Evidence-driven notes and templates for IoT firmware vulnerability research. The focus is practical triage: choosing the first component, selecting the cheapest useful analysis layer, and separating leads from confirmed findings.
- IoT firmware docs index
- 48-hour quickstart
- Research algorithms
- Field manual
- Lead scoring template
- Case template
- Firmware intake, extraction, filesystem recovery, and attack-surface mapping
- EMBA setup, scan workflow, result interpretation, and limits
- Static analysis, QEMU-user, service harnesses, full-system emulation, and hardware escalation
- NAND/MTD/UBI, update-chain, secure-boot, and root-of-trust research
- Debugging, tracing, hooking, RTOS, and multi-chip AP/CP/MCU workflows
- Evidence standards for reporting confirmed root cause and demonstrated impact
- docs/iot-firmware - active firmware research workflow documentation
- iot_emulation.md - emulation-layer decision guide
- secure_boot.md and secure_boot2.md - secure-boot and update-chain research notes
- docs/lab-setup - EMBA setup and lab-environment guides
- templates - reusable case notes and lead-scoring templates