Intro to Hardware Reversing: Finding a UART and getting a shell

Поділитися
Вставка
  • Опубліковано 21 лис 2024
  • This video is part of the Figurable project, which is geared toward people who are curious about IoT security and looking for that first bite of the apple.
    If you're interested in hardware but haven't had a chance to play with any yet, this one's for you. In this "hello world"-level reversing project we're checking out a UART (serial port) and using it to access a shell on a very soft target. If you decide to try it on your own you'll find an equipment list, walkthrough references, and some troubleshooting ideas at the link below.
    1585security.co...

КОМЕНТАРІ • 858

  • @Brandon-youtube
    @Brandon-youtube 5 років тому +1710

    The rare 'triple crown' of educators: Intelligent, good at explaining, and interesting to listen to. Props.

    • @alexa.davronov1537
      @alexa.davronov1537 4 роки тому +6

      He is also good at composing videos, isn't he?

    • @xl000
      @xl000 4 роки тому +3

      he's a good thing explainer.

    • @yellowajah
      @yellowajah 4 роки тому +2

      Subscribed. Lowering the stakes of failure by doing the opposite of saying something like "this is actually really easy, just $whats-being-covered" is an amazing thing to do

    • @w3w3w3
      @w3w3w3 3 роки тому

      hahaha yes 100%. It is hard to find people who are also good at teaching lol... this man is perfect.

    • @srinivasshinde6685
      @srinivasshinde6685 Рік тому

      I wish you were in my collage as a professor, man I would love to see you teach

  • @Grummpyro
    @Grummpyro 5 років тому +1424

    Dam I was excited to watch all the videos but I just realized that there is only 2 of em. Please make more videos I love them :)

  • @miigon9117
    @miigon9117 5 років тому +256

    The thing that’s great about his video is that he not only tells you how to do it but also tells you the thinking process, while still keeping the video short and straightforward. He’s a great educator. I hope my teachers are all like him.

  • @S54B32_
    @S54B32_ 9 місяців тому +5

    Bro, i was watching it WITHOUT SKIPPING, it was so cool and interesting!
    Sadly, there are only 2 videos on your channel.
    Make another one, it's really cool. Pure jewel.

  • @phinok.m.628
    @phinok.m.628 4 роки тому +198

    6:11 Serial ports usually default to the high level when not transmitting and pull the line low to send the start bit (0) after which it jumps up and down to representing the zeros and ones being sent. While transmitting data, on average the line is usually somewhere around half VCC since on average you'll probably be sending about as many zeros as ones. Therefore you should expect to get 3.3 V on idle around 1-2 V while transmitting. That's with a multimeter (or other slow voltmeter), on an oscilloscope you would see the actual data being sent of course.

  • @SimpleLangSolution
    @SimpleLangSolution Рік тому +1

    Doing my yearly attendance to this wonderfully made video. Please come back.

  • @okiseeyou
    @okiseeyou 5 років тому +293

    Im an electrical engineer by education and a software developer by trade, and this video is a beautiful rainbow connecting them both. Can't wait to mess around with some of this stuff

    • @MrFurriephillips
      @MrFurriephillips 5 років тому +8

      Stuyvesant Fish are you sure you aren’t a creative writer? That phraseology was magical AF!

    • @kwhp1507
      @kwhp1507 5 років тому +1

      Andrew C that sounds illegal

    • @crogersdev
      @crogersdev 5 років тому +2

      Same here. Not much good at either of them. xD

    • @kwhp1507
      @kwhp1507 5 років тому

      Andrew C just the way I read it I guess made me think of using your devices as eavesdropping or spy devices.

    • @TsarAlexTheFirst
      @TsarAlexTheFirst 4 роки тому

      Kevin Hanes haha definitely

  • @Linux.Learner
    @Linux.Learner 4 роки тому +20

    SPEECHLESS. PURE JEWEL. It takes great curiosity, comprehension and an intelligence to cram up the most difficult of the contents into as much less of a time and length as possible - with added wittyness. THIS MAN IS A TRUE GENIUS. A man holding the capability to spark the same into others. BRAVO! BRAVO! BRAVO!

  • @fiyakhue3587
    @fiyakhue3587 Рік тому +5

    This is one of the most informative videos I have ever seen in my life. So much info packed into such a brief video. This guy should be teaching IT professors how to explain things.

  • @bedroomdeejay7873
    @bedroomdeejay7873 2 роки тому +2

    This is incredible. Treasure trove for someone only with minimal time to understand something complex as hardware.

  • @phillip4833
    @phillip4833 5 років тому +53

    Hey, just checked your channel and im disappointed its not a gold mine of more content just like this. Im a senior electrical engineer going for a masters in elec/computer engineering and this type of stuff I wanna learn to do its incredibly interesting and hope to see more in the future. Great stuff honestly

  • @benjelum
    @benjelum Рік тому +9

    hands down some of the most incredibly approachable, beginner friendly, and informative content I've ever seen on the subject!
    wish you were still making videos :)

  • @RobsBodgecast
    @RobsBodgecast 5 років тому +3

    You made learning this fun and entertaining. A professor once told me that a true sign of intelligence is the ability for a human to make a complicated task sound easy and enjoyable to enable another human to learn the topic covered.

  • @kworgz
    @kworgz 2 роки тому +10

    You sir are a good teacher of the uninitiated. Being able to bridge the gap from uninitiated students to intermediate learners in fields like IT/Network Inf is crucial! Make more videos please!

  • @MarcPlanard
    @MarcPlanard Місяць тому

    Hey if you're still reading here, I've watched your video one week ago and tonight I've found and logged the full boot process of a faulty SSD so thank you! Even if I don't save it, it was fun :)

  • @ohnoitisnt
    @ohnoitisnt 5 років тому +57

    Thank you for listening to your new wave of viewers. You have a knack for videomaking and this is a hella cool topic thats massively underrepresented here on youtube. Keep this thing going!

  • @LyddonGareth
    @LyddonGareth 5 років тому +49

    I rarely comment on videos, disappointed there aren't more. Easy to follow, perfect pace. ty

  • @Pokemon4life-zs3dl
    @Pokemon4life-zs3dl Рік тому +1

    I ask this for my future kids: please make more of these videos.

  • @paul4866
    @paul4866 Рік тому +1

    Please continue to make more videos if possible for you. You stand out as one of the clearest communicators I've ever heard from in Cybersec

  • @r0flcopterz
    @r0flcopterz 4 роки тому +4

    This is a niche I cannot wait to follow along and learn with. I’ve been a software engineer for years, but never got too far into reversing hardware after my first FTE SWE job.
    Nice work; thanks!

    • @StupidusMaximusTheFirst
      @StupidusMaximusTheFirst Рік тому

      yeah, me too, I've been into software engineering, but had not bothered with electronics. I had no idea how interesting they can be, and like you said, when you combine the 2... 🙂

  • @annix493
    @annix493 2 роки тому +15

    Tony! There are only two videos here?! I refuse to believe that you have this level of skill as a teacher / producer of tutorial videos out of nowhere. Please, PLEASE, if you have some back catalogue of videos that you’ve produced for work/school?
    I am 100% certain that I speak for every sentient life form across the known and unknown universe when I say :
    TONY.
    GIVE. US. MORE!
    I don’t care if it’s a video showing us how to bend a paper clip to look like a bunny. Teach me to clean a soldering iron by licking it. Show me how you organise zip-ties. ANYTHING, TONY. PLEASE!

  • @mphomala
    @mphomala 4 роки тому

    your commentary whilst cooking must be one of the best-unseen sites, hands down!

  • @SimpleLangSolution
    @SimpleLangSolution 3 роки тому +2

    I miss you Tony. Please come back.

  • @ethanarquette3924
    @ethanarquette3924 5 років тому +1

    PLEASE PLEASE PLEASE GIVE US MORE VIDEOS! YOU ARE SUCH A NATURAL AT TEACHING! THANK YOU SO MUCH! I LEARNED MORE IN 5 MINUTES THAN I I HAVE IN THE LAST 3 MONTHS!

  • @charmio
    @charmio 5 років тому +27

    You should definitely make more of these. No doubt they're time consuming but you seem to have a knack for it and a voice people want to listen to. There's also not a too many people making content specialised in electronics on UA-cam at the moment. Given the response you've had so far I'd say It's quite a good opportunity you've got here not to mention a nice way to earn a bit of cash on the side.

  • @DukeEast
    @DukeEast 5 років тому +1

    With just Two videos two years apart... I can only give Big respect for the Gold Mines you shared..
    More Please, and just keep it up..

  • @sirtinley-knot2944
    @sirtinley-knot2944 Рік тому +2

    I learned more from 2 videos and 20 something minutes than I have done in years from other sources 👍🏻

  • @AJMansfield1
    @AJMansfield1 2 роки тому +6

    Sometimes though, there will also be a pair of 0-ohm resistors in series with the rx and tx lines that won't be populated on the production version. (They're included on very-low-volume equipment because sometimes rx and tx get mixed up at the design stage, so this is added to make it easy to switch them back with bodge wires instead of re-spinning the whole board.) If you're able to find that, you can just blob some solder over those pads to close them (or solder robe wires directly to the appropriate pads), but figuring out which unpopulated pads are the rx/tx crossover isn't always easy.

  • @zyugyzarc
    @zyugyzarc 2 роки тому

    love how he encourages you to get started even if you dont know stuff, and makes you feel comfortable doing stuff like this

  • @LaenPvP
    @LaenPvP 5 років тому +4

    Please continue to make more videos! I found your other video months ago and was sad when I saw it was your only one, then this gem magically pops up! Thank you so much!

  • @MclarenF1rocket
    @MclarenF1rocket 4 роки тому +4

    Dude - this is amazing! As an EE with a hardware background, it was really exciting to see how accessible doing stuff like this is.

  • @vasil4oBG
    @vasil4oBG 4 роки тому +1

    Hi Tony, we know it is hard to make the videos and this take time, but everyone here will admit. The tech level you work on and the simple way you explain things is a rare gift ! Please !!! don't waste it... show us how to un-brick a router.... what tools are good for what job...

  • @CurrentlyObsessively
    @CurrentlyObsessively 4 роки тому +1

    This is by far the most interesting video I have seen working with hardware/firmware. I have always wanted to see firmware but didn't know how until now.

  • @annix493
    @annix493 2 роки тому

    I’ve been an all around tinkerer/computer enthusiast my entire life, to the point that I now work as a Sysadmin and cloud engineer, plus do PC building and small electronics on the side. I watch a lot of tech UA-cam and am always picking up new projects and skills, but this is….a whole new thing.
    I mean this sincerely - this video has opened an entire new world of possibility to me. What an absolutely expertly crafted tutorial, you provide just enough context and information without getting super bogged down in the details, while still answering most of the questions I come up with before I’ve even finished thinking them. Seriously impressed with this video, and your skill as a communicator.
    I hope it didn’t have a family, because good god have I smashed that subscribe button into oblivion. I look forward to more stuff like this from you, and digging into your back catalog. Gotdamb, this is SO friggin awesome, thank you for what you do. I’m still in a bit of shock at how many possibilities this has opened up in my mind. I’m going to have to dig in to your firmware dump video as well - something I definitely thought was way outside of my skillset, but now….maybe not! Cheers! 🍻

  • @TenjinAerospace
    @TenjinAerospace Рік тому

    Wow Tony, I've watched thousands of video tutorials on various subjects, but you have a rare talent of relaying your teaching clearly and understandably , please, make more videos on this subject, I've learned more in your two videos then in 50 others with uhm/umms and no being straight up. Keep up the really great work!

  • @stevenszmek7007
    @stevenszmek7007 5 років тому +1

    I do agree with "Vik" that you should continue with this kind of videos. Both are well done and highly informative. I also really like the approach on using "stuff you got around" like the piece of a can. As a former teacher i often experienced that people a far to much afraid of breaking things when you only need to be careful and thoughtful. Well done - keep it up !!!

  • @gabrielmascarenhas1502
    @gabrielmascarenhas1502 5 років тому

    Oh my God I'm a computer engineer student from Brazil and was just looking for this kind of content to supplement my course that does not contain any reverse engineering subjects. Thank you so much.

  • @magnum_dingus
    @magnum_dingus 4 роки тому +4

    I just found your channel and I have to say, I sincerely hope you're able to put out more content more regularly in the future. Your videos are informative without being long-winded, and they're incredibly well presented. Also, the recap at the end is a nice touch. Thank you for taking the time to make these videos.

  • @jsvownzu
    @jsvownzu 5 років тому +3

    THIS GUY IS AMAZING! I was getting ready to binge watch every video this guy has but :(.
    Please make more videos. You have a gift.

  • @gazcbm
    @gazcbm 4 роки тому

    This guy got 22.3K susbscribers with just two videos!!! Thats when you know people are really finding this content useful. Looking forward to more.

  • @middleway1885
    @middleway1885 2 роки тому +1

    Sad only two videos... you are awesome for sharing these nuggets of gold... Cheers!

  • @420anonymous
    @420anonymous 5 років тому +1

    Good intro to UART for someone who has yet to do it.
    Also extra props for that multimeter!
    I inherited one, and despite being the usual chinesium, it's held up really well! I've accidentally put it through some stuff over the fuse limits and it still works. (Except for the LEDs on the battery tester. But not a terrible loss.)

  • @novafawks
    @novafawks 5 років тому +3

    Hey, you should do more stuff with this! You encouraged me to go out and do this to my own (old) router and surprisingly I got busybox access now I'm pretty confused as to what to do next! I think another tutorial for the next part would really help people. And thank you again so much for creating an interest I did not know I have had, I've always wanted to get in to hardware hacking and you were the first person that made me make the jump!

  • @jonweinraub
    @jonweinraub 6 місяців тому

    Such cool stuff. I’ve been so scared of hardware as I’ve been a software guy for so long. It’s neat to get my feet wet watching these and soon to play. Thx.

  • @geektoolkit
    @geektoolkit 4 роки тому +1

    This is really well done! Thankyou for a well thought out explanation with great choices for visuals. The FCC technique to look 'inside' of objects before owning them is brilliant. Thanks!

  • @JustMitchell
    @JustMitchell Рік тому +1

    One video every 3 years?! Come on then, it's been 3 more years, time for video #3

  • @ericborchardt5238
    @ericborchardt5238 5 років тому +9

    This was an awesome tutorial. I was disappointed to see this was only your second video in 2 years, I really hope you make more like this soon. I'm subscribing!

  • @mrkiky
    @mrkiky 4 роки тому +1

    It's insane how well the video is made. No wonder he has 13k subscribers with only 2 videos on such an obscure topic. Too bad this isn't a channel with hundreds of videos, it would probably have millions of subs.

  • @firstmkb
    @firstmkb 5 років тому +1

    Tony, thanks for posting this - I enjoyed it very much. I'm not an engineer, but I've fiddled around with hardware since the 70's. I don't think there was any individual piece of information you shared that I didn't know, but you put it together so well it was inspiring. Please keep making these, and let me know if you want some free hardware to hack on - nothing amazing, but you won't beat the price of free "Basement Surplus"!

  • @gschaaf713
    @gschaaf713 4 роки тому

    really enjoy your simplified yet intelligent explanations of things. this is a very rare skill to have, perhaps even rarer than your hardware hacking skills.

  • @night4wl959
    @night4wl959 4 роки тому

    I have a little bit of experience in reverse engineering because of my job, but my experience is very procedural without raw knowledge, so I consider myself as a complete beginner at this. Add to this the fact that I have AD disorder. Well yet, I followed everything you said without any difficulty, my focus stayed there for the whole 10 minutes, which means it was superlatively lucid, interesting, and everything was balanced to show the "whole picture" without any confusion. You are very good at this, I'd pay good money to be forged by someone like you.

  • @robb233
    @robb233 4 роки тому

    14.5k subs and 2 videos! There's a trend worth watching. Loved the video!

  • @adaelton
    @adaelton Рік тому

    wow you are an artist in talking man, I am amazed. just found your channel

  • @GazJClayton
    @GazJClayton 5 років тому +5

    Loved this, surprised you only had 2 videos, it was so well done. Looking forward to more if you get the time to make them.

  • @RmFrZQ
    @RmFrZQ 2 роки тому

    Part about FCC was an eye opener for me. Non US residents couldn't learn about that in any other way.

  • @liqwiz
    @liqwiz 2 роки тому

    "we're not disarming a nuke", combined with some hours watched on louis rossman and the current ongoings in eastern Europe,
    and the algorithm does its work and here we are.
    great video, thanks :)

  • @michaellong8812
    @michaellong8812 3 роки тому

    This is an excellent video Tony; your tip about FCC filing info is an outstanding trove of information for hardware hackers. Thanks for the video!

  • @MikeCampo
    @MikeCampo 4 роки тому +2

    You're a really good teacher! You clearly love this stuff and that makes learning about it even more enjoyable on my end. Please make more hardware vids!

  • @noname-gp6hk
    @noname-gp6hk 2 роки тому

    Holy shit man, this one video just tied together a bunch of things that I already knew but didn't know applied to this. You just opened a whole new world of things for me to try. I never thought about all these cheapy electronic devices having open serial consoles just sitting there inside...

  • @gmelodie
    @gmelodie Рік тому +1

    This is now one of my favorite security videos. Amazing really!

  • @leesmith1609
    @leesmith1609 5 років тому +1

    Fantastic videos!! Please make some more, I would like to see working directly with the chip.

  • @frankdurso9671
    @frankdurso9671 5 років тому +22

    This was really good. I'd really love see more content like this!

  • @papp215
    @papp215 2 роки тому +1

    only 2 vids 😭😭😭have same energy as buildzoid could watch 24/7

  • @adriftbubbles6817
    @adriftbubbles6817 3 роки тому

    thank you! this was super fun to watch and a real "goldmine" of knowledge. i've wasted hours searching online about the basics of HW reversing ( i want to tweak some old gadgets at home) but nothing useful popped up until youtube finallly suggested your clips. finally i understand the basic knowledge i need to dive into, before trying to start my project

  • @johnibambohni
    @johnibambohni 2 роки тому +2

    I love this video! It's such an awesome, beginner friendly Introductory video - with loads of helpful background information! Thank you a lot!! 🙂

  • @yellowledbutter
    @yellowledbutter 5 років тому

    I'll probably never do this as I don't have the time, the need or the skills to do anything once I'm in! Fascinating to watch though - hope this guy keeps making videos about reversing engineering things :)

  • @nmnxe
    @nmnxe Рік тому +1

    Great! I actually do the same guessing for baud rates when I connect the device with my RPi. It’s a fantastic process ❤

  • @davedugan3987
    @davedugan3987 Рік тому

    This just popped up in my feed, I wanted to let you know I enjoyed it. Hope you make more videos!

  • @ChrispyChris3
    @ChrispyChris3 2 роки тому

    Man it's a bummer you only have the two videos, these are great!

  • @jjenko6366
    @jjenko6366 4 роки тому

    Tony has the perfect teacher voice and teaching words to use.please do videos on others stuff like Rasperry Pies.

  • @ErikJohanssen-px7gg
    @ErikJohanssen-px7gg Рік тому

    Glad I found this. It shows that I am not the only one who keeps a bag of cut up beer cans. It can really be a versatile tool, honest!

  • @electronicsworkshawp
    @electronicsworkshawp 4 роки тому

    Great video! You are knowledgeable and very well spoken. I just wanted to let you know, tho, that UARTs are 'active low' so when the volts go to 0 that is actually when there is traffic, not the other way around.

  • @iw5747
    @iw5747 Рік тому +5

    Imagine dropping 2 banger videos, 2 years apart, and then disappearing for 4 years lmao

  • @yakumo885
    @yakumo885 5 років тому

    Your videos are so in depth, yet to the point.

  • @JasonBassettThurrock
    @JasonBassettThurrock 5 років тому

    Simple and easy to follow video, inspires confidence in tinkering with such devices. Keep 'em coming!

  • @i3130002
    @i3130002 5 років тому +111

    I should thank you for the FCC thing you thought us. Thanks

    • @trevorgray3681
      @trevorgray3681 5 років тому +2

      yea i've been having fun looking at all the fcc documents for everything in the house

    • @DavidHanniganJr
      @DavidHanniganJr 5 років тому

      They thought you? Please explain. What means this expression?

    • @goahnary
      @goahnary 5 років тому +5

      @@DavidHanniganJr I think he meant to put "taught".

    • @i3130002
      @i3130002 4 роки тому +1

      @@DavidHanniganJr taught

  • @GTS00000
    @GTS00000 5 років тому +4

    Just would like to echo a sentiment that has been expressed in the comments below. Please, do produce more tutorials!

  • @thenoble1
    @thenoble1 5 років тому +280

    Please don’t make us wait another two years lol

    • @goku445
      @goku445 5 років тому +3

      I was about to say.

    • @goku445
      @goku445 3 роки тому +1

      @Filip Carlsson lmao

    • @light0342
      @light0342 2 роки тому +1

      Well...

    • @kwastek
      @kwastek 9 місяців тому +1

      Well...

  • @odethebear
    @odethebear 2 роки тому

    I'd like to swear - the good way. F that was cool! Maybe I'm easily impressed but that was very impressive.What is not maybe but a fact is that this chap explains everything casually well, easy to follow.

  • @mauricionarvel8945
    @mauricionarvel8945 5 років тому +3

    I literally watched your other video like a week ago, then I went to see if u had more and was bummed out that you only had one and was from 2 years ago. Now this one got posted :D

  • @DRAGUNOV1902
    @DRAGUNOV1902 4 роки тому

    I love this

  • @nickbolhuis7467
    @nickbolhuis7467 4 роки тому +1

    I wonder how many FTDIs were purchased because of this video.
    Thanks for the great production Tony :)

  • @sabofx
    @sabofx 5 років тому

    Thanx! Great tutorial!
    May i suggest doing a video to demonstrate how to use this technique to find hidden (administrative or test) accounts on some devices? That would really be grand!

  • @GoneDee
    @GoneDee Рік тому

    I like your attitude throughout the the whole video, thanks for the content!

  • @aflynch
    @aflynch 5 років тому +5

    Wow this really awesome! There are so many kinds of hardware I have wanted to get a look at, this kind just opens the door up enough that I feel I could give it a shot. Thanks for the video man!

  • @DrakeLuce
    @DrakeLuce 5 років тому +1

    Fantastic video! Hope to see more!

  • @WikiPeoples
    @WikiPeoples 5 років тому +4

    I was super excited to watch more videos, but then I saw there's only 2! Bummer! Please make more videos. You actually have a talent at explaining + talking through things. You're quite good at it, makes for an enjoyable video that is also packed with good info. I'm subbed!

  • @avramitra
    @avramitra 5 років тому +1

    Man, please don't disappear again. We need you..

  • @kingdavid_p
    @kingdavid_p 3 роки тому

    Woow. First of all great videos. Second, how does one get almost 30k subscribers off two videos? Guess that goes to show how great they are. Years later and I'm still hoping you make more.

  • @richardhoff5255
    @richardhoff5255 4 роки тому +1

    Very nice. I have the same camera at home but never opened it up as it's serving surveillance duty. I did however root a Dell out of band soc via debug uart to trace down some smi interrupts which were stealing 800ms of cpu time every 21 hours like clockwork.

  • @EUnit111986
    @EUnit111986 4 роки тому

    My wife and I had just bought 2 additional Motorola baby cameras with pan and tilt. Parent unit died not a month later and as industries has it, the cameras are not compatible with the slightly newer parent unit. This video gave me a Flippin amazing idea what to do with those cameras.

  • @Asniper
    @Asniper 4 роки тому +1

    Would love to see more videos on reversing

  • @MCircuits
    @MCircuits 5 років тому

    Damn, that is the power of LINUX to which I don't really use. Very interesting. How I'd wish during my younger years, was able to really focus on it. Great tutorial.

  • @reydus6651
    @reydus6651 4 роки тому

    You have got a very charismatic way of explaining things. Awesome video, thanks a lot :)

  • @bencesarosi7718
    @bencesarosi7718 5 років тому +1

    It's a mystery you haven't uploaded anything for two years. Another brilliant presentation. Keep 'em coming!

  • @0xbitbybit
    @0xbitbybit 5 років тому +1

    Awesome, more videos like this please! Clear, and easy to follow for us beginners!

  • @maplifiers
    @maplifiers 2 роки тому +1

    Really wish you had stuck with this. What an awesome video.

  • @antospin4004
    @antospin4004 Рік тому +9

    My bro released one of the most cool videos out there and just vanished😭

  • @cameronmarsden7206
    @cameronmarsden7206 Рік тому

    We want more!
    Hope you're alive and well 🙏

  • @JeffreyGroves
    @JeffreyGroves 5 років тому

    Learned something new about the screen utility today. I didn't know that it had serial terminal capabilities. Good to know! I'd have soldered the pins in just to make things a little less fiddly.