI

SPI Research Series

3 part comprehensive laboratory series covering protocol reversing, hardware exploitation, and security verification.

SPI 101: Serial Peripheral Interface

SPI 101: Serial Peripheral Interface

Learn SPI protocol fundamentals, architecture, and hardware hacking applications. Master flash memory access, chip identification, and communication workflow techniques.

Module:Part 1 of 3

Read Laboratory Guide→

SPI 102: Firmware Extraction

SPI 102: Firmware Extraction

Learn practical firmware extraction techniques using CH341A programmer and Flashrom. Master SOIC8 clips, hardware connections, and complete firmware dumping workflow.

Module:Part 2 of 3

Read Laboratory Guide→

SPI 103: Firmware Analysis

SPI 103: Firmware Analysis

Learn firmware analysis techniques using Binwalk, Firmwalker, and manual inspection methods. Master filesystem extraction, configuration analysis, and security assessment workflows.

Module:Part 3 of 3

Read Laboratory Guide→

RESEARCH SERIES 06 // UART

UART Research Series

3 part comprehensive laboratory series covering protocol reversing, hardware exploitation, and security verification.

UART 101: Getting to Know Serial Communication

UART 101: Getting to Know Serial Communication

UART (Universal Asynchronous Receiver/Transmitter) is a hardware communication protocol used for asynchronous serial communication between devices. It's one of the simplest ways to send data between microcontrollers, computers, and peripherals.

Module:Part 1 of 3

Read Laboratory Guide→

UART 102: Serial Discovery for Beginners

UART 102: Serial Discovery for Beginners

UART stands for Universal Asynchronous Receiver/Transmitter. It's basically a hardware communication protocol that acts like a translator between your computer and other serial devices, sending data one bit at a time over just a couple of wires.

Module:Part 2 of 3

Read Laboratory Guide→

UART 103: Device Communication and Shell Access

UART 103: Device Communication and Shell Access

In this blog, our objective is to gain shell access to the target device via the UART interface. Once connected, we'll explore the device's file system to locate stored credentials or configuration data.

Module:Part 3 of 3

Read Laboratory Guide→

Want this depth pointed at your product?

The people who write these guides are the ones who would run your assessment.

Start a conversation

Usually a reply within one business day · Mon–Sat · 10:00–18:00 IST