Skill UI

Expert in developing complete, high-performance firmware and peripheral drivers for ARM Cortex-M platforms (STM32, Teensy, nRF52). Specializes in low-level hardware interaction, including implementing drivers for I²C, SPI, UART, and managing complex concurrency patterns using FreeRTOS/Zephyr. Provides critical guidance on optimizing for determinism, cache coherency, DMA transfers, and memory barriers to ensure reliable embedded system operation.

A comprehensive guide detailing the entire workflow for analyzing embedded firmware. It covers hardware-level extraction methods (UART, JTAG, SPI dump), filesystem analysis (SquashFS, JFFS2), binary reverse engineering using tools like Ghidra, and identifying common vulnerabilities (Buffer Overflow, Command Injection). Ideal for security researchers and embedded systems engineers.

Guides acquiring boot sectors, disassembling MBR/VBR, probing UEFI firmware, and hunting kernel rootkit artifacts to investigate persistent bootkits and rootkits that survive OS reinstallation or Secure Boot tampering.

Performs firmware image examination to uncover embedded malware, backdoors, or unauthorized modifications in routers, IoT units, UEFI/BIOS, and other embedded systems, covering extraction, filesystem inspection, reverse engineering, and bootkit hunting.

Performs comprehensive IoT device security assessments, combining hardware interface testing, firmware extraction, runtime exploitation, and network/cloud/mobile analysis to find vulnerabilities before deployment or for product reviews.

Analyzes PLC firmware to uncover vulnerabilities such as hardcoded credentials, insecure updates, backdoors, memory corruption, and undocumented debug interfaces. Covers extraction from Siemens, Allen-Bradley, and Schneider platforms, static and dynamic inspection, and baseline comparison to detect tampering.

Analyzes UEFI bootkit persistence mechanisms across firmware implants, ESP tampering, and Secure Boot bypass techniques to guide firmware integrity audits, ESP inspection, and malware investigations.

Guides analysts through using binwalk to scan, extract, mount, and inspect firmware images, covering entropy analysis, nested archive handling, filesystem mounts, and string hunting for credentials or config data during IoT/security research.