Application, Product & IoT Security

Srikanth
Rudrarapu

Security engineer researching bare-metal IoT firmware vulnerabilities, hardware-enforced boot chains, and full-stack application resilience. Creator of FirmLens.

> Explore FirmLens GitHub Profile

01 // FLAGSHIP FRAMEWORK

LIVE 3D TELEMETRY

TARGET: ESP32-WROOM-32D ISA: XTENSA 240MHz

FLASH_ENCRYPT AES-256-XTS

SECURE_BOOT V2 (RSA-3072)

UART_HIL 115200 BAUD [ACTIVE]

EFUSE_BLOCK0 WR_DIS: 0x0180

[srikanth@MacBook ~]% firm-lens analyze vuln_iot_device/full_flash.bin

Initiating FirmLens Deep Analysis Pipeline Engine...

========================================================

FIRMLENS PIPELINE SCAN SECURITY MATRIX COMPLETE

========================================================

CRITICAL1

HIGH5

MEDIUM2

LOW1

INFO2

FirmLens_

Automated static and hardware-rooted vulnerability analysis engine designed specifically for bare-metal IoT firmware without POSIX runtime layers.

0 Firmware Targets Benchmarked

0 Findings Across 10 CWEs

0s Mean Static Scan Latency

01 Partition Map Parsing Extracts NVS and raw flash structures without emulator dependency.

02 Boot Chain Verification Audits eFuses, AES-XTS keys, and Secure Boot V2 signature trees.

03 Hardware-in-the-Loop Live UART exception telemetry mapped directly to reproducible CWEs.

04 Threat Intelligence Sync Automated scoring aligned directly with FIRST EPSS and CISA KEV feeds.

> View Repository PyPI Package Read Preprint

02 // CAPABILITIES

Assessment & Research Surfaces

Web & Cloud Security

OWASP ASVS logic validation, OAuth 2.0 abuse patterns, IAM boundary enforcement, and serverless isolation.

API & Microservices

Broken Object-Level Authorization (BOLA), schema drift, parameter pollution, and internal RPC communication exploits.

Secure Code Review

Static AST review across Java and Python to uncover memory corruption, race conditions, and crypto flaws.

Mobile & Embedded Systems

Dynamic instrumentation with Frida, ARM binary reversing, hardware debug probing (UART/JTAG), and key extraction.

03 // PRODUCTION WORK - WEB DESIGN

MEDIA ENGINE • INTERACTIVE FRONTEND

Dynamic Multimedia Presentation Platform

Engineered an interactive media presentation engine featuring 3D mobile container perspectives, viewport-synchronized video triggering, and zero-shift layout pipelines tailored for fluid high-retention short-form video streaming.

Adaptive Video Stream 3D Device Perspectives Scroll-Synced Playback Sub-Second First Paint

CLOUD INFRASTRUCTURE • SERVERLESS BACKEND

Serverless Platform

High-availability distributed cloud platform engineered with serverless micro-runtimes, edge caching pipelines, automated transactional delivery, and zero-trust edge DNS routing optimized for high throughput with zero idle compute overhead.

AWS CloudFront & S3 API Gateway & Lambda Cloudflare Edge DNS AWS SES Routing

04 // LITERATURE & PREPRINTS

ZENODO ARCHIVE // OPEN ACCESS DOI: 10.5281/zenodo.22704969

FirmLens: Automated Vulnerability Analysis for Bare-Metal Firmware

Introduces static, hardware-rooted, and dynamic UART HIL analysis evaluated across 11 bare-metal vendor targets, discovering 310 vulnerabilities within 0.82s mean static evaluation intervals.

BIBTEX CITATION

@software{Rudrarapu_FirmLens_2026,
  @misc{rudrarapu_2026_22704969,
  author       = {Rudrarapu, Srikanth},
  title        = {FirmLens: Automated Static, Hardware-Rooted, and
                   Dynamic HIL Vulnerability Analysis for Bare-Metal
                   ESP32 Firmware
                  },
  month        = sep,
  year         = 2026,
  publisher    = {Zenodo},
  version      = {v1.0},
  doi          = {10.5281/zenodo.22704969},
  url          = {https://doi.org/10.5281/zenodo.22704969}
}

Srikanth Rudrarapu