Adventures of Hardware Hacking

One of my presentations in 2021.

Transcript

1. Adventures of Hardware Hacking Hrishikesh Somchatwar
2. About me Hrishikesh Somchatwar (Twitter) @StorytelnHacker Masters Student at Eurecom, France Speaker/Trainer at various security cons such as Bsides Delhi 2019, c0c0n 2019, Bsides Ahmedabad 2021, HackFest Canada 2021, Defcamp Romania 2019,2023 and a bunch of others Hardware and Radio Hacking Enthusiast TheStorytellingHacker on Spotify, Apple Podcasts, Google Podcasts etc (check my Instagram) and Website.
3. Disclaimer: We are building a HARDWARE hacking lab here so no BLE or any wireless stuff.
4. First things first Tools tools tools Teardowns, teardowns and … Obviously bricking up/ breaking hardware And some root shells.
5. AGENDA • Affordable (Low Cost) Hardware Hacking tools. • How to use these tools. • Basic Hardware Attacks. • Communication Protocols. (Abstract Explanation) • My Failures while hacking hardware with cheap tools. • Total cost to build your own Hardware Lab. (>46$) • Hardware Recon 101.
6. PROBLEM Hacking things is not hard, but finding the right tools is!
7. Solution? Build your own hardware hacking lab!
8. Tools - Screwdriver Kit • Magnetic Drivers Rs 197
9. Multimeter • Conductivity Tests 197+337 Rs337
10. Isopropyl alcohol • For soldering • 120rs 120+337+197= Rs654
11. Soldering Iron • For soldering • 100rs 120+337+197+100= 754rs
12. Header Pins • UART • JTAG soldering for root shells • 100rs +100 Rs 854
13. Soldering Flux Rs 300 Rs (300+854)
14. Soldering wire Rs 161 Rs 1154+161= Rs 1315
15. Soldering Iron Kit Rs 229 Rs 1315+229= Rs 1544
16. USB to UART USB to TTL connector Rs 1898 Img Src: https://paradisetronic.com/media/images/org/CP2102_Cable_03.jpg
17. JTAG- Arduino Use Arduino as a JTAG adapter Rs 1898+475= 2373rs Img Src:https://cdn.sparkfun.com/assets/c/a/f/b/7/529e2d18757b7f196b8b4567.jpg https://electronics.stackexchange.com/questions/9258/is-it-possible-to-make-a -jtag-interface-with-an-arduino
18. SWD connectors- stm32 Rs2375+412=2785rs
19. Breadboards For basic electronics Circuits Rs 70+ 2785= rs 2855 https://a.pololu-files.com/picture/0J10450.1200.jpg?5982ae89594735acb521388debe 5512f
20. Firmware tools- CH341a Programmer Rs285+ 2855= 3140rs Img SRC: https://images-na.ssl-images-amazon.com/images/I/61F2JdOLLtL._AC_SL1001_. jpg
21. Ardunio UNO Microcontroller • Opensourced Hardware • 5v current 3140+454= rs 3594 Img Src: https://ae01.alicdn.com/kf/HTB1B0HInXuWBuNjSspnq6x1NVXas.jpg
22. TOTAL MONEY 3694Rs=46$ You Can do maximum Hardware Hacking attacks with them!
23. STM32F4DISCOVERY Microcontroller • Opensourced Hardware (optional) • 5v current Img Src: https://www.st.com/bin/ecommerce/api/image.PF252419.en.feature-description- include-personalized-no-cpn-large.jpg
24. Jumper wires Handy Rs 3594+ 100= 3694rs https://media.rs-online.com/t_large/F7916450-01.jpg
25. Hardware Attacks- UART • Universal Asynchronous Receive transmit • Visual inspection • Continuity test with multimeter • Soldering • Connections with rs232 OR USB TTL • And root shell with minicom • $root (admin:admin) mostly Img Src: https://cdn.mikroe.com/blog/2016/09/uart_bus.jpg
26. Hardware Attacks- JTAG • Joint Test Action Group (JTAG) • Visual Inspection • JTAG pinouts (8 pins) • Connectors with jumpers • Soldering with Flux • Header pins • $root with openocd or UrJTAG
27. Hardware Attacks- JTAG • JTAG Pinouts • 10 Pins(generally) • Make the connections
28. Hardware Attacks - SWD • Serial Wire Debug /SWD
29. Failures in Hardware Teardowns
30. Failures • Burned UART on router • Missing UART in mouse • Damaged RTL-SDR • Damaged Alfa CArd • Failed to build EMF detector for sensor based attacks
31. Hardware Recon • Finding pinouts with multimeter. • Continuity test. • Digital Microscope. • IC identification. • Datasheets. • Firmware Dumping.
32. Q/A (Thanks!)