Tutorial: Introduction to Reverse Engineering
summary
Quick practical tour of how devices get opened, analyzed and sometimes hijacked: hardware steps include repopulate connectors (JTAG/UART pogo pins), X‑ray to find tamper switches and potting removal with heat or solvents; test kit list includes DSO, Saleae logic analyzer, Bus Pirate and microscope. Firmware workflow shows binwalk + dd extraction to split u‑boot, cramfs and kernels; binaries go into QEMU/IDA or run on a target. Example protocol hack uses a CC3200 Arduino injector to bit‑bang, isolate with Schottky diodes and successfully inject CRC‑corrected commands.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 3:35Why I Drink
- 3:58Overview
- 5:03What is Reverse Engineering
- 6:56Why do Reverse Engineering
- 14:00Tools
- 17:07Test Equipment
- 20:34Logic Analyzers
- 22:16FCC ID
- 26:18Opening the Case
- 34:41Identifying Parts
- 36:45Sample Data Sheets
- 38:28Repopulating Interfaces
- 40:41Repopulating Devices
- 44:12Why Repopulating
- 46:29Downloading Firmware
- 47:47Example
- 51:56General Approach
- 54:11Entropies
- 55:51binaries
related talks
06mFrom Digital Forensics to Hardware Reverse Engineering: A Conversation
49mOpen Source Tools of the Hardware Hacking Trade
28mThe IoT Hacker's Toolkit
33mEmbedded Device Exploitation 101: An Introduction to Firmware Hacking
21mOpen Source IC Design and Hardware Reverse Engineering Or: How I Learned to Stop...
39mBackdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers
43mThe Tao of Hardware the Te of Implants
40mIntroduction to IoT Reverse Engineering