Machines: reanimated

Embedded systems security research lab. We build open-source tools, frameworks, and techniques to bring systems under our control.

View Tools → Read Latest Paper →
// R&D

Research

Open-source security research, papers, and disclosures from the lab.

2025 • OSINT

GOst in the Protocol

Hunting Ligolo with JARM Fingerprinting in the Wild

Identified three distinct JARM signatures that reliably identify Ligolo proxy servers in the wild. Developed a 4-stage verification methodology using a modified Ligolo agent that tests yamux protocol implementation. Discovered key TLS error differences between Ligolo-MP and Sliver C2.

  • 3 JARM signatures for Ligolo 0.7.x, 0.8.x, and Ligolo-MP
  • 4-stage yamux protocol verification methodology
  • Ligolo-MP vs Sliver C2 distinction via TLS error analysis
Read Online → Dark PDF ↓
// Projects

Open-Source Projects

Tools to improve embedded systems research, workflows, and ease of management.

embbridge — embedded debug bridge

embbridge

"like adb, but edb"

ADB-style embedded debug bridge. Shell access, file transfer, and firmware dumping for forensics and research. Includes Graveyard TUI for multi-device management with visual status tracking.

GoC
Source
gocmd2 — interactive shell framework

gocmd2

"Easy to use Go framework for shells"

Modular, extensible framework for building interactive command-line applications in Go. Tab completion, persistent history, runtime module control, and shared state across modules.

Go Source
utftp — Ultra TFTP server

utftp

"Ultra fast, ultra reliable tftp server"

Lightweight, high-performance TFTP server in C. Single static binary with zero dependencies. Full RFC compliance, path traversal protection, and color-coded transfer logging.

C Source
uart-push — file transfer over UART serial

uart-push

"like scp, but for UART"

File transfer over UART serial connections to embedded devices. Auto-detects transfer method, supports post-transfer execution and daemon mode. Designed to bootstrap embbridge agents.

Go Source
// Capabilities & Trainings

What We Offer

We offer a range of specialized products, services, and training.

Security Research

"Understand the device"

We undertake specialized research in novel capability proofs and engineering.

View Open-Source Research →

Applied Solutions

"From research to real world"

We specialize in embedded systems, network infrastructure, and mobile.

Get in Touch →

Training & Curriculum

"Our Operational experience, standardized"

We offer standardized training in everything from hardware hacking to local LLMs.

Inquire About Training →
// Contact

Build With Us

Interested? We would like to hear from you.

Follow Our Work

Stay updated on the latest tools, research, and publications from the lab.