It is not that easy to reverse engineer closed source firmware and edit the right places on the binary to prevent runtime investigation/detection and reflashing.
If you don’t care about almost undetectable persistence, then yeah you won’t need to bother with LLMs to find the perfect hook point.
If you don’t care about almost undetectable persistence, then yeah you won’t need to bother with LLMs to find the perfect hook point.