Published research on wireless, mobile and embedded security
Most of what we find on engagements ends up in a talk, a paper or a tool. The papers, write-ups, recorded talks and tooling are public.
Conference and journal papers on mobile, radio and embedded security.
Read the papersFindings from engagements and lab work, with enough detail to reproduce them.
Read the blogOne-hour live sessions on a single technology, archived afterwards.
See past sessionsResearch areas
Subject areas we have published in, and the systems each one applies to.
All publications| Area | Applies to |
|---|---|
| 5G security, NSA and SA | Handsets, IoT modules, private networks, operator cores |
| Open RAN | Disaggregated radio access, management interfaces, vendor integration |
| Baseband fuzzing | Modems in phones, vehicles, routers and industrial gateways |
| Interception and mapping | Coverage analysis, rogue infrastructure, subscriber exposure |
| Power-line communication | HomePlug AV, domestic PLC, electric vehicles and charging stations |
| RFID and physical access | Badge systems, gates, controllers, credential lifecycles |
| Wi-Fi and short-range radio | Enterprise wireless, BLE devices, LoRa and proprietary links |
RF Swift, our open-source SDR toolbox
A containerised SDR toolchain that sets up a working radio environment in one command. We wrote it for our own engagements, we teach with it, and it is open source.

Latest from the blog
All posts
An attacker's playbook built from three recent papers and a Proxmark3, covering keyspace-reduction and relay attacks against MIFARE Ultralight C/AES,…

How glitching attacks on the Renesas RH850 automotive microcontroller have evolved, from early DIY voltage-glitching rigs to validating the ID-code…

A survey of attacks that break STM32 readout protection (RDP), from chip decapsulation and UV light to cold-boot and CPU…
Talk to us about your project
We scope the work in a first call, then send a fixed-price proposal: intrusion tests, vulnerability research, fuzzing, test benches, trainings. Offices near Paris, Monday to Friday, 9:00 to 19:00.