Enterprise-grade firmware analysis, embedded systems auditing, web application security, malware investigation and advanced cyber defense.
Advanced malware can operate below Android, iOS and Windows layers - inside firmware, GSM baseband processors and embedded communication controllers.
Firmware-level malware survives operating system reinstalls and often remains invisible to traditional endpoint monitoring.
Modern smartphones contain multiple independent processors and communication controllers beyond OS visibility.
Acquire firmware. Validate protections. Correlate the evidence.
GGSec Firmware Toolkit is GGSEC's proprietary read-only framework for firmware acquisition, live platform-security assessment and offline image analysis across Windows and UEFI workflows.
Cortex combines AI-guided source analysis with live DAST confirmation to separate exploitable vulnerabilities from noise, then produces evidence-graded HTML and PDF reports ready for clients, auditors and engineering teams.
A passive egress-detection appliance for covert channels conventional firewall and DPI controls can miss — signals hidden inside TCP timestamps, window sizes, sequence numbers, packet timing and selected DNS patterns. It sits on a mirror port, retains no raw packet payloads, and exports findings to STIX / MISP / syslog. Three form factors, one detection engine.
GGFWPi is a free and open-source read-only auditor for Raspberry Pi firmware, Secure Boot chains and platform hardening. It is published on GitHub under the Apache License 2.0 — free to use, study, modify and redistribute, including commercially.
The tool never writes to EEPROM or OTP. Every result states how it was obtained, and it reports the difference between a confirmed defect and something it could not prove — the two are never merged into one number.
We constantly analyze hardware and firmware threats. Here's what our lab is working on:
MikroTik implant analysis, backdoor detection, and advanced persistence mechanisms in consumer/enterprise routers.
Read more →Pre-delivery firmware tampering detection, counterfeit component identification, vendor supply chain integrity verification, and SBOM analysis for embedded systems.
IoT, medical devices, automotive systems — identifying vulnerabilities at the hardware and firmware level.
Read more →Complete 5-phase firmware audit framework: UEFI boot chain analysis, SPI flash forensics, and supply chain risk assessment.
Read full methodology →Bootkits, Secure Boot bypasses, pre-OS exploitation vectors, and firmware rootkit detection.
Advanced UEFI & embedded persistence analysis. BlackLotus, MoonBounce, SPI flash forensics and NIST SP 800-193 mitigations.
📥 Download Whitepaper (PDF) →Spectre, Meltdown, MDS, Zenbleed, Downfall, Rowhammer — full taxonomy of transient execution and side-channel vulnerabilities across Intel, AMD, and ARM.
Read more →Reproducing Foreshadow / L1 Terminal Fault on consumer Skylake without TSX — extracting SGX enclave secrets through the L1 data cache. Full reconstruction: driver porting to modern kernels, PoC harnesses and reproduction notes on dedicated test hardware.
View on GitHub →Investigating Microarchitectural Store Buffer Data Sampling (MSBDS, CVE-2018-12126) on a Skylake test system — a store-conditioned, value-dependent cache signal from speculative loads, isolated with controls and canary swaps. Educational reproduction, not a new disclosure.
View on GitHub →Educational reproduction of Gather Data Sampling (CVE-2022-40982, “Downfall”) on a Skylake system we own and control. The lab demonstrates a same-thread canary, a cross-thread SMT spy, and byte-exact recovery of a controlled kernel banner during rep movs. This reproduces a known vulnerability; it is not a new disclosure.
Cross-platform reproduction of Spectre v1 (bounds-check bypass, CVE-2017-5753) with a Flush+Reload cache channel. The same source recovers the canary string on an Intel Core i3-6100, an Intel Xeon under WSL2, and a Raspberry Pi 5 (Cortex-A76); a barrier control leg reads cold on each. Educational reproduction, not a new disclosure.
View on GitHub →GSM/LTE/5G modem firmware analysis, RCE via radio interface, baseband bootkits, and silent persistence below the OS. Includes case study: broadcast RCE on GSM baseband.
Advanced binary analysis, custom RE tooling, automated firmware unpacking, and static/dynamic analysis frameworks for embedded systems.
🚧 SOON — Q3 2026