Asim Barnawi

After KAUST Academy

Asim works at the Ministry of Foreign Affairs. Asim earned the OSCP+ in July 2025 and the OSWE in August 2026, was added to Nokia's Hall of Fame in September 2025 for reporting a vulnerability, and disclosed CVE-2026-51119 in an Invixium product.

Summer project

Cybersecurity Specialization · Cohort 2024

Drone Security Testing Framework

The "Drone Security Testing Framework" is designed to assess and enhance the security of unmanned aerial vehicles (UAVs) by simulating real-world attack scenarios. This framework deploys the ArduPilot firmware in a system-in-the-loop (SITL) environment on a Raspberry Pi, with a basic remote controller built using Arduino, featuring two buttons for drone boot/reboot and takeoff. To keep the testing process budget-friendly and risk-free, key drone information such as roll, pitch, yaw, and battery status are visually represented using LEDs connected to the Raspberry Pi's GPIO pins. The framework includes a comprehensive suite of attack modules that focus on exploiting vulnerabilities in drones. These modules cover a range of attack types, including Wi-Fi Deauthentication, Attitude Spoofing, System Fault Injection, Camera Feed Eavesdropping, and more. The framework guides users through the attack lifecycle, starting with the identification of the drone's Wi-Fi network, capturing packets to crack encryption, and then executing targeted attacks on the drone's data-link connection. By providing a controlled environment for testing, this framework aims to strengthen drone security by identifying weaknesses before they can be exploited in the real world.

Read the final report (PDF)

See it in the program report (PDF)

With KAUST Academy

All alumni

Want your entry updated or removed? Contact us.