IoT Firmware Research Docs

Technical notes, templates, and setup guides for IoT firmware vulnerability research, EMBA-based analysis, and repeatable lab environments.

Start Here

Use this order for an IoT firmware assignment or practice case:

1. IoT firmware docs index
2. 48-hour quickstart
3. Field manual
4. Case template
5. Lead scoring template

Open the reference guide only when you need the full manual.

Repository Layout

• docs/iot-firmware/ - firmware triage, extraction, attack-surface mapping, emulation, reproduction, and reporting notes.
• docs/lab-setup/ - EMBA, Ubuntu fallback, VMware autoinstall, and lab setup references.
• docs/ai-assisted-analysis/ - AI-assisted reverse-engineering workflow notes, including Ghidra MCP and external-context-capture references.
• docs/references/ - supporting research notes.
• templates/ - reusable case and lead-scoring templates.
• scripts/ - reusable setup scripts.

Lab Setup

• EMBA quickstart
• EMBA analysis walkthrough
• Long-form EMBA install/use guide
• Ubuntu fallback without EMBA
• VMware Ubuntu autoinstall guide

AI-Assisted Analysis

• AI-assisted analysis index
• Automation roadmap
• Ghidra MCP ecosystem notes
• ECC beginner guide

Working Pattern

copy templates/iot_firmware_case_template.md -> local case notes
read docs/iot-firmware/quickstart.md
extract firmware
build attack surface table
score leads with templates/iot_firmware_lead_scoring.md
use docs/iot-firmware/field-manual.md when blocked
write final report from evidence, not scanner output

Keep firmware samples, extracted root filesystems, generated logs, VM images, credentials, and case-specific evidence out of git unless they have been explicitly sanitized for publication.