Implementing Practical Electrical Glitching Attacks
summary
Reproduces end-to-end electrical glitch exploits: uses a De0 Nano FPGA and simple test rigs to trigger clock glitching pulses (60–80 ns) and voltage spiking/brown-out faults, succeeds reliably against an ATmega328 LED blink test (brown-out threshold observed ~200 ns vs datasheet 2 μs), but fails against an LPC1343 black‑box password board and several commercial targets. Reimplements the Xbox 360 reset glitch workflow—uses CPU PL bypass at 520 kHz, watches post bus codes 0x36/0x39, times a reset ~100 ns around ~62% of comparison execution—and outlines practical mitigations.
AI-written summary · about
chapters (9)
- 0:00Start
- 1:28What are glitching attacks
- 6:05Xbox 360 Reset Gitch Hack
- 12:21Attack Methodology
- 27:01ATMega328p Clock Setup
- 28:08ATMega328p Voltage Setup
- 35:42Experiments for the future
- 36:39Defenses Against Glitching
- 38:23Locations
related talks
46mChip.Fail - Glitching the Silicon of the Connected World
04mBridging the Glitch Gap: Hash Salehi on Making Professional Fault Injection Accessible
44mPractical Software Countermeasures 4 Hardware Glitch Attacks
48mFatal Fury on ESP32: Time to Release Hardware Exploits
21mGlitchGlück: Enabling Software Vulnerabilities through Guided Hardware Fault Injection
43mRaiden Glitching Framework
24mSecurity through Transparency: Tales from the RP2350 Hacking Challenge
32mGlitching Edge Ai Fault Injection On Npus, Automated By LLM Agents