190 likes | 424 Views
JTAG for dummies. 31/01/2013 DCG # 7812. by @ cherboff. Intro. A long time ago…. WTF?. WOOOT?. Разработка Прототипирование О тладка Производство Прошивка Тестирование PCB и компонентов Сопровождение Сервис-центры (восстановление/обновление). JTAG from outside.
E N D
JTAG for dummies 31/01/2013 DCG#7812 by @cherboff
Intro Defcon Russia (DCG #7812)
A long time ago… WTF? Defcon Russia (DCG #7812)
WOOOT? • Разработка • Прототипирование • Отладка • Производство • Прошивка • Тестирование PCB и компонентов • Сопровождение • Сервис-центры (восстановление/обновление) Defcon Russia (DCG #7812)
JTAG from outside • TCK (clock) • TDI (data input) • TDO (data output) • TMS (mode select) • [RTCK] (reverse clock) • [RST] (reset) Defcon Russia (DCG #7812)
JTAG Slide_name Core Defcon Russia (DCG #7812)
A bit of theory Defcon Russia (DCG #7812)
A bit of theory Defcon Russia (DCG #7812)
What we can do with? } • Read / Write registers • Read / Write memory • Read / Write flash (!!!) • Execution control GOD Mode Defcon Russia (DCG #7812)
But… • ARM Code security • Code protection fuses (AVR) • PCB obfuscation and stuff Defcon Russia (DCG #7812)
Get armed! • Hardware emulators • Debug software • Helpful tools Defcon Russia (DCG #7812)
Hardware :«Wiggler» • Ultra low cost • Easy to assemble • Base features supported Defcon Russia (DCG #7812)
Hardware : U-Link / J-Link • USB • Dozens of features • Open OCD support (J-Link) • ~ $500 (original)* *~ $12 from China with love ;-) Defcon Russia (DCG #7812)
Software • KeiluVision • IAR • Open OCD + Open source + Crossplatform + gdb / eclipse integration Defcon Russia (DCG #7812)
JTAG In wild • 10 x 2 • 7x2 • 5x2 etc… Defcon Russia (DCG #7812)
JTAG In wild OR Defcon Russia (DCG #7812)
Point detection • Check datasheets • Multimeterprobing • Logic analysers • Special tools Defcon Russia (DCG #7812)
Jtagenum Automated JTAG scanner + open source + Arduino based + rs232 controlled + full-featured CLI Defcon Russia (DCG #7812)
Questions? Defcon Russia (DCG #7812)