Hardware Hacking With Python – /dev/ttyS0

By | | , , ,
Comments Off on Hardware Hacking With Python – /dev/ttyS0

In preparation for our Embedded Device Exploitation classes, I’ve just released my latest project, the Gumbi board: New Gumbi boards, fresh off the press The Gumbi board provides a flexible USB interface to the real world in the form of 64 digital I/O pins – all controllable from the comfort… Continue reading →

Class Registration Now Open – /dev/ttyS0

By | |
Comments Off on Class Registration Now Open – /dev/ttyS0

We just opened registration for our first embedded exploitation class on June 7th & 8th, 2012! In addition to training attendees will receive plenty of goodies to take home, including a customized virtual machine, hardware hacking tools, and more. More details are available on the registration page. See you there!

Writing a bFLT Loader for IDA – /dev/ttyS0

By | | ,
Comments Off on Writing a bFLT Loader for IDA – /dev/ttyS0

I was recently working on some uClinux-based devices and needed to disassemble some of the binaries in the firmware. Unfortunately, IDA doesn’t have a loader for the bFLT file format used by uClinux: No bFLT Loader Fortunately, I was able to find a bFLT loader over at rockbox.org. Unfortunately this… Continue reading →

School is in Session! – /dev/ttyS0

By | |
Comments Off on School is in Session! – /dev/ttyS0

As some of you are aware, we’ve been working on creating an embedded systems hacking course. We’ve been busy lately putting together a few invitation-only classes and have gotten some great feedback from our students. The two day beginner’s course is designed to introduce students to hardware and firmware analysis,… Continue reading →

Emulating NVRAM in Qemu – /dev/ttyS0

By | | , ,
Comments Off on Emulating NVRAM in Qemu – /dev/ttyS0

Being able to emulate embedded applications in Qemu is incredibly useful, but not without pitfalls. Probably the most common issue that I’ve run into are binaries that try to read configuration data from NVRAM; since the binary is running in Qemu and not on the target device, there is obviously… Continue reading →