Aurora — Reversing, security & automation

The work, not the pitch

We don't claim it. We show it, byte by byte.

aurora — control4 reversing

❯ c4-decode "0t01 sa c4.zr.be 02"
profile  0xC25C  // button
frame    c4.zr.be 02   // button-end · 0x02 = "control4"
endpoint 100 + 0x02 = 102
──▶ zha_event { endpoint_id: 102, command: remote_button_short_release }
✔ Sonoff ZBMINI-L2 → toggled

A Control4 button —a closed ecosystem— turning on a Sonoff from another brand. Without the vendor's controller. We deciphered its proprietary protocol, byte by byte, in our lab. Read the full research →

40 bytes

of a proprietary protocol, deciphered

2 brands

incompatible, talking to each other

vendor controllers

Code that keeps running

We write infrastructure, not one-off scripts.

Reversible hardening, encrypted backups, monitoring. Bulletproof Bash, reviewed and tested. A real example from MiniOps, our toolkit to secure Linux servers and homelabs.

View the repo on GitHub →

MiniOps / harden-ssh.shbash

#!/usr/bin/env bash
set -Eeuo pipefail

# Refuse to lock anyone out — require a real key first.
grep -Eq '^\s*(ssh-ed25519|ecdsa-sha2-nistp256)\s' "$authorized_keys" ||
  miniops_die "No public key found; refusing SSH hardening." 78

# Reversible drop-in. Nothing destructive.
cat > /etc/ssh/sshd_config.d/90-miniops.conf <<'EOF'
  PasswordAuthentication no
  PermitRootLogin        no
  AuthenticationMethods  publickey
EOF

sshd -t && systemctl reload ssh   # validate, then apply

Services

Engineering most can't —or won't— do.

Reversing

Protocol reverse engineering

IoT, RF, Zigbee. We capture, decipher and document closed protocols. Reproducible evidence, byte by byte — not an automated scan.

Security

Offensive security & hardening

We audit, break and harden. Every finding with impact, evidence and concrete remediation steps. We break so others can't.

Automation

Process automation

We turn manual, repetitive work into governed, measurable processes. AI is a tool we use with judgment — not the headline.

Software

Custom software development

Tools, scripts and systems built for the problem. Python first, and whatever language each case calls for. Code that keeps running.

Networking

Advanced networking & infrastructure

Network programming, design, analysis and hardening. From the packet to the topology — we understand what happens on the wire, not just in the console.

Smart Home

Smart home & interoperability

Multi-brand home automation without closed boxes. We connect devices and systems that were never meant to talk to each other.

Training

We share what we know.

Trainings

Custom trainings

Technical training for your team: security, IoT, reversing and automation. Hands-on and on real cases, not slides.

Talks

Conferences & talks

We bring real work to stages, universities and technical communities. From the byte to the audience.

Academy

Aurora Academy Coming soon

Our online academy, in the works. Courses on security, IoT and automation, with the same hands-on, no-nonsense approach.

How we work

No smoke. One method, evidence at every step.

Scope

We understand the goal, the technical context and what a real result is. Clear rules from the start.

Execution

Deep, manual work on real systems. We document what we find, with reproducible evidence.

Delivery

Actionable report, code and automations that keep running. We verify that what we leave works.

About

Engineering with a name behind it.

Sergio Mazo

Founder & AI Solutions Architect · Cybersecurity & intelligent operations

Systems Engineer and Cybersecurity Specialist with 21 years in the field integrating smart buildings, security and automation — from Colombia to the United States. He leads technical support for a high-end smart building integrator, and at Aurora he combines offensive security, reversing and automation. He deciphered Control4's Zigbee byte by byte and maintains open-source tools like MiniOps, WB-vuln-auditor and zigscan, a Zigbee site survey for integrators. With an AI Specialization — machine learning, intelligent agents and applied automation.

LinkedIn → GitHub →

Education

Systems Engineering I.U. de Envigado Cybersecurity Specialist I.U. de Envigado AI Specialization UNIMINUTO

Featured certifications

CCNA Security Cisco Offensive Python Hack4u Offensive Security DragonJAR Secure Development DragonJAR Sophos XG Firewall Sophos (ISC)² · Cybersecurity ISC2 Machine Learning Platzi 10 Gigabit Ethernet Panduit ePMP · wireless links Cambium Crestron Programmer CTI-CTF · Fusion Automation Programmer · Control4 Snap One Lutron RadioRA 3 Lutron Project Management Diploma · I.U. Envigado

+ 50 certifications · see all on LinkedIn →

A multidisciplinary team

Aurora isn't one person: it's an engineering collective combining disciplines that rarely live together — from the radio to the backend, from pentesting to automation.

SecurityNetworkingIoT & RFSoftware AutomationSmart home

We make systems talk that never should.