Intro to hardware security: UART access and SPI firmware extraction

Поділитися
Вставка
  • Опубліковано 25 лис 2024

КОМЕНТАРІ • 121

  • @nikolatesla9917
    @nikolatesla9917 4 роки тому +14

    just as a suggestion: first introduce the devices in video and mention them by typing their name beside them in the first scene of video,i enjoyed it ThanX

  • @bradkaral1188
    @bradkaral1188 2 роки тому +5

    Very well done. Clearly explained, step-by-step.

  • @hypnos4754
    @hypnos4754 6 місяців тому

    Great video. This is a process that I’ve never done myself, and I always wondered what it’s like. The explanation of the required tools (and why they’re needed) is really good as well.

  • @Eptapus
    @Eptapus 9 місяців тому +1

    It would be nice to have a video where you edit the firmware and you flash it back to the device!

  • @proyas21
    @proyas21 3 місяці тому

    loved your video. I watched the whole video. Funny thing is i actually had bought a usb to serial adapter a while ago. I had no idea what to do with. Now I know what kind of site quiz I can go on. 😁

  • @vediam
    @vediam Рік тому

    Merhaba, izlediğim en faydalı video bu oldu diyebilirim. Detaylı ve dolu dolu içerikle hazırladığınız bu video için Allah sizden razı olsun. Çok çok çok sağolun, elinize sağlık.

  • @soroush92
    @soroush92 Рік тому +2

    Thx Mahdi jaan. Would u please upload more videos like this? Amazing bro.

  • @anantoslab
    @anantoslab Рік тому

    Need more details video about this topic. You are great ❤. Love from Bangladesh.

  • @stevecross9159
    @stevecross9159 3 роки тому

    From the UK. Hi
    Mehdi good introduction I need to go over the video again but it's a good start!!

  • @TxMxMxMxM
    @TxMxMxMxM 5 місяців тому

    Wonderful video. Hopefully you will have more of this.
    Cheers mate

  • @Lin-yo3og
    @Lin-yo3og 3 роки тому +2

    So grateful, it's a good tutoring video with so much detailed explanation.

  • @abdullahnadeem1823
    @abdullahnadeem1823 2 роки тому +1

    wow, this is the exact router I have. I'm actually surprised it works so well for such a cheap price

  • @brentself
    @brentself Рік тому

    Great information in this video. Louder audio would be great, as I struggled to hear everything when the volume was set to maximum value.

  • @dzfinch5008
    @dzfinch5008 Рік тому +1

    Thank you

  • @bobmcbob4399
    @bobmcbob4399 Рік тому +1

    13:29 "3: System Boot system code via Flash" - this is option 3 in the uboot boot menu. It is possible to send a different option via serial keyboard input - like boot to root shell. But this may not be always possible. But in this case, you get to a shell from the get-go.

  • @parsbitex
    @parsbitex Рік тому

    it was so good , grateful for this tutorial

  • @squirre17
    @squirre17 2 роки тому

    Thank you very much😘. Looking forward to more practice hank-on work video.

  • @riadhch5643
    @riadhch5643 3 роки тому +1

    Thank you Mr Mehdi so helpful

  • @parag9999mun
    @parag9999mun 2 роки тому +1

    It was alot helpfull.
    Thank you man

  • @oulachoulach4883
    @oulachoulach4883 2 роки тому

    BROTHER, YOU ARE THE BEST!!! You oooh really helped me!! THANK YOU VERY

  • @AbhishekMishra-bq9ox
    @AbhishekMishra-bq9ox 3 роки тому +2

    Plz make more thank u for making this type video

    • @MehdiHacks
      @MehdiHacks  3 роки тому +1

      I will try my best. 👍 Please subscribe to get notified of my upcoming videos

    • @AbhishekMishra-bq9ox
      @AbhishekMishra-bq9ox 3 роки тому

      I already subscribed you

  • @shivamhw
    @shivamhw 2 роки тому

    bahut badhiya dost.. great video,

  • @Dumbc0mment
    @Dumbc0mment 4 роки тому +2

    Thx you Mehdi, I learned a lot

  • @n.w.aicecube5713
    @n.w.aicecube5713 2 роки тому +1

    Very well explained

  • @tamiriiiii
    @tamiriiiii 2 роки тому +1

    using UART access, if the device have telnet, but disabled, can we enable it !

  • @qzorn4440
    @qzorn4440 4 роки тому

    Gee, this is very interesting and great way for troubleshooting a lot devices... thanks...:)

  • @bigbooduh
    @bigbooduh 2 роки тому

    Legend Mehdi! Thanks for this

  • @조영민-v8r2u
    @조영민-v8r2u 2 роки тому

    impressive from Republic of Korea.

  • @SaeedBeigiRizi
    @SaeedBeigiRizi 4 роки тому

    that was a complete tutorial. thanks in advanced

  • @rohitdeswal1224
    @rohitdeswal1224 3 роки тому +1

    Great video . Can you give other vulnerable devices list to practice

  • @emreru5687
    @emreru5687 4 роки тому

    Thanks you (خیلی ممنون آقا مهدی)

  • @johndavid8303
    @johndavid8303 Рік тому

    Hello, to to extract firmware from MCU with builtin flash memory such as Atmel ATSAMD21J?

  • @phantom700X
    @phantom700X 10 місяців тому

    Thank you for information. I have LPC1778 I i tried to read with Flash magic . And i get massage, security violation in device. What i can do ?! I Wann get the firmware.

  • @RafaelSousa-pj1ok
    @RafaelSousa-pj1ok 4 роки тому +1

    Great video! Thanks a lot!

    • @drewsam6387
      @drewsam6387 3 роки тому

      dunno if anyone cares but if you guys are bored like me during the covid times then you can watch all of the latest movies and series on instaflixxer. Been streaming with my girlfriend recently =)

    • @stevensamuel1968
      @stevensamuel1968 3 роки тому

      @Drew Sam Definitely, have been watching on Instaflixxer for since november myself :D

  • @HawK40x
    @HawK40x 5 місяців тому

    Can you repack the bin again by making some changes

  • @qusaykambal6903
    @qusaykambal6903 2 роки тому

    Hi
    How can i reverse engineering dump any eeprom for example s2943 i try ghidra but iam not get any thing

  • @alwill1016
    @alwill1016 Рік тому

    Hey guys by any chance does anyone know how I can pipe all the output from the terminal into a txt file on Linux. I've tried tee, >, >>, and script and still have yet to get the terminal output into a txt file.

  • @barryu4762
    @barryu4762 9 місяців тому

    hello, is it possible to flash firmware in UART mode?

  • @JorgeLuis-hy8im
    @JorgeLuis-hy8im 2 роки тому

    PL2303 has the right voltage? I meaning 3.3 by default.
    I get confused about the right voltage, do you have another video about the voltage?
    If you test the PL2303 pins, what voltage do you get?

  • @abdoubenadada7310
    @abdoubenadada7310 2 роки тому

    can we extract the firmware of tplink td-w8961n v3 ?

  • @nilmango675
    @nilmango675 4 роки тому +1

    thanks a lot.
    how we can extract portable wireless modems firmware? (4G or TD/LTE)
    for example modems which is locked. i mean they restricted to work only with specific SIM Cards.

    • @MehdiHacks
      @MehdiHacks  4 роки тому +2

      Well it depends on the modem. I don't know about your modem, but I have seen some that save all the required info on a config file. If you access it via UART, you can edit the file and bypass the limitations.

  • @jayachandra677
    @jayachandra677 3 роки тому +1

    Great video, Mr electroboom

  • @sebastianseng5278
    @sebastianseng5278 2 роки тому

    what if i wanna save a project but i use free trial? can soone help

  • @abdelazizsaad7676
    @abdelazizsaad7676 3 роки тому

    This is great, thanks a lot.

  • @Dadadu16
    @Dadadu16 7 місяців тому

    How do you identify which pin hole is for gnd, rx, tx, when there's nothing write on the pcb?

    • @MehdiHacks
      @MehdiHacks  7 місяців тому

      Usually ground is the easiest to identify (simply using a multimeter's continuity mode, with other known grounds). RX and TX can be identified using multiple methods: one is to simply try (there's no harm in using them in the wrong order), second is to use a logic analyzer to "see" what's happening on the wire. I think some UART tools also can auto-discover it. Usually one has lots of data/activity going on, while the other is simply quiet, which means even a voltmeter can be used to identify RX (using fluctuations in the voltage)

  • @bucketaos8066
    @bucketaos8066 Рік тому

    I am undable to enter into the shell, it keeps saying cmd is “echo “” > /etc/TZ”

  • @TouChA0
    @TouChA0 2 роки тому

    can i cahnge the ip address of this retour using this method?

  • @miftahulfaris4400
    @miftahulfaris4400 2 роки тому

    can CH341 also be used for UART?

  • @chachouamohamed8557
    @chachouamohamed8557 Рік тому

    hallo bro can help me for my TPLINK re 450 v3 ..it briked ... thanks bro video

  • @amkoshesh6205
    @amkoshesh6205 2 роки тому

    Flash file of other modems
    From which site should I get it?
    Free . Safe file .

  • @linux-tut
    @linux-tut 2 роки тому +1

    Dump or Extract U-Boot from the running board.
    OR
    Dump memory to a file from the U-Boot console using the Memory Display command.
    This will be helpful in debugging in the situation like you have a board with U-Boot running and don't have the same version of U-Boot binary and want to test on another board.
    ua-cam.com/video/yDFMcBNGW3U/v-deo.html

  • @Pinwiru
    @Pinwiru 2 роки тому

    pues el firmware de tp-link se puede bajar sin compilar

  • @neettalk
    @neettalk 2 роки тому

    Hi, I used 115200 Baud rate for UART, which is connected to the IP camera board, but as soon as I give the power, the putty window displays garbage values, need your inputs/suggestion

    • @JordanPlayz158
      @JordanPlayz158 Рік тому +1

      Sounds like you may have the baud rate wrong, there are not many standard baud rates so it should not take too long to bruteforce the right one.

    • @ClickClack_Bam
      @ClickClack_Bam Рік тому +1

      ​@@JordanPlayz158I second this for anybody reading this for future reference.
      I'm new at this but have seen that the wrong baudrate will give you garbage.

  • @nachiketathakur697
    @nachiketathakur697 2 роки тому

    Great tutorial, thanks for sharing... just a question... I do not have the UART pins on the PCB. What options do I have?

    • @MehdiHacks
      @MehdiHacks  2 роки тому

      Finding them is not very difficult. Do you have any pin headers on the board at all?

  • @mjyanimations1062
    @mjyanimations1062 4 роки тому

    Pretty sure eeprom isn't even a ROM. Its and can be erased and flashed many times. Data can be modified by the device itself, so its also used in microcontrollers to store data after power off.

  • @parvazno
    @parvazno Рік тому

    آفرین مهندس

  • @manassehabraham5589
    @manassehabraham5589 3 роки тому +1

    Nice video.....u sound like electroboom

  • @eadge1999
    @eadge1999 Рік тому +3

    You talk for long time out side the core of the address

  • @manasafarmandspringresort2577
    @manasafarmandspringresort2577 3 роки тому

    Hi sir do you have dump file ac23 english ver?

  • @perinoveriza1658
    @perinoveriza1658 4 роки тому

    More content about this

  • @carlosdevelop9296
    @carlosdevelop9296 3 роки тому

    Is it possible to repair mi stick tv software with this method?

    • @MehdiHacks
      @MehdiHacks  3 роки тому

      Hmmm. What do you mean? You can (re)write the firmware using SPI, if that's what you meant.

  • @Unknown2023_1
    @Unknown2023_1 4 роки тому

    سلام ضمن تشکر از آموزش و اطلاعاتی که منتشر کردید . من بخوام با ماژول uart از یک مودم 4g دامپ تهیه کنم و سپس این دامپ و برگردونم رو یک مودم دیگه از همین مدل آیا امکانش هست ؟ یا نیاز به پروگرامر مثل اونی که شما تو فیلم استفاده کردید دارم ؟ با تشکر

    • @MehdiHacks
      @MehdiHacks  4 роки тому +1

      سلام. بسته به مدل فلش ممکنه بشه با UART روش بازنویسی کرد ولی سرراست ترین روش استفاده از پروگرمر هست.

  • @aminamiri8604
    @aminamiri8604 3 роки тому

    plz upload more videos

  • @Ali-gj4du
    @Ali-gj4du 4 роки тому

    I liked it :)

  • @rohitdeswal1224
    @rohitdeswal1224 3 роки тому

    Plz make more videos

  • @gwyn7727
    @gwyn7727 4 роки тому

    Is there a universal usb thing that supports jtag,spi,uart,rs232,i2c?

    • @MehdiHacks
      @MehdiHacks  4 роки тому +1

      Yes. Bus pirate, Hydrabus, Shikra, Tigard, ...

  • @hackwithprogramming7849
    @hackwithprogramming7849 2 роки тому

    Is python installed on that WiFi router terminal??? Plz anyone reply 🥺🥺🥺🥺🥺🥺🥺🥺🥺😭😭😭😭😭😭😭plz ?

    • @MehdiHacks
      @MehdiHacks  2 роки тому

      To my knowledge, no.

    • @hackwithprogramming7849
      @hackwithprogramming7849 2 роки тому

      @@MehdiHacks ok than tell me one thing which default programming language is there in that linux shell there. like in windows we have .VBS as default....... Except bash script

  • @seupedro9924
    @seupedro9924 4 роки тому

    why not use V pin in UART?

    • @JordanPlayz158
      @JordanPlayz158 Рік тому

      I could be wrong but the VCC pin from UART is only needed if the device doesn't have its own means of providing power.

  • @toncho1986
    @toncho1986 4 роки тому

    Nice video, pal!!
    I have this question rolling in my mind: why is it so important to work on the firmware?Can we "attack" another thing?

    • @MehdiHacks
      @MehdiHacks  4 роки тому +4

      Because the firmware contains the actual code, and it might be possible to find remote vulnerabilities and therefore attack other similar devices remotely. Another thing that you can try locally, is hardware fault injection (including voltage glitching, electromagnetic fault injection, etc)

    • @toncho1986
      @toncho1986 4 роки тому

      @@MehdiHacks Thank you for replying!. Dude, how can i contact you?. I need to ask you some more questions about UART and firmware! :)

    • @MehdiHacks
      @MehdiHacks  4 роки тому

      @@toncho1986 You're welcome. You can reach me via Twitter: twitter.com/mehdi0x61

    • @toncho1986
      @toncho1986 4 роки тому

      @@MehdiHacks Dude, have you got any email?. I do not use Twitter :/

    • @MehdiHacks
      @MehdiHacks  4 роки тому

      @@toncho1986 DF2HF[at sign]pm.me

  • @youtubbiz
    @youtubbiz Рік тому

    اینتر کیبوردت سالمه هنوز؟

  • @fjfkfkdkdkdk
    @fjfkfkdkdkdk 9 місяців тому

    Why not read the firmware via UART?

  • @bororobo3805
    @bororobo3805 2 роки тому

    We found Electroboom's younger brother 🤣

  • @tocube1
    @tocube1 3 роки тому

    آقا مهدی توییتر نداری فالو کنیم؟ توی about چنل چیزی نبود

    • @MehdiHacks
      @MehdiHacks  3 роки тому

      سلام. انتهای متن ویدیو لینک توییترم رو گذاشتم (mehdi0x61)

    • @tocube1
      @tocube1 3 роки тому

      @@MehdiHacks اع چه جالب. فالوتون داشتم از قبل. متشکرم

  • @tocube1
    @tocube1 4 роки тому

    Cute ^-^

  • @JakeBromie
    @JakeBromie 5 місяців тому

    my house almost burned down

  • @guyonadino
    @guyonadino 7 місяців тому +1

    IS THIS ELECTROBOOM ??? whats bro doing here

    • @MehdiHacks
      @MehdiHacks  7 місяців тому +1

      Haha. My name is Mehdi and I sound like him, but I'm not ElectroBOOM

    • @guyonadino
      @guyonadino 7 місяців тому +1

      @@MehdiHacks but youre still sus!! and also keep uploading vids

    • @d4rkness829
      @d4rkness829 3 місяці тому

      LOL i was thinking the same thing

  • @Jkjk-pu2vt
    @Jkjk-pu2vt 4 місяці тому

    عالی ولی حیف ادامه نمیدی چنلتو

  • @kattoOrSmthxD
    @kattoOrSmthxD 2 роки тому

    bro sounds like electrobooooooooooom

  • @arashlabaf2172
    @arashlabaf2172 4 роки тому

    خب ویدئو فارسی هم بذار⁦☹️⁩

  • @rjbrake
    @rjbrake Рік тому

    derka derka

  • @Hii_Lexi_4
    @Hii_Lexi_4 Рік тому

    SIMlock code of Huawei B5318-42