Jul 2026· International Journal of Research in Engineering, Science and Management· Vol 9, pp. 31-34· 0 citations
TL;DR
ControlPuc v0 is presented, a stealth-oriented hardware-software framework designed to evaluate endpoint resilience against advanced HID emulation attacks, and highlights critical weaknesses in current heuristic endpoint defense mechanisms.
Abstract
Modern endpoint security systems can easily detect and block non-standard USB Human Interface Devices (HIDs), limiting the effectiveness of hardware-based penetration testing tools. This paper presents ControlPuc v0, a stealth-oriented hardware-software framework designed to evaluate endpoint resilience against advanced HID emulation attacks. Built on the RP2350 microcontroller with a custom micro-runtime [7], the system uses a physical pin-voltage interlock to switch between maintenance and stealth modes. To evade forensic detection, low-level firmware modifications disable Mass Storage Class descriptors, preventing automatic drive enumeration by Data Loss Prevention (DLP) systems. An anthropomorphic input engine introduces deterministic 5 ms delays between USB transactions to mimic human interaction and evade behavioral analysis. Additionally, an asynchronous outbound HTTP pull-based communication model enables reliable remote orchestration while bypassing stateful network restrictions. The framework highlights critical weaknesses in current heuristic endpoint defense mechanisms.
Experimental results on real-world firmware images collected from multiple vendors and architectures demonstrate that the proposed approach improves emulation robustness and enhances the ability to successfully execute previously failing firmware instances, supporting more reliable IoT firmware security analysis.
Jong-Yih Kuo, Yu-Quan Wang, Tí-Feng Hsieh et al.· Sensors and materials· 0 citations
This review synthesises 118 works published from 2014 to 2026 covering the full firmware reverse engineering pipeline and identifies ten structural gaps, including the absence of unified evaluation benchmarks, fragmented peripheral modelling, the scalability–fidelity trade-off in re-hosting, and insufficient grounding...
Aditya Katpara, S. Sankaran· Electronics· 1 citation
Vuln_Box is proposed, a lightweight container-based Infrastructure-as-Code (IaC) laboratory powered by the kathará emulation engine that provides a granular behavioral threat model for defensive gap analysis and shows that the containerized approach drastically reduces resource overhead compared to traditional hypervis...
The rapid development of intelligent, connected, and electrified automotive technologies has significantly enhanced convenience, driving substantial growth in the intelligent connected vehicle (ICV) market, and accelerating the replacement of traditional fuel-powered vehicles. However, these advancements have introduce...
Sisi Li, Kun Yang, Hongliang Tian et al.· IEEE Transactions on Informa...· 0 citations
Modern System on Chip (SoC) designs integrate numerous embedded instruments for testing, debugging, postsilicon validation, and in-field monitoring. The IEEE 1687 (IJTAG) standard provides scalable access through a reconfigurable scan network of Segment Insertion Bits (SIBs), but this flexibility exposes internal resou...
An integrated architecture that combines a Cuckoo3 sandbox with a programmable high-interaction honeypot (Honeybus, an extension of LOGistICS, a medium-interaction OT honeypot for Modbus and S7comm) and a forensic visualization tool (ViewMod) is presented.
Dawit Berhan, S. Bistarelli, Benedetto Manoni et al.· International Conference on...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
