Practical IoT Hacking: The Definitive Guide to Attacking the Internet of Things
No Starch Press
A place to dump news, research, and connect with people
Paulino Calderón
Co-founder of Websec, an information security consultancy based in Mexico and Canada, and founder of PWNLAB, where he conducts RF/IoT/Industrial/Medical security research and helps design open source hardware tools. He is the co-author of Practical IoT Hacking (No Starch Press) and author of Nmap: Network Exploration and Security Auditing and Mastering the Nmap Scripting Engine (Packt), a longtime open source contributor, and recurring speaker at top cybersecurity events.
Books
All publications →Published work
Nmap Network Exploration and Security Auditing Cookbook, Third Edition
Packt Publishing
Nmap: Network Exploration and Security Auditing Cookbook, Second Edition
Packt Publishing
Latest
All posts →Recent write-ups
Thank you, DEF CON 2026
A week in Vegas after DEF CON: the PWNLab booth, the feedback on how our products have evolved, and thanks to everyone who stopped by.
Nos vemos en TropiCON
TropiCON llega a Cozumel con un lineup de CISOs, investigadores y líderes técnicos. También estaré en RSA Conference del 23 al 26 de marzo.
Arsenal Lab at Black Hat Europe 2025
Last day at Black Hat Europe, with an Arsenal Lab session on capturing and decoding the latest IoT and OT radio protocols.
Black Hat Europe 2025: interceptando protocolos IoT
La última conferencia del año: una sesión de Arsenal Lab para aprender a interceptar y comunicarse con los últimos protocolos IoT.
Arsenal Lab at Black Hat USA 2025
Hands-on demonstrations across IoT, radio and wireless communications at our Arsenal Lab session for Black Hat USA 2025.
Exporting Procedure Names from Hopper Disassembler (When the UI Won't Help)
Walkthrough of a Python script for Hopper Disassembler that exports every procedure name and address from a loaded binary, working around the missing UI feature.
Also
Further back
How to Capture Bluetooth Traffic on a Samsung S23
Step-by-step guide to capturing Bluetooth HCI traffic on a Samsung S23 without root by enabling the snoop log in Developer Options.
Rooting a OnePlus 7 Model HD1905 in 2025
Walkthrough for unlocking the bootloader and flashing TWRP to root a OnePlus 7 HD1905 in 2025 so it can be reused as a dedicated testing device.
Update
Personal note announcing a refreshed blog theme and a return to publishing technical writing after a long pause.
Minino gets Mexican folklore skins and firmware 1.1.7.0
New Minino skins based on Mexican folklore, plus a firmware release adding a battery-saving mode and Thread network support for wardriving.
Décimo aniversario del capítulo ISACA Curaçao
Gracias al capítulo de ISACA Curaçao por invitarme a su décimo aniversario, un evento con un par de ideas que vale la pena replicar.
Thank you, DEF CON community
The PWNLab booth, a panel at La Villa Hacker and a No Starch Press signing, with Practical IoT Hacking, CatSniffers and Mininos all sold out.
Work together
Workshops, research and reviews
Training for teams, security research collaborations, or a look at something you are building.