Reverse engineering & vulnerability research
Independent security assessment of hardware and software products.
DynaCy Labs reverse engineers products to identify vulnerabilities and document how they work, and delivers the complete research package: findings, documentation, and every artifact produced along the way.
The deliverable
The complete research package, not just a report.
Everything produced during an engagement is packaged and delivered to the client.
Findings report
Every vulnerability documented with severity, impact, root cause, and steps to reproduce.
Annotated RE databases
Disassembler and decompiler projects with symbols, types, and notes, ready for your engineers to continue from.
Protocol & format documentation
Specifications for proprietary protocols, APIs, file formats, and firmware layouts, written to be used.
PoCs, tooling & harnesses
Proof-of-concept code, scripts, emulation setups, and fuzzing harnesses, plus the captures and extracted artifacts behind them.
Areas of focus
The layers between a device and everything it communicates with.
Consumer IoT & smart devices
Hubs, sensors, cameras, and the companion apps and cloud services around them.
Embedded firmware
Extraction, analysis, and emulation of microcontroller and SoC firmware.
Wireless & RF
Radio protocols captured, decoded, and documented, from sub-GHz links to GPS.
Automotive systems
ECU firmware, CAN bus traffic, and the modules that make up a modern vehicle.
Protocols & APIs
Undocumented network protocols and APIs used by desktop, mobile, and cloud software.
DynaCy Labs authored the Xtensa processor module included in Ghidra since version 11.0 and has developed reverse engineering tooling for ESP32 firmware. Our founder holds an active TS/SCI clearance.
Research
Recent research
ESP32 / ESP-IDF
ESP32 Reverse Engineering Toolchain
A Ghidra toolchain built for ESP32 firmware: flash loader, flash-dump parser, and type and function-signature archives for ESP-IDF v2.0 through v5.1.
Ghidra / Tensilica Xtensa
Xtensa Processor Support for Ghidra
A processor module that lets Ghidra disassemble and decompile Tensilica Xtensa, the architecture behind ESP8266 and ESP32 chips. Shipped upstream in Ghidra 11.0.
Ford F-150 (2021)
In preparation2021 Ford F-150 ECU Firmware
Extraction and analysis of the firmware update packages for the electronic control units in a 2021 Ford F-150.
Consulting
IT, software, and security consulting.
General IT consulting
Guidance and hands-on help with systems, operations, and technology decisions.
Network & infrastructure
Design and setup of networks, servers, and self-hosted or cloud environments.
Custom software development
Bespoke applications, integrations, and automation.
Web development
Websites and web applications built to be fast, secure, and maintainable.
Open source development
Building and contributing to open source software, from reverse engineering tooling to upstream contributions.
Security audits & hardening
Practical reviews with prioritized fixes.
Discuss an engagement.
Describe the product and what you need to learn. We respond within a couple of business days.
Contact us