ThreadpoolX

Hi, I’m the reason your Bluetooth speaker randomly screams at 3 a.m.

I spend my time convincing electronics to betray their owners. Hardware, embedded systems, wireless protocols — if it blinks, beeps, or claims it’s secure, I’ve probably made it question its life choices.

Catch me at Black Hat India 2026 · Arsenal Station 4
My Projects

Research & Tools

Tooling I build while breaking things — hardware implants, wireless attack tooling and firmware analysis utilities that came out of real embedded and OT engagements. Most started as a one-off script to solve a problem on a bench and grew from there.

Presenting at Black Hat India 2026
DissPair logo
DissPair
A specialized tool for Bluetooth and BLE security analysis.
Co-researcher: Tapadyuti Baral
Android
Security
CLI
Bluetooth
RF
BLE

Presented at

View SourceBlack Hat Arsenal
DisAPster logo
DisAPster
Wifi Recon Module.
Co-researchers: CipherX1802, Tapadyuti Baral
WiFi
Recon
Security
Tool
View Source

More projects are currently being extracted from encrypted partitions...

Write-ups

My Latest Captures

Long-form notes on hardware protocol analysis, secure boot weaknesses and Hack The Box machines and challenges. Each one walks the full path — recon, the flaw, the exploit and what the fix should have been — rather than just the winning command.

HTB Writeup: Isotope
A detailed walkthrough of the Isotope machine on Hack The Box, showcasing various exploitation techniques.
HTB
Exploitation
Walkthrough
January 5, 202612 min read
Why Industrial Embedded Systems Still Fail
An analysis of why secure boot is not a silver bullet for embedded systems security.
Blog
Embedded
Secure Boot
OT
December 15, 20258 min read
CVE-2025-67133: DoS via Unauthenticated BLE
A detailed analysis of a Denial of Service vulnerability in a BLE-enabled device.
CVE
BLE
DoS
November 20, 20256 min read
Hardware Protocol Deep Dive
A ground-up look at the protocols embedded devices actually speak on the board — UART, SPI, I2C and JTAG — and how each one becomes an attack surface.
Blog
Hardware
UART
SPI
JTAG
October 10, 202514 min read
HTB Writeup: Browsed
Full compromise of the Browsed machine on Hack The Box, from initial web foothold through to privilege escalation.
HTB
Boxes
Exploitation
Privesc
September 18, 202511 min read
HTB Writeup: Support
Walkthrough of the Support machine on Hack The Box, covering LDAP enumeration and an Active Directory privilege escalation path.
HTB
Boxes
Active Directory
LDAP
August 22, 202510 min read
HTB Challenge: Not So Plane
Solving the Not So Plane challenge on Hack The Box — pulling the hidden data back out of a file that looks perfectly ordinary.
HTB
Challenges
Forensics
July 30, 20256 min read
HTB Challenge: Elementary
A step-by-step solve of the Elementary challenge on Hack The Box, reasoning from first clues to the flag.
HTB
Challenges
July 12, 20255 min read
HTB Challenge: Impulsive Thoughts
Breaking down the Impulsive Thoughts challenge on Hack The Box and the reasoning that leads to the flag.
HTB
Challenges
June 28, 20257 min read
Disclosures

CVEs & Advisories

Vulnerabilities I've found in embedded devices, wireless stacks and industrial control systems, reported through coordinated disclosure and published once the vendor shipped a fix. Each score below shows its CVSS version and full vector string.

CVE-2026-78860
High

Missing Firmware Encryption and Secure Boot Mechanisms

Mercusys AC12 V2 Router (firmware ac12v2-up_2020-09-03 and earlier)

Firmware is stored in plaintext and the boot chain does not verify cryptographic signatures, so an attacker with physical access can modify the firmware and execute arbitrary code.
CVSS v4.08.2 / 10

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:N/SA:N

MITREDisclosure Document
CVE-2026-78861
High

Hardcoded 512-bit RSA Private Key

Mercusys AC12 V2 Router (firmware ac12v2-up_2020-09-03 and earlier)

A hardcoded 512-bit RSA private key is embedded in the firmware, allowing an attacker with physical access to execute arbitrary code.
CVSS v4.08.2 / 10

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:N/SA:N

MITREDisclosure Document
CVE-2026-78862
High

Unprotected Physical Debug Interface (UART)

Mercusys AC12 V2 Router (firmware ac12v2-up_2020-09-03 and earlier)

An exposed UART serial interface on the PCB gives an attacker with physical access a path to execute arbitrary code on the device.
CVSS v4.08.6 / 10

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

MITREDisclosure Document
CVE-2025-67133
High

Denial of Service via Unauthenticated BLE Connection

BLE-enabled Embedded Device

An unauthenticated attacker within BLE range can trigger a Denial of Service condition, rendering the device unresponsive without any prior authentication.
CVSS v3.17.5 / 10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

MITREDisclosure Document

Want to talk hacking, security, or just complain about why your Wi-Fi disconnects while playing PUBG and your friend wins the chicken dinner? Drop me a message.

threadpoolx@protonmail.com