Embedded systems
Firmware, platform services, trust boundaries, and container escape paths.
Runic Labs
Vulnerability research.
Exploit development.
We find and exploit vulnerabilities in embedded systems, userland, network services, and enterprise software.
01 / capabilities
What we investigate
Userland
Linux and Windows binaries, attack surfaces, and exploit chains.
Network services
Protocols, exposed parsers, authentication, and service boundaries.
Enterprise software
Large products with complex integrations and implicit trust.
02 / field notes
Current research
The QNAP Pattern
Target / QNAP QTS 5.x + bundled plugins (Notes Station 3, QmailAgent, QVPN, et al.)
Read across QTS's web layer and three first-party plugins. Looked at how authentication, IPC, plugin sandboxing, and container boundaries actually compose in practice, versus how QNAP's docs describe them.
03 / training
Training
Self-guided modules covering how to work through difficult targets.
View trainingV8 Vulnerability Research Training
V8, Chrome's JavaScript engine
04 / engagements
Engagements
Best fit
- Targeted vulnerability research
- Exploit development
- Embedded and appliance assessments
Not offered
- Automated scanning
- Compliance checklists
- Generic penetration tests
Research inquiry or target