2025 was another successful year for Zetier statistically speaking, ranging from mundane to unusual accomplishments. From welcoming 46 new hires including a new head of security and moving into a new 26,000 sq ft headquarters, we invested deliberately in both our people and our infrastructure. Together, these investments position Zetier for continued innovation and deeper partnerships in support of the DoD and Intelligence Community.
One of our most popular initiatives was the expansion of our Security Zoo, which promotes internal security awareness by incentivizing whitehat and greyhat detection and reporting of security lapses. Beyond engagement, this initiative has proven effective at surfacing blind spots including account security, insecure configurations, and credential hygiene. One particularly popular Security Zoo feature is the Wall of Sheep: if someone gains access to an employee’s account (for example, when a workstation is left unlocked), they can notify our Slackbot with /sheep and then lock the machine. This action posts a message in our general channel alerting the team to the lapse and rewards the finder with a bonus, reinforcing positive security behavior while fostering a culture of shared accountability.
Beyond our internal work, Zetier remained committed to making an impact in the broader community. Our State College office had the opportunity to partner with Girl Scout troop #40223 to help them earn their junior cybersecurity badges. This comprises a series of three badges that focus on how computers communicate, strategies to protect your identity and be safe online, and ways to spot cyber crime. The Scouts programmed micro:bits, learned how to make and store strong passwords, created Caesar ciphers, and practiced identifying phishing emails. In the end, ten Scouts obtained all three of their junior cybersecurity badges!
Zetier also encouraged all employees to make open source contributions wherever possible, including publishing content on our blog, presenting at conferences, and contributing to open source projects. Over the past year our engineers made 25 contributions to open source software we rely on every day, including the Linux kernel, unblob, and Binary Ninja. In addition, we publicly released internal projects, such as GhidraDocs, that provide searchable documentation across all Ghidra versions and frida-musl, which ports modern Frida to run on out-of-date hardware.
Zetier was founded by multifaceted engineers and continues to push the boundaries of offensive cybersecurity. We reward initiative, thoughtful risk-taking, and value people who aren’t afraid to probe, break, and prove what others miss. If this sounds like you, we want to hear from you: apply here or email recruiting@zetier.com.
Keeping the Monsters at Bay with Embedded Systems Digital Forensics
A case study in identifying real-world stack overflows in Netgear router firmware – without access to source code.
Are low-cost SBCs with 4k output viable for native development, RE, and tinkering?
See what your BDM debugger is actually doing under the hood with our new open-source tool.
You just fired up an old Linux-based appliance. Here's one hacking recipe to get beyond basic local access.
Understand the mechanics, risks, and future of IMSI catching (a.k.a. stealing your cellular ID) in 2025.
Thousands of video game enthusiasts are developing experience in the cybersecurity industry by accident.
One of our engineers obtained free printers on Craigslist, which revealed some intriguing obfuscation.
After competing for several years, a Zetier Cyber Engineer made the podium at the DEFCON 32 HHV CTF.
Check out the contributions our team made – and tools we open-sourced – in 2024.
Frida runs out-of-the-box on many common targets. How hard is it to port Frida to an unsupported platform?
When code is executed with Bungeegum, it operates within the application's context and memory space, mirroring how Android CNO tools are typically used in real-world scenarios.
A recently acquired piece of military technology holds secrets about worldwide manufacturing capabilities.
Thousands of military members juggle their reserve commitment and civilian life. Read this post to learn how Zetier makes sure you won’t drop the ball.
Building tshark from source with support for Lua has proven to be a challenge. This tutorial will save you some time and frustration.
Hardware memory busses are sometimes tied together with multiple ICs. Here is how to SMASH them!
Breadcrumbs are left throughout computer systems that hackers can use to track attribution or recover sensitive information. See possible gotchas in this post.
Various topics of interest covering IT, cybersecurity, tech innovations, from GitLab workflows to satellite tech advancements.
Zetier is introducing Snipey, a command-line interface (CLI) tool that extends the capabilities of Snipe-IT.
Highlights from around the internet that we discussed in the office during Dec 2023. Everything from the best deals on collectable turbo-jet engines to Bluetooth CVEs.
Explore the art of using JTAG for efficient NOR flash memory dumps – via our practical guide for hardware enthusiasts & engineers.
Lariat works with Device Farmer to address the challenges of platform fragmentation in Android device testing.
Sharing knowledge is in Zetier’s corporate DNA, and this expresses itself in multiple ways.
Smart load integration with inexpensive power supplies providing protections typically found only in pricier models.
At Zetier’s 2023 annual offsite we met in San Juan Puerto Rico for some corporate business, relationship building, good food, and fun in the sun.
DIY dental X-ray tech for PCB reverse engineering, enabling faster, budget-friendly 3D tomography.
CodeQL is a query language for code analysis, allowing powerful code introspection and data flow queries.
Subscribe now to keep reading and get access to the full archive.