GOTROOT RESEARCH

Security Blog

Practical red team, penetration testing, vulnerability research, IoT security, and incident response insights from GOTROOT.

• Research · Aug 4, 2026

  The device that's also in the CEO's living room. it is WiFi. We bought it ourselves and looked right at the PCB.

  A domestically sold Wi-Fi device that has sold in the millions. GOTROOT research team’s hardware analysis record of a unit they purchased themselves and disassembled, done with just a multimeter and no oscilloscope. From measuring pin voltages with a multimeter to understanding how HIGH/LOW bits become UART waveforms. This series explains the prerequisite knowledge for reading it, aimed at someone who has never studied electricity before.

  
• Research · Jul 30, 2026

  Even in the age of AI, IoT still requires physical access.

  A hands-on record of tearing down three widely used real-world devices—an ipTIME router, a domestic Wi-Fi device, and an AI voice speaker—from UART to SPI and NAND.Although we tasked AI with the firmware analysis, when it came to extracting the firmware, holding the soldering iron and interfacing directly with the chips remained a human job. The GOTROOT took on the challenge first-hand.

  
• Red Team · May 19, 2026

  What Is Red Team Consulting? A Practical Guide to Scope, Adoption Timing

  A practical guide to red team consulting adoption criteria, differences from penetration testing, Rules of Engagement, ATT&CK mapping, AI red teaming, and related service considerations.