coco-research / hardware-security
Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
0
SKILL.md1.0 KB
Hardware / Embedded Interface Security
适用场景
- UART / JTAG / SWD 调试口发现
- 启动日志、root shell、引导打断
- 配合拆机提取 Flash
- 安全启动/加密 Flash 的可行性评估(非破坏性优先)
工作流
□ 拆解授权设备;拍照标注测试点
□ 万用表找 GND/VCC/TX/RX;逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志;记录波特率
□ JTAG:枚举 IDCODE;评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra工具链
| 工具 | 用途 |
|---|---|
| USB-TTL / logic analyzer | UART |
| J-Link / CMSIS-DAP | 调试 |
| bus pirate / flipper(实验室) | 多协议 |
| binwalk / flashrom | 提取 |
参考
references/debug-interface-triage.md../firmware-pentest/../ot-ics/