Mehdi A.
Mehdi A.
  • Видео 1
  • Просмотров 69 500
Intro to hardware security: UART access and SPI firmware extraction
This is an introduction to hardware security for beginners. I will show you how to connect to the Linux terminal of a TP-Link wireless router using UART, and also how to dump its firmware using a SPI programmer. My aim has been to use the most affordable and accessible tools, so everyone can start without breaking the bank.
As promised in the video, here’s the list of tools that I used or mentioned:
The target: www.tp-link.com/us/home-networking/wifi-router/tl-wr841n/
The advanced UART adapter that I mentioned: www.crowdsupply.com/pylo/muart
Programmer I used to dump the firmware: github.com/boseji/CH341-Store
Software I used to dump the firmware: flashrom.org/Flashrom
Software used to extra...
Просмотров: 69 554

Видео

Комментарии

  • @proyas21
    @proyas21 3 месяца назад

    loved your video. I watched the whole video. Funny thing is i actually had bought a usb to serial adapter a while ago. I had no idea what to do with. Now I know what kind of site quiz I can go on. 😁

  • @Jkjk-pu2vt
    @Jkjk-pu2vt 4 месяца назад

    عالی ولی حیف ادامه نمیدی چنلتو

  • @TxMxMxMxM
    @TxMxMxMxM 5 месяцев назад

    Wonderful video. Hopefully you will have more of this. Cheers mate

  • @HawK40x
    @HawK40x 5 месяцев назад

    Can you repack the bin again by making some changes

  • @JakeBromie
    @JakeBromie 6 месяцев назад

    my house almost burned down

  • @hypnos4754
    @hypnos4754 6 месяцев назад

    Great video. This is a process that I’ve never done myself, and I always wondered what it’s like. The explanation of the required tools (and why they’re needed) is really good as well.

  • @guyonadino
    @guyonadino 8 месяцев назад

    IS THIS ELECTROBOOM ??? whats bro doing here

    • @MehdiHacks
      @MehdiHacks 7 месяцев назад

      Haha. My name is Mehdi and I sound like him, but I'm not ElectroBOOM

    • @guyonadino
      @guyonadino 7 месяцев назад

      @@MehdiHacks but youre still sus!! and also keep uploading vids

    • @d4rkness829
      @d4rkness829 3 месяца назад

      LOL i was thinking the same thing

  • @Dadadu16
    @Dadadu16 8 месяцев назад

    How do you identify which pin hole is for gnd, rx, tx, when there's nothing write on the pcb?

    • @MehdiHacks
      @MehdiHacks 7 месяцев назад

      Usually ground is the easiest to identify (simply using a multimeter's continuity mode, with other known grounds). RX and TX can be identified using multiple methods: one is to simply try (there's no harm in using them in the wrong order), second is to use a logic analyzer to "see" what's happening on the wire. I think some UART tools also can auto-discover it. Usually one has lots of data/activity going on, while the other is simply quiet, which means even a voltmeter can be used to identify RX (using fluctuations in the voltage)

  • @barryu4762
    @barryu4762 9 месяцев назад

    hello, is it possible to flash firmware in UART mode?

  • @fjfkfkdkdkdk
    @fjfkfkdkdkdk 9 месяцев назад

    Why not read the firmware via UART?

  • @Eptapus
    @Eptapus 9 месяцев назад

    It would be nice to have a video where you edit the firmware and you flash it back to the device!

  • @phantom700X
    @phantom700X 10 месяцев назад

    Thank you for information. I have LPC1778 I i tried to read with Flash magic . And i get massage, security violation in device. What i can do ?! I Wann get the firmware.

  • @brentself
    @brentself Год назад

    Great information in this video. Louder audio would be great, as I struggled to hear everything when the volume was set to maximum value.

  • @vediam
    @vediam Год назад

    Merhaba, izlediğim en faydalı video bu oldu diyebilirim. Detaylı ve dolu dolu içerikle hazırladığınız bu video için Allah sizden razı olsun. Çok çok çok sağolun, elinize sağlık.

  • @dzfinch5008
    @dzfinch5008 Год назад

    Thank you

  • @parsbitex
    @parsbitex Год назад

    it was so good , grateful for this tutorial

  • @anantoslab
    @anantoslab Год назад

    Need more details video about this topic. You are great ❤. Love from Bangladesh.

  • @chachouamohamed8557
    @chachouamohamed8557 Год назад

    hallo bro can help me for my TPLINK re 450 v3 ..it briked ... thanks bro video

  • @bucketaos8066
    @bucketaos8066 Год назад

    I am undable to enter into the shell, it keeps saying cmd is “echo “” > /etc/TZ”

  • @Hii_Lexi_4
    @Hii_Lexi_4 Год назад

    SIMlock code of Huawei B5318-42

  • @parvazno
    @parvazno Год назад

    آفرین مهندس

  • @alwill1016
    @alwill1016 Год назад

    Hey guys by any chance does anyone know how I can pipe all the output from the terminal into a txt file on Linux. I've tried tee, >, >>, and script and still have yet to get the terminal output into a txt file.

  • @johndavid8303
    @johndavid8303 Год назад

    Hello, to to extract firmware from MCU with builtin flash memory such as Atmel ATSAMD21J?

  • @youtubbiz
    @youtubbiz Год назад

    اینتر کیبوردت سالمه هنوز؟

  • @soroush92
    @soroush92 Год назад

    Thx Mahdi jaan. Would u please upload more videos like this? Amazing bro.

  • @bobmcbob4399
    @bobmcbob4399 Год назад

    13:29 "3: System Boot system code via Flash" - this is option 3 in the uboot boot menu. It is possible to send a different option via serial keyboard input - like boot to root shell. But this may not be always possible. But in this case, you get to a shell from the get-go.

  • @rjbrake
    @rjbrake Год назад

    derka derka

  • @eadge1999
    @eadge1999 Год назад

    You talk for long time out side the core of the address

  • @hackwithprogramming7849
    @hackwithprogramming7849 2 года назад

    Is python installed on that WiFi router terminal??? Plz anyone reply 🥺🥺🥺🥺🥺🥺🥺🥺🥺😭😭😭😭😭😭😭plz ?

    • @MehdiHacks
      @MehdiHacks 2 года назад

      To my knowledge, no.

    • @hackwithprogramming7849
      @hackwithprogramming7849 2 года назад

      @@MehdiHacks ok than tell me one thing which default programming language is there in that linux shell there. like in windows we have .VBS as default....... Except bash script

  • @parag9999mun
    @parag9999mun 2 года назад

    It was alot helpfull. Thank you man

  • @linux-tut
    @linux-tut 2 года назад

    Dump or Extract U-Boot from the running board. OR Dump memory to a file from the U-Boot console using the Memory Display command. This will be helpful in debugging in the situation like you have a board with U-Boot running and don't have the same version of U-Boot binary and want to test on another board. ruclips.net/video/yDFMcBNGW3U/видео.html

  • @tamiriiiii
    @tamiriiiii 2 года назад

    using UART access, if the device have telnet, but disabled, can we enable it !

  • @sebastianseng5278
    @sebastianseng5278 2 года назад

    what if i wanna save a project but i use free trial? can soone help

  • @kattoOrSmthxD
    @kattoOrSmthxD 2 года назад

    bro sounds like electrobooooooooooom

  • @oulachoulach4883
    @oulachoulach4883 2 года назад

    BROTHER, YOU ARE THE BEST!!! You oooh really helped me!! THANK YOU VERY

  • @Pinwiru
    @Pinwiru 2 года назад

    pues el firmware de tp-link se puede bajar sin compilar

  • @abdullahnadeem1823
    @abdullahnadeem1823 2 года назад

    wow, this is the exact router I have. I'm actually surprised it works so well for such a cheap price

  • @bradkaral1188
    @bradkaral1188 2 года назад

    Very well done. Clearly explained, step-by-step.

  • @bigbooduh
    @bigbooduh 2 года назад

    Legend Mehdi! Thanks for this

  • @neettalk
    @neettalk 2 года назад

    Hi, I used 115200 Baud rate for UART, which is connected to the IP camera board, but as soon as I give the power, the putty window displays garbage values, need your inputs/suggestion

    • @JordanPlayz158
      @JordanPlayz158 Год назад

      Sounds like you may have the baud rate wrong, there are not many standard baud rates so it should not take too long to bruteforce the right one.

    • @ClickClack_Bam
      @ClickClack_Bam Год назад

      ​@@JordanPlayz158I second this for anybody reading this for future reference. I'm new at this but have seen that the wrong baudrate will give you garbage.

  • @bororobo3805
    @bororobo3805 2 года назад

    We found Electroboom's younger brother 🤣

    • @MehdiHacks
      @MehdiHacks 2 года назад

      That made me smile :D

  • @JorgeLuis-hy8im
    @JorgeLuis-hy8im 2 года назад

    PL2303 has the right voltage? I meaning 3.3 by default. I get confused about the right voltage, do you have another video about the voltage? If you test the PL2303 pins, what voltage do you get?

  • @squirre17
    @squirre17 2 года назад

    Thank you very much😘. Looking forward to more practice hank-on work video.

  • @TouChA0
    @TouChA0 2 года назад

    can i cahnge the ip address of this retour using this method?

  • @abdoubenadada7310
    @abdoubenadada7310 2 года назад

    can we extract the firmware of tplink td-w8961n v3 ?

  • @nachiketathakur697
    @nachiketathakur697 2 года назад

    Great tutorial, thanks for sharing... just a question... I do not have the UART pins on the PCB. What options do I have?

    • @MehdiHacks
      @MehdiHacks 2 года назад

      Finding them is not very difficult. Do you have any pin headers on the board at all?

  • @qusaykambal6903
    @qusaykambal6903 2 года назад

    Hi How can i reverse engineering dump any eeprom for example s2943 i try ghidra but iam not get any thing

  • @miftahulfaris4400
    @miftahulfaris4400 2 года назад

    can CH341 also be used for UART?

  • @amkoshesh6205
    @amkoshesh6205 2 года назад

    Flash file of other modems From which site should I get it? Free . Safe file .

  • @조영민-v8r2u
    @조영민-v8r2u 2 года назад

    impressive from Republic of Korea.