Skip to content
View falcnix's full-sized avatar
💭
Hack the embedded devices away!
💭
Hack the embedded devices away!

Block or report falcnix

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Please don't include any personal information such as legal names or email addresses. Maximum 100 characters, markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
falcnix/README.md
!  _____       .__                .__        
! _/ ____\____  |  |   ____   ____ |__|__  ___
! \   __\\__  \ |  | _/ ___\ /    \|  \  \/  /
!  |  |   / __ \|  |_\  \___|   |  \  |>    < 
!  |__|  (____  /____/\___  >___|  /__/__/\_ \
!             \/          \/     \/         \/
visitor badge

💫 About Me

I break IoT, short‑circuit bootchains and make POS terminals confess. Side channel whispers, fault injection sparks one pulse, one secret. COTS payment hardware? Consider it compromised. Chip Backdoor. Q4 2025 it’s coming. Need it done? Ping me, just be sure you’re ready when I answer.

🌐 Socials

LinkedIn Medium X


💻 Latest Blog Posts

▶ ...view more | IoTSRG Blog 


🎤 Talks & Trainings

# Conference / Event Location Session / Role Format Year Link
1 Vulncon Bangalore, IN Solder & Spark Badge Village Village 2025 Link
2 SeaSides Goa, IN Advanced HW + BLE Exploitation Workshop 2025 Link
3 BSides Kerala Kerala, IN IoT Bug Discovery & Exploitation Workshop 2025 Link
4 BSides Dehradun Dehradun, IN BGA Dechipping Village Village 2024 Updating
4 Vulncon Bangalore, IN Microchip Makeover Village Village 2024 Link
5 Defcon Delhi Delhi, IN Village Village 2024 Updating
6 c0c0n Kochi, IN IoT Security Village Workshop 2023 Soon
7 BSides Bangalore Bangalore, IN IoT & Hardware Security Workshop – Instructor Workshop 2023 Slides
8 NULL Community Bangalore, IN Firmware Backdooring Talk 2022 Slides

🛠 Projects

# Project Year Purpose
1 Vulnerable Cognito Application 2022 Practice AWS Cognito attack paths
2 Cognito Creds 2022 Pull auth/unauth AWS creds via Cognito
3 something new 2025 SHALL Reveal it Soon

📊 Stats


“No matter how much software security you pile on, a compromised piece of hardware is just ice cream on a broken cone.”

Pinned Loading

  1. Vulnerable-Cognito-application- Vulnerable-Cognito-application- Public

    A vulnerable Cognito application is a simple web app that can be used to practice various Cognito attacks.

    HTML 12 1

  2. getCognitoCreds getCognitoCreds Public

    Python

  3. IoTSecurity101 IoTSecurity101 Public

    Forked from V33RU/awesome-connected-things-sec

    A Curated list of IoT Security Resources

  4. Hacking-a-Bluetooth-Device Hacking-a-Bluetooth-Device Public

    This repository contains all the slides, code and APK required to simulate the attacks demonstrated in the Null Kolkata session.

    C++ 8