Embedded & IoT security · in training
I take things apartto understand them.
Embedded & IoT security on the hardware side - I pull firmware off devices, follow the signal from a pin into the binary, and document how they break and how to fix them. ECE (AI · ML) student at MIT-WPU, Pune. (The teardowns, horology and sketching live further down.)
01 · Focus
Firmware & Reverse Engineering
Firmware extraction, static analysis, and binary inspection - plus controlled secure-boot research. Reading what a device is actually running.
Embedded & IoT Security
The device-to-cloud attack surface: MQTT, TLS, OTA, credential storage, network behaviour. Attacked in a lab, then hardened and re-tested.
Hardware Interfaces
UART, SPI, I²C and the physical attack surface - probed, captured, and documented with real hardware evidence.
02 · Selected work
ESP32 Marauder Custom Firmware
Customized ESP32 Marauder firmware for wireless security experimentation - integrated NRF24L01 transceivers, custom OLED UI, and menu navigation over SPI, I²C, and 2.4GHz RF communication.
Responsible Disclosure: ERP IDOR
Discovered and reported an Insecure Direct Object Reference (IDOR) flaw in university ERP portal by manipulating PRN parameter tokens - demonstrated unauthorized student record access, mapped severity via CVSS v3.1, and prepared remediation report.
C8051 Bare-Metal Sensor Hub
Bare-metal firmware for a Silicon Labs C8051F340 driving four peripherals on one 8-bit bus - hand-written register-level drivers for an SSD1306 OLED, DHT11, HC-SR04, and PIR sensor.
Research writeups & lab experiments
04 · Experience & Leadership
Where I’ve built & led.
President
CurrentHack-X, Cybersecurity Club - MIT World Peace University · Pune, India
Leading the university cybersecurity community by organizing Capture The Flag (CTF) competitions, workshops, and technical events.
Research & Development Intern
PHN Technology Pvt. Ltd. · Pune, India
Contributed to the research and development of IoT, embedded systems, and cybersecurity-focused solutions using ESP32, Raspberry Pi, and hardware platforms.
Independent Security Research Projects
HackerOne Bug Bounty Platform · Remote
Actively performing web application security assessments across public bug bounty programs on HackerOne.
Assistant Sponsorship Executive
STeRG, MIT World Peace University · Pune, India
Managed sponsorship outreach and coordinated with industry partners to support technical events and student initiatives.
05 · Security Findings
Vulnerabilities & research writeups.
MIT-WPU University ERP Portal
Responsible Disclosure – IDOR in University ERP Portal
Identified an Insecure Direct Object Reference (IDOR) affecting the university ERP portal by manipulating student PRN identifiers, demonstrating unauthorized access to student profile resources.
The Graph · Immunefi & HTB CTF
Smart-Contract Reentrancy & Hash Collision Signature Bypass
Exploited tight state-update timing via abi.encodePacked hash collision to bypass on-chain cryptographic signature verification.
06 · Achievements & Recognition
Smart India Hackathon (SIH 2025)
Project Omnis - AI-driven threat prediction and attack path forecasting with a 94% true-positive rate.
Firmware Reverse Engineering
Investigating firmware extraction, static analysis and binary inspection with tools including Binwalk and Ghidra.
HackMITWPU'25 Track Host
Hosted a track at HackMITWPU'25, contributing to the execution of a campus cybersecurity competition rather than competing for the result.
Most things are just signals once you slow them down.
Firmware teardowns, mechanical movements, and sketch studies. Tap a card to open it up.
Toward embedded & hardware security research.
The trajectory is specific: build the physical fluency to dissect hardware, find where trust assumptions break, and prove it. Pointing it at product security teams working on the connected devices most people never think to question.
Firmware Extraction & Binary Analysis
Dumping flash images over serial interfaces (UART/SPI), disassembling vendor binaries in Ghidra, unpacking squashfs filesystems with Binwalk, and bypassing bootloader restrictions.
Hardware Interface Probing & Secure Boot
Tapping physical buses with logic analyzers, automated JTAG/SWD boundary scanning, auditing cryptographic image signatures, and analyzing hardware root-of-trust boundaries.
Physical Fault Injection & Silicon Security
Power side-channel analysis (SCA/DPA) to leak cryptographic keys, localized clock and voltage fault injection (FI), and evaluating silicon enclave resilience against physical adversaries.
Let’s build something
that doesn’t break.
Looking for embedded / IoT / firmware security internships (2026-2027). If that’s your team, I’d like to talk.