Back to Details

hardware-security

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Hardware / Embedded Interface Security

Hardware / Embedded Interface Security

ACTION REQUIRED（读完后立刻执行）

ACTION REQUIRED (Execute Immediately After Reading)

  1. NOW
    : 确认物理接触授权与设备归属
  2. NOW
    : ESD/电源安全；默认只读探测
  3. NEXT
    : 联合 firmware-pentest 做镜像分析
  4. ACT
    : 外壳与调试接口识别 → consoles → 提取
  1. NOW
    : Confirm physical access authorization and device ownership
  2. NOW
    : ESD/Power Supply Safety; Default to Read-Only Probing
  3. NEXT
    : Collaborate with firmware-pentest for image analysis
  4. ACT
    : Enclosure and Debug Interface Identification → Consoles → Extraction

适用场景

Application Scenarios

  • UART / JTAG / SWD 调试口发现
  • 启动日志、root shell、引导打断
  • 配合拆机提取 Flash
  • 安全启动/加密 Flash 的可行性评估（非破坏性优先）
  • UART/JTAG/SWD Debug Port Discovery
  • Boot Logs, Root Shell, Boot Interruption
  • Flash Extraction with Device Teardown
  • Feasibility Assessment of Secure Boot/Encrypted Flash (Non-Destructive Priority)

工作流

Workflow

text
□ 拆解授权设备；拍照标注测试点
□ 万用表找 GND/VCC/TX/RX；逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志；记录波特率
□ JTAG：枚举 IDCODE；评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra
text
□ Disassemble authorized device; Take photos and mark test points
□ Use multimeter to locate GND/VCC/TX/RX; Logic levels 1.8/3.3/5V
□ USB-TTL read-only logging; Record baud rate
□ JTAG: Enumerate IDCODE; Evaluate if locked
□ Extract image → Hand over to firmware-pentest / ghidra

工具链

Toolchain

工具用途
USB-TTL / logic analyzerUART
J-Link / CMSIS-DAP调试
bus pirate / flipper（实验室）多协议
binwalk / flashrom提取
ToolPurpose
USB-TTL / logic analyzerUART
J-Link / CMSIS-DAPDebugging
bus pirate / flipper (Lab)Multi-protocol
binwalk / flashromExtraction

参考

References

  • references/debug-interface-triage.md
  • ../firmware-pentest/
    ../ot-ics/
  • references/debug-interface-triage.md
  • ../firmware-pentest/
    ../ot-ics/

路由上下文

Routing Context

上游: MASTER R34
MUST NOT: 未授权拆机/损坏他人设备
Upstream: MASTER R34
MUST NOT: Unauthorized teardown/damage to others' devices

任务完成自检

Task Completion Self-Check

  • 是否记录接口电平与引脚图？
  • 镜像是否哈希保全？
  • Checklist？
  • Have interface levels and pin diagrams been recorded?
  • Has the image been hashed and preserved?
  • Checklist completed?