Flash Extraction: Difference between revisions

(2 intermediate revisions by 2 users not shown)

Line 99:

::::: [https://cardis.org/cardis2013/proceedings/CARDIS2013_16.pdf Example paper 3. Glitch it if you can: parameter search strategies for successful fault injection.]

::::: [https://www.researchgate.net/publication/353922465_The_Forgotten_Threat_of_Voltage_Glitching_A_Case_Study_on_Nvidia_Tegra_X2_SoCs Example paper 4. The Forgotten Threat of Voltage Glitching: A Case Study on Nvidia Tegra X2 SoCs]

::::: [https://www.aisec.fraunhofer.de/en/FirmwareProtection.html Example paper 5. Using Optical Fault Injection and Race Conditions to Bypass STM32F0 Series Debug Interface Protections]

:::::- [https://github.com/racerxdl/stm32f0-pico-dump RPi Pico Implementation Exploiting Race Conditions to Iteratively Read Firmware]

:::;- Clock glitching (Oscillator Circuits)

::::: [https://caslab.io/publications/durand2021ultra.pdf Example paper 1. Ultra Freezing Attacks and Clock Glitching of Clock Oscillator Circuits]

Line 177:

Line 179:

:: ➤ CH341A programmer

:::;- [https://www.onetransistor.eu/2017/08/ch341a-mini-programmer-schematic.html CH341A Mini Programmer Schematic and Drivers blogpost.]

:: ➤ ~~Ezp2023+ programmer with appropriate SOP16 SOP8 adapter~~

:: ➤ XGECU T48 TL866 II Plus

:::;- ~~'''Important note:''' limited NOR~~ Flash ~~and NAND Flash support! Might need 1.8v adapter, buggy software. [https:~~//~~www.onetransistor.eu~~/~~2023~~/12/~~how~~-to-~~use-ezp2023-usb-programmer~~.~~html Read more here~~.]

:::;- Budget friendly high speed 30mhz programmer supports a wide range of chips (EEPROM/Flash/MCU/BIOS/SPI/NOR/NAND/EMMC) including high-capacity nand (up to 256gb).<br> Adjustable VCC/VPP voltages (1.8-6.5v up to 25v), logic testing and pin diagnostics. Broad OS support from Win XP to Win11.

=====Flash Utilities=====

:: ➤ flashrom (Support: SPI/BIOS/EC)

Line 195:

Line 197:

:: ➤ Chipsbank CBM2099E [https://flash-extractor.com/library/CBM/CBM2099/ click here for details (Flash-extractor library)]

=====Nand Controller firmwares & ~~datasheets~~=====

=====Nand Controller firmwares, datasheets & vendor specific software=====

USBDev.ru is a great resource.

@@ Line 99: / Line 99: @@
 ::::: [https://cardis.org/cardis2013/proceedings/CARDIS2013_16.pdf Example paper 3. Glitch it if you can: parameter search strategies for successful fault injection.]
 ::::: [https://www.researchgate.net/publication/353922465_The_Forgotten_Threat_of_Voltage_Glitching_A_Case_Study_on_Nvidia_Tegra_X2_SoCs Example paper 4. The Forgotten Threat of Voltage Glitching: A Case Study on Nvidia Tegra X2 SoCs]
+::::: [https://www.aisec.fraunhofer.de/en/FirmwareProtection.html Example paper 5. Using Optical Fault Injection and Race Conditions to Bypass STM32F0 Series Debug Interface Protections]
+:::::- [https://github.com/racerxdl/stm32f0-pico-dump RPi Pico Implementation Exploiting Race Conditions to Iteratively Read Firmware]
 :::;- Clock glitching (Oscillator Circuits)
 ::::: [https://caslab.io/publications/durand2021ultra.pdf Example paper 1. Ultra Freezing Attacks and Clock Glitching of Clock Oscillator Circuits]
@@ Line 177: / Line 179: @@
 :: ➤ CH341A programmer
 :::;- [https://www.onetransistor.eu/2017/08/ch341a-mini-programmer-schematic.html CH341A Mini Programmer Schematic and Drivers blogpost.]
-:: ➤ Ezp2023+ programmer with appropriate SOP16 SOP8 adapter
+:: ➤ XGECU T48 TL866 II Plus
-:::;- '''Important note:''' limited NOR Flash and NAND Flash support! Might need 1.8v adapter, buggy software. [https://www.onetransistor.eu/2023/12/how-to-use-ezp2023-usb-programmer.html Read more here.]
+:::;- Budget friendly high speed 30mhz programmer supports a wide range of chips (EEPROM/Flash/MCU/BIOS/SPI/NOR/NAND/EMMC) including high-capacity nand (up to 256gb).<br> Adjustable VCC/VPP voltages (1.8-6.5v up to 25v), logic testing and pin diagnostics. Broad OS support from Win XP to Win11.
 =====Flash Utilities=====
 :: ➤ flashrom (Support: SPI/BIOS/EC)
@@ Line 195: / Line 197: @@
 :: ➤ Chipsbank CBM2099E [https://flash-extractor.com/library/CBM/CBM2099/ click here for details (Flash-extractor library)]
-=====Nand Controller firmwares & datasheets=====
+=====Nand Controller firmwares, datasheets & vendor specific software=====
 USBDev.ru is a great resource.