Coordinated disclosure

Advisories

Bugs we found in code that runs on millions of embedded devices: reported, fixed, and published. No screenshots without a CVE behind them.

Published CVEs

Every entry comes with our full report and the vendor advisory. Reported by Eun0us.

Write-ups & publications

How we found the bugs, and how the CTF challenges were meant to fall.

CTF 2026

Espilon CTF write-ups

Full solutions for the 2026 edition: hardware, IoT, OT, ESP32 and networks.

GitHub →
Blog · Latest

Latest article on the Espilon blog

Architecture overview, threat model, and design decisions behind the modular ESP32 framework.

Read the blog →