Cormorant Cyber is an independent consultancy helping product teams find, understand, and fix security issues across mobile, wireless, and peripheral attack surfaces — with hands-on reversing, malware triage, penetration testing, and blue-team hardening.
Capabilities
Focused, hands-on engagements covering the mobile attack surface — from the app layer down to the radio.
Deep technical review of Android applications and their surrounding infrastructure.
Determine what a suspicious app actually does — quickly, safely, and with evidence.
Examination of wireless attack surface for devices, peripherals, and IoT products.
Forensically sound examination where chain-of-custody and integrity matter.
Full-lifecycle offensive and defensive engagements across network, wireless, and cloud surfaces.
Trust analysis for keyboards and input devices — the attack surface most hosts take for granted.
About
Cormorant Cyber is the solo consultancy of Casey Chambers, an Android and mobile security specialist based in Dubai, UAE. Cormorants are coastal birds that dive deep to hunt — the name reflects a working style of going below the surface of an app or device to see what is actually there.
The practice is built on real, reproducible technical capability: Android reverse engineering, APK disassembly, ADB and Shizuku privileged workflows, malware triage, penetration testing and blue teaming, Bluetooth HCI capture, HID and peripheral security research, and evidence-preserved digital investigations — all documented openly in the public research corpus below.
Engagements are direct: one practitioner, no account-manager layer, clear scope, and findings you can act on. Work is available globally, with a base in the UAE timezone.
Research
Techniques and tooling developed in client work are published openly so the community can review, reuse, and verify them.
savagedamage/android-security-wizardPublic Android security research corpus — ADB / Shizuku privileged workflows, APK analysis techniques, and mobile security research findings.
savagedamage/pentest-bluestack-toolkitPentest & Blue Team toolkit — a consolidated multi-platform reference (Arch, BlackArch, Kali, Parrotsec, NetHunter) covering recon, exploitation, C2, wireless, and blue-team hardening.
savagedamage/hid-security-researchDefensive HID security research — a cited knowledge base, threat/vulnerability data, and an observation prototype for making keyboards observable, verifiable, and trustworthy.
savagedamage/keyboard-reconBLE identity scanner for the ESP32-S3 — passive, read-only firmware that records what a wireless keyboard advertises before you ever interact with it.
savagedamage/awesome-hid-securityCurated list of tools, hardware, payloads, research, and defenses for HID security — wireless input peripherals, keystroke injection, and related attack & defense tooling.
Every project is presented as-is for research and defensive education. Adversarial tooling is published for the blue team — to understand what defenders are up against.
Contact
Whether it's an app you're shipping, a sample you need triaged, or a device you want examined — the first conversation is free and confidential.
✉ casey@cormorantcyber.comDubai, UAE · Responses within one business day