Edoardo Mantovani
Independent (security) researcher with a specific focus on wireless firmware reverse engineering, kernel programming and software obfuscation. Previously spoken/accepted at Nullcon Berlin 2025, Hardwear.io USA 2026, CONFidence conference 2026, SEC-T 2026, Hack.lu 2026 and BlackAlps 2026.
Session
Modern Wi-Fi chipsets are complex systems, but researching them often requires dealing with fragile vendor drivers, outdated kernel APIs and difficult debugging workflows. This talk presents a different approach: a complete implementation of the driver stack for the low-cost AicSemi aic8800 Wi-Fi 6 USB chipsets, first as a portable libusb userspace driver for both Linux and Windows, and then as a self-contained WebUSB application running directly inside the browser.
The project reconstructs the hardware initialization sequence, firmware loading process, USB transfer logic, receive and transmit paths and host-to-firmware command interface.
By moving the driver outside the kernel, the device becomes easier to instrument, fuzz and repurpose for offensive and defensive research, turning a cheap Wi-Fi dongle into a flexible platform for wireless reverse engineering and security research.
The second phase pushes the same model into the browser, through a retro terminal-style WebUSB interface, the user can interact directly with the hardware: send data to other clients, connect to networks, switch receive modes, enable raw frame injection, fuzz other network devices over the air and experiment with the runtime firmware rewriting feature for updating the firmware code during the driver execution.
