Hardware Reverse-Engineering - Revision history

PhilippeTeuwen at 08:21, 13 October 2016

2016-10-13T08:21:14Z

← Older revision		Revision as of 08:21, 13 October 2016
Line 33:		Line 33:
	=Don't's=		=Don't's=
	* https://www.reddit.com/r/funny/comments/49dayl/shortly_after_these_stock_photos_were_taken_all/		* https://www.reddit.com/r/funny/comments/49dayl/shortly_after_these_stock_photos_were_taken_all/

			=Shopping=
			* http://pcbshopper.com/

PhilippeTeuwen: /* Don't's= */

2016-10-05T11:50:49Z

Don't's=

← Older revision		Revision as of 11:50, 5 October 2016
Line 31:		Line 31:
	** [https://wiki.newae.com/Main_Page wiki] & tutos		** [https://wiki.newae.com/Main_Page wiki] & tutos

	=Don't's==		=Don't's=
	* https://www.reddit.com/r/funny/comments/49dayl/shortly_after_these_stock_photos_were_taken_all/		* https://www.reddit.com/r/funny/comments/49dayl/shortly_after_these_stock_photos_were_taken_all/

PhilippeTeuwen at 11:50, 5 October 2016

2016-10-05T11:50:41Z

← Older revision		Revision as of 11:50, 5 October 2016
Line 30:		Line 30:
	* [https://newae.com/tools/chipwhisperer/ ChipWhisperer]		* [https://newae.com/tools/chipwhisperer/ ChipWhisperer]
	** [https://wiki.newae.com/Main_Page wiki] & tutos		** [https://wiki.newae.com/Main_Page wiki] & tutos

			=Don't's==
			* https://www.reddit.com/r/funny/comments/49dayl/shortly_after_these_stock_photos_were_taken_all/

PhilippeTeuwen at 11:49, 5 October 2016

2016-10-05T11:49:55Z

← Older revision		Revision as of 11:49, 5 October 2016
Line 17:		Line 17:
	=EEPROM extraction=		=EEPROM extraction=
	* Demystifying Hardware Security [https://www.optiv.com/blog/demystifying-hardware-security-part-i Part I], [https://www.optiv.com/blog/demystifying-hardware-security-part-ii Part II], [https://www.optiv.com/blog/demystifying-hardware-security-part-iii Part III]		* Demystifying Hardware Security [https://www.optiv.com/blog/demystifying-hardware-security-part-i Part I], [https://www.optiv.com/blog/demystifying-hardware-security-part-ii Part II], [https://www.optiv.com/blog/demystifying-hardware-security-part-iii Part III]
			* Practical Reverse Engineering (Huawei HG533 router)
			** [http://jcjc-dev.com/2016/04/08/reversing-huawei-router-1-find-uart/ Part I Hunting for Debug Ports]
			** [http://jcjc-dev.com/2016/04/29/reversing-huawei-router-2-scouting-firmware/ Part II Scouting the Firmware]
			** [http://jcjc-dev.com/2016/05/23/reversing-huawei-3-sniffing/ Part III Following the Data]
			** [http://jcjc-dev.com/2016/06/08/reversing-huawei-4-dumping-flash/ Part IV Dumping the Flash]

	=Firmware extraction, glitch way=		=Firmware extraction, glitch way=
	* [https://www.youtube.com/watch?v=TeCQatNcF20 scanlime:015 / Glitchy Descriptor Firmware Grab] (video) using chipwhisperer		* [https://www.youtube.com/watch?v=TeCQatNcF20 scanlime:015 / Glitchy Descriptor Firmware Grab] (video) using chipwhisperer
			=After firmware extraction=
			* Reversing and Exploiting Embedded Devices: The Software Stack [https://www.praetorian.com/blog/reversing-and-exploiting-embedded-devices-part-1-the-software-stack Part I]
	=SCA/FI=		=SCA/FI=
	* [https://newae.com/tools/chipwhisperer/ ChipWhisperer]		* [https://newae.com/tools/chipwhisperer/ ChipWhisperer]

PhilippeTeuwen at 11:42, 5 October 2016

2016-10-05T11:42:19Z

← Older revision		Revision as of 11:42, 5 October 2016
Line 15:		Line 15:
	* [https://github.com/blacksphere/blackmagic/wiki Black Magic Probe] in-application debugging tool using a JTAG or Serial Wire Debugging (SWD) port. Targets ARM Cortex-M and Cortex-A based microcontrollers.		* [https://github.com/blacksphere/blackmagic/wiki Black Magic Probe] in-application debugging tool using a JTAG or Serial Wire Debugging (SWD) port. Targets ARM Cortex-M and Cortex-A based microcontrollers.
	** [http://hydrabus.com/2016/04/19/hydrabus-jtagswd-native-debugger-supported-officially-in-blackmagic-github/ HydraBus JTAG/SWD native debugger supported officially in blackmagic github]		** [http://hydrabus.com/2016/04/19/hydrabus-jtagswd-native-debugger-supported-officially-in-blackmagic-github/ HydraBus JTAG/SWD native debugger supported officially in blackmagic github]
	=~~Firmware~~ extraction=		=EEPROM extraction=
			* Demystifying Hardware Security [https://www.optiv.com/blog/demystifying-hardware-security-part-i Part I], [https://www.optiv.com/blog/demystifying-hardware-security-part-ii Part II], [https://www.optiv.com/blog/demystifying-hardware-security-part-iii Part III]
	=Firmware extraction, glitch way=		=Firmware extraction, glitch way=
	* [https://www.youtube.com/watch?v=TeCQatNcF20 scanlime:015 / Glitchy Descriptor Firmware Grab] (video) using chipwhisperer		* [https://www.youtube.com/watch?v=TeCQatNcF20 scanlime:015 / Glitchy Descriptor Firmware Grab] (video) using chipwhisperer

PhilippeTeuwen at 11:39, 5 October 2016

2016-10-05T11:39:34Z

← Older revision		Revision as of 11:39, 5 October 2016
Line 14:		Line 14:
	* [http://www.zoobab.com/jtag-finder jtag-finder] mirror		* [http://www.zoobab.com/jtag-finder jtag-finder] mirror
	* [https://github.com/blacksphere/blackmagic/wiki Black Magic Probe] in-application debugging tool using a JTAG or Serial Wire Debugging (SWD) port. Targets ARM Cortex-M and Cortex-A based microcontrollers.		* [https://github.com/blacksphere/blackmagic/wiki Black Magic Probe] in-application debugging tool using a JTAG or Serial Wire Debugging (SWD) port. Targets ARM Cortex-M and Cortex-A based microcontrollers.
			** [http://hydrabus.com/2016/04/19/hydrabus-jtagswd-native-debugger-supported-officially-in-blackmagic-github/ HydraBus JTAG/SWD native debugger supported officially in blackmagic github]
	=Firmware extraction=		=Firmware extraction=
	=Firmware extraction, glitch way=		=Firmware extraction, glitch way=

PhilippeTeuwen at 11:38, 5 October 2016

2016-10-05T11:38:52Z

← Older revision		Revision as of 11:38, 5 October 2016
Line 13:		Line 13:
	* [http://www.grandideastudio.com/jtagulator/ JTAGulator] open source hardware tool that assists in identifying OCD connections from test points, vias, or component pads on a target device		* [http://www.grandideastudio.com/jtagulator/ JTAGulator] open source hardware tool that assists in identifying OCD connections from test points, vias, or component pads on a target device
	* [http://www.zoobab.com/jtag-finder jtag-finder] mirror		* [http://www.zoobab.com/jtag-finder jtag-finder] mirror
			* [https://github.com/blacksphere/blackmagic/wiki Black Magic Probe] in-application debugging tool using a JTAG or Serial Wire Debugging (SWD) port. Targets ARM Cortex-M and Cortex-A based microcontrollers.
	=Firmware extraction=		=Firmware extraction=
	=Firmware extraction, glitch way=		=Firmware extraction, glitch way=

PhilippeTeuwen: /* SCA/FI */

2016-10-05T11:35:39Z

SCA/FI

← Older revision		Revision as of 11:35, 5 October 2016
Line 18:		Line 18:
	=SCA/FI=		=SCA/FI=
	* [https://newae.com/tools/chipwhisperer/ ChipWhisperer]		* [https://newae.com/tools/chipwhisperer/ ChipWhisperer]
	** [https://wiki.newae.com/Main_Page wiki]		** [https://wiki.newae.com/Main_Page wiki] & tutos

PhilippeTeuwen: Created page with "Some resources... =JTAG= ==tutos/posts== * [http://blog.senr.io/blog/jtag-explained JTAG Explained (finally!): Why "IoT", Software Security Engineers, and Manufacturers Shoul..."

2016-10-05T11:35:19Z

Created page with "Some resources... =JTAG= ==tutos/posts== * [http://blog.senr.io/blog/jtag-explained JTAG Explained (finally!): Why "IoT", Software Security Engineers, and Manufacturers Shoul..."

New page

Some resources...

=JTAG=
==tutos/posts==
* [http://blog.senr.io/blog/jtag-explained JTAG Explained (finally!): Why "IoT", Software Security Engineers, and Manufacturers Should Care]
* [http://www.zoobab.com/jtag ZooBaB page] with several JTAG-related projects
==projects==
* [https://github.com/zoobab/tjtag-arduino Tjtag-arduino] Use the arduino as a JTAG adaptor with Tjtag
* [https://github.com/zoobab/urjtag_arduiggler Arduiggler] Arduino based JTAG cable with UrJTAG
* [https://github.com/balau/JTAGduino JTAGduino] The JTAGduino project has the goal of using Arduino as a JTAG interface
* [https://hsbp.org/fuji FUJI] Free USB JTAG interface
* [https://github.com/cyphunk/JTAGenum JTAGenum] (Arduino-based) scans pins for basic JTAG functionality and can be used to enumerate the IR for undocumented opcodes
* [http://www.grandideastudio.com/jtagulator/ JTAGulator] open source hardware tool that assists in identifying OCD connections from test points, vias, or component pads on a target device
* [http://www.zoobab.com/jtag-finder jtag-finder] mirror
=Firmware extraction=
=Firmware extraction, glitch way=
* [https://www.youtube.com/watch?v=TeCQatNcF20 scanlime:015 / Glitchy Descriptor Firmware Grab] (video) using chipwhisperer
=SCA/FI=
* [https://newae.com/tools/chipwhisperer/ ChipWhisperer]
** [https://wiki.newae.com/Main_Page wiki]