About Me

I am an experienced security researcher by profession having 14+ years of experience in Application/Hardware/Networking security including almost 7 years of security research. I have been training and providing this security experience in form of consulting services to various industries that range from finance, software products,  embedded devices, etc. Most of my clients range from being small software shops to large enterprises.

I am passionate about developing new and unique security tools, teaching various security folks ranging from novice to experts. Some of my contributions to hacker’s arsenal include writing extensions for exploiting zigbee protocol, identifying 0-day exploits in various embedded devices from simple web flaws to command injection, buffer overflows, exploiting Android and iOS based mobile applications, writing security books, etc.

I believe strongly in the paradigm “Defense in Depth” and have been working with embedded device manufacturers to help them secure their products.