#02 - How To Find The UART Interface - Hardware Hacking Tutorial
ฝัง
- เผยแพร่เมื่อ 11 ก.ค. 2024
- This is the second episode of the Hardware Hacking Tutorial series.
This series is to share information on how to do hardware hacking and how to do reverse engineering. The series is useful both for beginners and experts.
In this episode we will talk about how the find tue UART interface on an IoT device; we will take an home router (Gemtek WVRTM-127ACN) and show how to find the UART interface using simple tools like a multi-meter and using more advanced tools like a JTagulator board.
UART stands for Universal Asynchronous Receiver-Transmitter, it is the serial interface of the device where to attach the serial console. It is essential, in hardware hacking, to find the UART interface because it allows you to see what is printed on the serial console during the boot cycle, and It allows to see what type of bootloader your device is using and his version, what Operating System you have and his version, what kind of CPU and other peripherals you have, the amount of RAM and EEPROM; often you can get information on how the EEPROM is partitioned and a lot of other information, including information during the firmware upgrade cycle.
Often it is also possible to interact with the serial console, interacting with the bootlader, getting the login prompt and, sometimes, being able to logon locally on the system.
In the device we are interested in, usually the serial or UART interface is included, because it is used during the development phase and for testing purposes, but it is hidden inside the motherboard.
We will discuss, and show on video, various techniques to find the position and the pin-out of the UART interface including using a simple multi-meter.
We will show, also, how to connect a PC, running a terminal emulator software (we use PuTTY), to the UART of the IoT device using a TTL serial adapter.
--------------------------------
Links with additional Information:
Channel's Author: www.makemehack.com/2020/02/a-...
Channel's Web Site: www.makemehack.com
The sample router (Gemtek WVRTM-127ACN) on techinfodepot: en.techinfodepot.shoutwiki.com...
The sample router (Gemtek WVRTM-127ACN) reverse engineered on GitHub: github.com/digiampietro/hacki...
The JTagulator website: www.grandideastudio.com/jtagul...
TTL Serial Adapter (affiliate link): amzn.to/2vvzCYB
PuTTY, the terminal emulator: www.putty.org/
The most common baud rates (serial speed): en.wikipedia.org/wiki/Serial_... - วิทยาศาสตร์และเทคโนโลยี
You simplified the most complex subject of hardware maintenance, appreciated and thanks a lot for your dedication
Definitely the most practical introductory material I have come across with regards to hardware analysis and communication. Thanks for taking the time to make these videos!
The video is very beginner friendly thanks for the great explanation
I dont usually comment... but this learning material is worth appreciation... Thank You Sir, your a good teacher...
6:21 Tip for other viewers: It also can be only two pins: Rx and Tx, so if you can't find any 3-4 pin connector, check it. Thanks for these amazing videos and good luck!
Thanks for the tip!
When I first watched these videos 11 months ago it seemed like some type of wizardry what you was doing. But you really inspired me and I've got a nice electronics lab, lots of good gear. Now I can practice and do this on the many routers I have around the house. IT no longer seems complex, or difficult. Infact, this is fairy simple when compared to hacking phones. Your videos are very good, and your English is excellent. I like your accent you sound like a real old school hacker. Bet you did phreaking ;) Just wanted to say a big thanks man. Please continue to make more videos.
Extremely useful video, very well explained and entirely possible to follow for a complete novice. Your instructions helped me debrick an expensive device that was destined for the dump otherwise. Thanks a lot for making this.
This channel is amazing. Keep up the good work!
Hi Valerio, yesterday I came across your channel and I`m enjoying a lot. Great teaching skills! Thank you for sharing your knowledge!
The best channel on TH-cam! Thanks for everything!
I am new to hardware hacking - explanation was great a lot of technical knowledge and a good teacher. I am going to have to watch a few more times before hands-on. But some good work
I really enjoyed the overview, helped me save a bad NAS board. Thank you!
Thank you, it was very useful. You're a great teacher.
Very helpful video. Thanks
When you see an older guy teaching you how to hack hardware you know it's straight up solid facts. Thank you for this video. I just figured out my small MIDI keyboard has UART pinouts and I forgot how to identify each one. You saved my bacon.
Thanks a lot for this video, I really like the fact that you picked an undocumented device that has not already been showed!
Hello Night4wl, thank you for your continued appreciation and support. There is no scarcity of not yet hacked devices! 😃
Loving this content, thank you!
Good video, thank your sir!
Thank you so much. I love your videos!
Great tutorial.
Thanks for this nice explanation, it is the best tutorial I am able to find.
Because I can share it to new collaegues for teaching them, and I learnt some points here and there. Thanks :-)
thanks a lot ..great work
Thanks for sharing your knowlege, the world must have more people like you!!!!
Very technical and to the point
You have Really Inspired me, Mr Valerio
Very useful video.
It was very usefull, understandable, thanks a lot
thank you very much for the video, great teacher
Great work. Thank you
Hi TeslaTurk , glad you liked it!
This is fabuloso! Now I know about finding the UART and I am learning to speak Italian as well. I can almost understand every word, it is very much the same as American. It is very easy, I do not know why people go to school!
Amazing video, very clear explanation, thank you!
Hello Gater Security, thank you for your appreciation!
I love this
thank you for sharing your knowledge
an excellent explanation, a lot of technical knowledge and a good teacher
Hello Jose Ramos, thank you for your appreciation and support.
Thank you for data. Learned lots of things :D
Excellent teacher 👍..now i'm your student
Great info
Really good information exactlywhat i needed i just wish id found it a week ago .better late than never .youre english is great just relax and let it flow you obviously can do everything else .a scale of 1- 10 i give it a 9.7.6 months from now youll be spittin like marshall mathers.....lol.keep up the good work.and thanks again just what i needed.
Thank you very much please make more!
Amazing work thank you
Niceee !!!! You my friend now!
Please guide us more. Can you please share some good reading materials as well?
Your videos are good. It was interesting to see the use of multimeter to identify the TX and RX.
just a random comment to help you with your effort
Hello Mohamed thank you again.
Amazing job man. Thanks a lot!
Hello Karim, thank you for your appreciation and support.
Owesome video
Molto bene! bel video
Really good information exactlywhat i needed i just wish id found it a week ago .better late than never .youre english is great just relax and let it flow you obviously can do everything else .a scale of 1- 10 i give it a 9.7.6 months from now youll be spittin like marshall mathers.....lol.keep up the good work.and thanks again just what i needed.
1Where would you start if you don't have a chip such as the one on this board as reference for gnd and VCc? Thanks for this series. It is great!
Very clear eplanations and interesting channel. Good job!
Thank you Aurora!
you are very beautiful, my white kween
Thank you!
I found this very interesting really, from Lesotho
Oh gawd, how the hell have I missed this channel ? Insta sub :)
Good very good thinks
Sei grandissimo !
Where would you start if you don't have a chip such as the one on this board as reference for gnd and VCc? Thanks for this series. It is great!
Not sure if it was already said but dmesg -w with USB unplugged then plug in and it should reveal the name of the just plugged in device.
Great tutorial
I really love it. You serie is awesome! I learn much with this. But I can't find JTAG ou UART pinout of some hardwares. Some equipments are not much friendly and I don't know how can I start the search. Can you create videos with some equipments more hardly?
Dear Sir, I really liked this video, I have a PCB with a UART interface and want to know if I can use UART to communicate with the IC. It is an AMT630A IC. Do you have any idea about it?
I have some nice candidates but the ohm reading I get on the board are absurdly changing if I swap the probes as if I were testing a diode. This is so confusing, what to do in this cases? Thank you so much for this series!
Love from Bangladesh ❤️, keep going sir! ❤️
These are very infromative sessions. Just a quick question. From my understating we can only see these print log only if the the devs have used print commands for debug, right? Usually production code won't have any of such debug print commands. In such a case is there any other use case for UART? Please correct me if I am wrong. Thank you.
Nice work with the videos! Maybe You can help me out with a problem - I found UART pins and connected with PUTTY all good.. got welcome message and so on as a responce.. console prompts me that type "HELP" for more options but typing that wont do anyting. RX pin on board is 3.3 volts so its not been cut. Any ideas how to proceed? Typin HELP or anythin else no characters appear on the screen but RX light on my FTDI converter flicker evey time I type so that is defenently working.... Thanks
I love how auto subtitles refer to serial console as "savior console"
What can you teach about hacking firmware to bring ssh and many other functions stripped by ISP provider? Grazie mile.
Greate video, however it's kinda hard to understand.
Gonna watch the video over and over again.
bom video amigo: se o dispositivo embarcado esta com defeito na memoria ram , qual log viria na inicialização ? fazer mais videos como esses . sou brazil. obrigado..
❤
this guy is the person we need whenn terminator take over the world
Has anyone used device solutions Tahoe rev b? board?
Is there any way to add a USB port or to solder a USB device directly on the motheboard of a router that doesnt have a usb port, for example?
Hello Gater Security, thank you for your question and sorry for the delay in answering. Usually, if a router has support for USB it has the possibility to install a USB connector on the motherboard, if not already installed. It is possible that the processor has support for USB, but if you don't find anything on the motherboard usually (but not always!) means that the router's software doesn't support USB connections. If you have the processor's datasheet and you know that it supports USB you can try to attach a USB device to the related pins but probably this will not be supported by the original firmware.
@@MakeMeHack Thank you for the response, i will look into it, i was asking because i have a tp-link router with OpenWRT(open-source firmware) but it doesnt have a usb port for me to plug a usb camera, thank you so much man , i will do some research on the topic, have a nice day!
@Viewers: Also you are at luck, if it's not a BGA and is a QFP package. Just pull the datasheet from the internet and trace the UART pins on the SoC.
I love how he says "ardware acking"
l’orgoglio italiano !
By the way I bet that the "friendly neighbour" has been inspired by l'amichevole chimico di quartiere Bressanini 😉
pizza, ceasar, parmagianno. yes i too can speak Italian
Would you like a new project, I run a Drone repair shop and am having trouble cracking a Mavic 2 Firmware i can send you a board to see if you can get it. any help would be much appreciated im a noob at hacking trying to learn
Not impossible with X-Ray machine. :-)
Hello, can you disassemble the methods of connecting to the cpu s7 1200 via UART protocol and identify the password access vulnerability as said in this video th-cam.com/video/ocOEiNp-8K0/w-d-xo.html THANKS !
#&AD
Your email???