SHASTRA LABS
WhatsApp Register

// Curriculum

Session by session.

Two offline courses in Dadar East, Mumbai. Small batches, real boards and a lab-first method. Beginner starts from zero; Intermediate assumes you can already work a target.

Register for Free Workshop Message on WhatsApp
01 / Beginner Start here

IoT & Hardware Security — Foundations

A 9-session, lab-first introduction to hardware security. You start by opening a device and finish by performing a full assessment on a new target and writing a professional report. No experience needed.

// Try before you enrol

Free demo class

See the lab and open a device before you commit. Fees are shared on enquiry.

Book a free demo
  1. 01

    Orientation, ethics, safety & component ID

    Tear down a device and identify chips, test points and debug headers. Bench safety and the authorisation rules come first.

  2. 02

    UART & serial console

    Probe test points, solder a header and get a boot log or a shell from the device.

  3. 03

    SPI flash dumping

    Pull the firmware off the chip with a CH341A and a clip. Verify the dump so you know it is clean.

  4. 04

    Firmware unpacking

    Turn the blob into readable files, triage the filesystem and get an ARM primer.

  5. 05

    Secret hunting + Ghidra (with AI assist)

    Find hardcoded passwords and keys, then trace the code behind them.

  6. 06

    Device network basics

    Scan the device, capture traffic, check TLS and map services back to binaries.

  7. 07

    JTAG/SWD & I2C

    Use hardware debug interfaces and read EEPROMs directly.

  8. 08

    Guided CVE reproduction

    The whole class reproduces one real, known vulnerability on a real device.

  9. 09

    Capstone

    Do the full method independently on a new device and write a professional findings report.

What you'll be able to do

  • Safely work on a hardware bench
  • Get a UART shell from a target
  • Dump and verify SPI flash firmware
  • Unpack and triage a filesystem
  • Find hardcoded secrets and keys
  • Read ARM in Ghidra
  • Map a device's network services
  • Use JTAG/SWD and I2C interfaces
  • Reproduce a known CVE
  • Write a report with CVSS & ethics statement

What you take home

Each student keeps their target device, receives a Shastra Labs Certificate of Completion, and leaves with a project and report portfolio for interviews.

02 / Intermediate Next step

Embedded Offensive Security — Core + Tracks

Eight core sessions of deeper embedded offensive work, then a chosen track. Built for people who already have a working hardware method: UART shell, flash dump and basic Ghidra navigation.

  1. 01

    Bridge & entry assessment; toolchain/VM setup

    Confirm your baseline and get a clean, reproducible analysis environment.

  2. 02

    ARM/MIPS & Ghidra deep dive

    Go beyond basic navigation: calling conventions, structure recovery and cross-references.

  3. 03

    Firmware emulation

    Run firmware with QEMU and FirmAE to test without bricking hardware.

  4. 04

    Firmware web/API vulnerabilities

    Analyse the device's web and API surface, from auth flows to command injection.

  5. 05

    Memory corruption & mitigations

    NX, canaries and ASLR: how they work, how to spot them and what changes your approach.

  6. 06

    Fuzzing & crash triage

    Build a fuzzing loop, triage crashes and separate real findings from noise.

  7. 07

    Device-to-cloud

    TLS, MQTT, OTA updates and the mobile app — follow the trust boundaries end to end.

  8. 08

    Core capstone

    Reproduce a CVE end-to-end with a professional write-up.

Track A — Wireless

Wi-Fi, BLE, Zigbee/Thread/Matter, Sub-GHz RF and RFID/NFC. Learn the radios, the tooling and the failure modes.

Track B — Automotive

CAN fundamentals and sniffing, diagnostics and injection, and automotive security engineering.

What you'll be able to do

  • Reverse ARM and MIPS firmware
  • Emulate firmware with QEMU/FirmAE
  • Test web/API surfaces in firmware
  • Reason about memory mitigations
  • Build a fuzzing loop and triage crashes
  • Trace device-to-cloud trust boundaries
  • Reproduce a CVE end-to-end
  • Work a wireless or automotive track

Prerequisite

Beginner course or a pass on the entry assessment. You should already be able to get a UART shell, dump flash and navigate a binary in Ghidra.

03 / Coming soon On the bench

Windows Security & VAPT

Windows internals, Active Directory attack paths, and vulnerability assessment & penetration testing tracks. Register your interest and we'll tell you when they open.

Join the interest list

// Your move

Start with the free demo class.

See the lab, open a device and ask anything. Fees are shared on enquiry.

Register for Free Workshop Message on WhatsApp