Hardware teardowns, firmware analysis, exploit development, compliance research, and security insights from the CyberKartel team.
If you're building, deploying, or securing connected products in India, the compliance landscape looks very different from the EU's CRA. India has its own regulatory stack - and it's tightening fast.
The CRA's first real deadline isn't December 2027 - it's September 11, 2026. What the mandatory vulnerability reporting obligation actually requires, and how to get ready before the window closes.
A working comparison of the four cybersecurity frameworks IoT and connected product teams ask about most - what each requires, who it applies to, and how they overlap. Rarely just one framework at a time.
A practical methodology for firmware analysis that goes beyond the typical extract-and-boot tutorials. Learn to identify, unpack, map, and emulate firmware effectively - without losing your mind to error messages.
Most IoT breaches aren't sophisticated zero-days — 60% trace back to firmware that was never patched. A root-cause look at why it's so hard to fix, what BadBox 2.0 proved, and what the global regulatory wave means for manufacturers.
We move from observation to exploitation. This post covers finding the precise offset, understanding the memory layout, crafting a two-stage MIPS shellcode, and building the final exploit to achieve a remote shell.
In IoT firmware exploitation, control comes from understanding execution at runtime. Most devices expose their functionality through a web interface, and behind that interface sits a lightweight server binary (httpd). Learn how live debugging turns crashes into controlled execution.
A complete step-by-step walkthrough of identifying exposed debug ports on a budget surveillance camera, gaining serial console access, and dumping the full root filesystem. Hardcoded credentials, a private SSL key, and an open Telnet port - all for ₹500.