Independent Threat Research across mobile, IoT & embedded systems. Advancing security through discovery, technical analysis and responsible disclosure.
We research systemic weaknesses in mobile and IoT platforms.
Our work has led to the identification of critical (CVSS) vulnerabilities and issuance of over 120 CVEs impacting billions of users.
Honored to be selected to present at
Blog
Recent Blog Posts
Talks
Selected Conference Presentations
This research examines security oversights in modern 4G/5G routers used in small businesses, industrial IoT, and mobile deployments. Several routers contain weaknesses such as weak default credentials, inadequate authentication checks, and command injection pathways. Reverse-engineering and endpoint analysis enabled practical demonstrations of RCE, arbitrary SMS sending, and related exploitation on Tuoshi and KuWFi devices.
Through examples including Burp Suite traffic and Ghidra disassembly, the talk highlights how these flaws can give attackers root access, enable fraudulent activity, or compromise entire networks. Recommended mitigations include hardened authentication, regular firmware updates, and proper segmentation.
