Reverse engineering research and custom firmware for the Allwinner V3-based SJCAM SJ4000 Air, including firmware parsers, an AVIOCTRL client, security research, and the CVE-2026-52656 proof of concept.

Distinguishability Analysis Framework for hardware Trojans

Open-source RE toward Gowin GW1N-2 (IDCODE 0x0120681B) bitstream support in Project Apicula — for the FNIRSI 2C53T scope's FPGA.

A deterministic, lock-free ESP32 Bluetooth A2DP receiver and CD-changer emulator for Renault/VDO Tuner List head units with direct S/PDIF DSP integration.

🔧 Automate hardware reverse engineering with Oscura, unifying analysis from oscilloscope files to Wireshark, eliminating manual conversions.

A privacy-focused, edge-optimized biometric authentication daemon for Linux. Decouples biometric inference from authentication modules via a high-speed Unix Domain Socket daemon. Designed for security, offline privacy, and low-latency performance.