{"title":"Hardware Audit: Hardware Audit Tools","description":"","products":[{"product_id":"bus-pirate-v5","title":"Bus Pirate 5","description":"\u003ch2\u003eIntroduction\u003c\/h2\u003e\n\u003cp\u003eThe Bus Pirate is the world's best known hardware hacking \/ debugging \/ development device. Whether you're debugging hardware, tinkering with unknown devices, flashing micro-controllers, sniffing unknown protocols, side-channel attacks, prototyping new PCBs .. the Bus Pirate has you covered.\u003c\/p\u003e\n\u003cp\u003eThe \u003cstrong\u003eBus Pirate's killer feature\u003c\/strong\u003e is its \u003cstrong\u003ebuilt-in terminal\u003c\/strong\u003e: Instead of fighting with multiple tools, exotic protocols, frustrating voltage levels and rewriting code for every project - simply connect to the full-colour VT100 terminal.\u003cbr\u003e\u003c\/p\u003e\n\u003cp\u003eConfigure the device you're working with, whether it's a known protocol or something exotic, and \u003cstrong\u003esend commands directly to your device\u003c\/strong\u003e : chips, sensors, etc - the Bus Pirate handles the heavy lifting - \u003cstrong\u003ewithout writing a single line of code.\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eThe Bus Pirate 5 is the culmination of over 10 years of hard work and relentless development, and features an incredibly dedicated and active community.\u003cbr\u003e\u003c\/p\u003e\n\u003cdiv style=\"margin-top: 2em;\" class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n\u003ch3\u003eTerminal Interface\u003cbr\u003e\n\u003c\/h3\u003e\nFull colour (VT100) terminal with real-time pin status (voltage + function), system configuration and direct command CLI.\u003cbr\u003e\n\u003cp\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Bus-Pirate-Terminal-2.png?v=1712236404\" alt=\"\"\u003e\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n\u003ch3\u003eFull Colour IPS LCD\u003cbr\u003e\n\u003c\/h3\u003e\nConfigurable pin labels, real-time voltage monitoring and current consumption of the programmable power supply unit.\u003cbr\u003e\n\u003cp\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/BusPirate-Screen.png?v=1712236406\" alt=\"\"\u003e\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003ch2\u003eKey Features\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eBulldozer buffered IO\u003c\/strong\u003e - 1.2 to 5volt direct interfacing with 8 bidirectional buffered IOs\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eVoltage measurement extravaganza\u003c\/strong\u003e - Bus Pirate 5 displays voltage readings for every pin, right on its vibrant LCD screen and in the terminal statusbar\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCurrent measurement\u003c\/strong\u003e - Get a reality check by monitoring current use in real time\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eProgrammable power supply\u003c\/strong\u003e - 1 to 5volt output, 400mA max, for powering all kinds of devices\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eProgrammable current limit\u003c\/strong\u003e - A 0 to 500mA programmable hardware fuse sets current limits that keep your projects safe and sane\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eA big colorful display\u003c\/strong\u003e - Keep track of pin assignments, voltages and current\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eColor terminal and statusbar\u003c\/strong\u003e - VT100 terminal emulation for that modern 1970s feel\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eJust One Button\u003c\/strong\u003e - A dedicated button for automating repetitive debug commands while you're wrist deep in circuits\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAuxiliary Header\u003c\/strong\u003e - A second header to easily connect logic analyzers and other tools. Stop struggling to fit multiple probe hooks on tiny chip leads\u003cbr\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eThe Bus Pirate has a full range of accessories, available in a pack, or individually.\u003cbr\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003ePremium Probe Cable Set\u003c\/strong\u003e: color-coded, labeled leads, breadboard pins\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003ePremium Auxiliary Cable Set\u003c\/strong\u003e: color-coded, silicone-coated wires\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAuxiliary cable\u003c\/strong\u003e: color-coded crimp housings\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eKF141 connector board\u003c\/strong\u003e: right angle, labeled IO pins\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRaspberry Pi Pico\u003c\/strong\u003e right-angle connectors.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eBus Pirate 5 - Unboxing\u003c\/h2\u003e\n\u003cfigure\u003e\u003cvideo lite-youtube=\"\" videoid=\"1GIqLmzRPBg\" posterquality=\"maxresdefault\" params=\"rel=0\"\u003e\u003c\/video\u003e\u003c\/figure\u003e\n\u003cdiv style=\"margin-top: 2em;\" class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n\u003ch2\u003e\u003cstrong\u003eWhat's included\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eStandalone\u003c\/strong\u003e\u003cbr\u003e\n\u003c\/li\u003e\n\u003cul\u003e\n\u003cli\u003e1x Bus Pirate v5\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003e1x Injection Molded Enclosure\u003c\/li\u003e\n\u003cli\u003e6x Interchangeable buttons\u003c\/li\u003e\n\u003cli\u003eCustom-scent scratch-n-sniff stickers\u003cbr\u003e\u003cbr\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cli\u003e\u003cstrong\u003eComplete Pack\u003c\/strong\u003e\u003c\/li\u003e\n\u003cul\u003e\n\u003cli\u003e1x Bus Pirate v5\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003e1x Injection Molded Enclosure\u003c\/li\u003e\n\u003cli\u003e6x Interchangeable buttons\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003eCustom-scent scratch-n-sniff stickers\u003cbr\u003e\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003eAuxiliary Cable Set\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003eProbe Cable Kit\u003c\/li\u003e\n\u003cli\u003eKF141 Connector (Right Angle)\u003c\/li\u003e\n\u003cli\u003eRaspberry Pi Pico Connecter (Right Angle)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n\u003ch2\u003e\u003cstrong\u003eDevice Specifications\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eCores:\u003c\/strong\u003e 2x32-bits @ 125MHz RP2040\/ARM\u003cbr\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eFlash:\u003c\/strong\u003e 128Mbits\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eStorage\u003c\/strong\u003e: 1GB NAND (100MB Usable)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDisplay\u003c\/strong\u003e: 320x240 IPS all-angles\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eMagic Peripheral\u003c\/strong\u003e: RP2040 PIO module\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eTerminal\u003c\/strong\u003e: VT100 color with live statusbar\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eLEDs\u003c\/strong\u003e: 18 RGB LEDs\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eIO Pins\u003c\/strong\u003e: 8x IOs @ 1.2 - 5.0v\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003ePull Up Resistors\u003c\/strong\u003e: 8x Pins\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eADC \/ Voltage Measurement\u003c\/strong\u003e: All pins\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003ePower Supply\u003c\/strong\u003e: 1 - 5v\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCurrent Sense\u003c\/strong\u003e: 0 - 500mA\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eProgrammable Fuse\u003c\/strong\u003e: 0 - 500mA\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003e\u003cstrong\u003eTechnical Resources\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/hardware.buspirate.com\/?ref=lab401.com\" title=\"Bus Pirate Hardware REference\" target=\"_blank\"\u003eBus Pirate Hardware Specs\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/firmware.buspirate.com\/\" title=\"Bus Pirate Firmware\" target=\"_blank\"\u003eBus Pirate Firmware Information\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/forum.buspirate.com\/\" title=\"Bus Pirate Forum\" target=\"_blank\"\u003eBus Pirate Forum\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/github.com\/DangerousPrototypes?tab=repositories\" title=\"Bus Pirate Github Repos\" target=\"_blank\"\u003eBus Pirate GitHub Repos\u003c\/a\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e","brand":"BusPirate","offers":[{"title":"Complete","offer_id":47989305704795,"sku":"BUSPIRATE-5-PACK-COMPLETE","price":89.0,"currency_code":"EUR","in_stock":false},{"title":"Standalone","offer_id":47989305672027,"sku":"BUSPIRATE-5","price":59.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/BusPirate-Lab401-1.png?v=1713389104"},{"product_id":"macobox-hardware-pentest-platform","title":"MACOBOX - Hardware Pentest Platform","description":"\u003cp\u003eMACOBOX is the world's first all-in-one solution for hardware auditing and firmware vulnerability analysis \u003cb\u003especifically developed for the commercial, industrial and governmental sector.\u003c\/b\u003e Typically firmware extraction, analysis and vulnerability testing require multiple steps across a variety of different tools: power supplies, level-shifters, interface-dependant devices and specialised connectors. Even when connected, firmware extraction requires an intimate knowledge of chipsets and manufactures. Finally, when firmware is extracted, analysis and vulnerability testing requires multiple tools and custom code.\u003c\/p\u003e\n\u003cp\u003eThe MACOBOX changes everything: it incorporates the entire hardware penetration testing life-cycle: from connection, firmware extraction - and automated firmware vulnerability analysis. Every step is streamlined and automated - vastly accelerating the onerous steps, allowing penetration testers to create rapid, repeatable workflows with just one tool.\u003c\/p\u003e\n\u003cp\u003eThe MACOBOX is specifically built to meet operational requirements of large commercial, industrial or governmental clients: \u003c\/p\u003e\u003cul\u003e\n\u003cli\u003eReplicatable workflows\u003c\/li\u003e\n\u003cli\u003eAutomated documentation\u003c\/li\u003e\n\u003cli\u003eFree hardware and software updates\u003c\/li\u003e\n\u003cli\u003eBuilt-in collaboration features\u003c\/li\u003e\n\u003cli\u003eBuild-in automation features for scaling\u003c\/li\u003e\n\u003cli\u003eDedicated support: email, phone, on-site\u003c\/li\u003e\n\u003cli\u003eAvailability of on and off-site training\u003c\/li\u003e\n\u003c\/ul\u003e\nIn a nutshell, MACOBOX is a powerful platform that meets your technical requirements, backed with features and support that meet corporate, industrial and governmental requirements. \n\n\u003cvideo lite-youtube-playlist params=\"rel=0\" thumb-layout=\"vertical\" auto-play-thumb=\"true\"\u003e\n \u003cvideo playlist-entry videotitle=\"Understand the MACOBOX: Professional Hardware Pentest Platform\" videodescription=\"Discover the MACOBOX, an all-in-one platform for professional hardware auditors and pentesters. Device unification, multiple-interfaces, project management, automatic vulnerability scans and documentation generation.\" videoid=\"GHLmtduVlUE\" posterquality=\"hqdefault\"\u003e \u003c\/video\u003e\n \u003cvideo playlist-entry params=\"rel=0\" videotitle=\"Lab401 Interview: Pentester and MACOBOX Developer, Giuseppe Compare\" videodescription=\"Deep-dive the MACOBOX platform with its lead developer, Giuseppe Compare, and see how the MACOBOX is rapidly changing the pentest landscape for professional, industrial and government clients\" videoid=\"e7hDM6Pj2yc\" posterquality=\"hqdefault\"\u003e \u003c\/video\u003e\n \u003cvideo playlist-entry params=\"rel=0\" vide otitle=\"MACOBOX 1.2 Release Event : Live hardware hacking\" videodescription=\"Real-world examples of how the AI tools added in MACOBOXs latest release accelerate the traditional hardware pentest workflow.\" videoid=\"ffUf2Z3lBkQ\" posterquality=\"hqdefault\"\u003e \u003c\/video\u003e\n\u003c\/video\u003e\n\u003ch2\u003e\u003cstrong\u003eDiscover the MACOBOX\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cdiv class=\"product-image-container\" style=\"margin-top: 2em;\"\u003e\n \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Macobox---IoT-Pentesting-Hardware-Device-Overview---3.png?v=1746699042\" alt=\"\"\u003e \n \u003cul class=\"markers-list\"\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"1\" data-x=\"26\" data-y=\"8\"\u003e1\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"2\" data-x=\"47\" data-y=\"16\"\u003e2\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"3\" data-x=\"38\" data-y=\"49\"\u003e3\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"4\" data-x=\"63\" data-y=\"55\"\u003e4\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"5\" data-x=\"80\" data-y=\"64\"\u003e5\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"6\" data-x=\"57\" data-y=\"83\"\u003e6\u003c\/li\u003e\n \u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\"\u003e\n \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"1\"\u003e\n \u003ch3\u003e1. Interface with everything\u003c\/h3\u003e\n \u003cp\u003eNative support for UART, SPI, I2C, SWD and JTAG. eMMC via included dedicated adaptors.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"2\"\u003e\n \u003ch3\u003e2. Built-in level-shifters\u003c\/h3\u003e\n \u003cp\u003eOnboard support for all standard power levels: 1.8V, 2.5V, 3.3V and 5V. No more external supplies, no more common ground problems.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"3\"\u003e\n \u003ch3\u003e3. Intuitive hardware analysis\u003c\/h3\u003e\n \u003cp\u003eAutomated analysis of UART, SPI, I2C, eMMC and JTAG interfaces via the touchscreen interface.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"4\"\u003e\n \u003ch3\u003e4. Auto firmware extraction \u0026amp; analysis\u003c\/h3\u003e\n \u003cp\u003eAutomatically extract \u0026amp; analyse firmware: Identifies relevant memory areas such as squashfs root and generates detailed vulnerability reports.\u003cbr\u003e\u003c\/p\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"5\"\u003e\n \u003ch3\u003e5. Compehensive Accessories\u003c\/h3\u003e\n \u003cp\u003eThe MACOBOX includes a hand-picked collection of must-have accessories to handle every situation for every target device.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"6\"\u003e\n \u003ch3\u003e6. Unlimited Expansion\u003c\/h3\u003e\n \u003cp\u003eAdd new interfaces such as CANBUS, Pin Enumeration, Logic Analysers, etc via upcoming addon boards and software updates.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\u003c\/div\u003e\n\u003ch2\u003eDetailed functionality\u003c\/h2\u003e\n\u003cul\u003e\n \u003cli\u003e \u003cstrong\u003eMulti-protocol compatibility\u003c\/strong\u003e: Supports analysis of UART, JTAG, SPI, I2C, SWD at different logic levels (1.8V, 2.5V, 3.3V, 5V).\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eAdvanced firmware analysis\u003c\/strong\u003e: Identifies relevant memory areas such as squashfs root and generates detailed vulnerability reports.\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eThird-party integration\u003c\/strong\u003e: Enables automatic firmware analysis and detailed report generation.\u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eAI integration\u003c\/strong\u003e: Includes an AI system for advanced data processing and decision-making support.\u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eScript automation\u003c\/strong\u003e: Allows launching scripts via UART to automate penetration testing phases and supports custom script creation.\u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eFCCID projects and specifications\u003c\/strong\u003e: Supports project generation and specification inclusion via FCCID.\u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eFirmware extraction\u003c\/strong\u003e: Compatible with firmware extraction via UART, SPI, JTAG, and other interfaces.\u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003ePortability\u003c\/strong\u003e: Compact and modular design, ideal for field use.\u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eModularity:\u003c\/strong\u003e Allows the addition or replacement of customizable boards for other domains (CANBUS, industrial, etc.) – currently in development.\u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eFuture developments\u003c\/strong\u003e: Advanced board versions with additional features and the JTAGulator device will be available soon.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eEntreprise Features \u0026amp; Support\u003c\/h2\u003e\n\u003cp\u003eThe MACOBOX pricing includes the hardware and 12 months of dedicated service and support, including free replacement hardware, free additional interface boards, dedicated access to the engineering team for support and cloud-based firmware vulnerability scans.\u003c\/p\u003e\n\u003cp\u003eLicence renewal and entreprise\/fleet licencing is handled directly with the MACOBox team.\u003c\/p\u003e\n\u003c!-- Begin Feature Grid --\u003e\n\u003c!-- Begin Feature Grid --\u003e\n\u003cstyle\u003e\n .comparisonTable-feature-grid {\n --comparisonTable-color-light-bg: #e9e9ec;\n --comparisonTable-color-text: #2d2d2d;\n --comparisonTable-color-primary: #6c5ce7;\n --comparisonTable-color-check-green: #00bf8e;\n --comparisonTable-spacing-sm: 0.75rem;\n --comparisonTable-spacing-md: 1rem;\n --comparisonTable-spacing-lg: 1.5rem;\n --comparisonTable-border-radius: 0.5rem;\n --comparisonTable-font-size-sm: 1rem;\n --comparisonTable-font-size-lg: 1.25rem;\n --comparisonTable-gap-size: 1rem;\n --comparisonTable-box-shadow: 0 4px 16px rgba(0, 0, 0, 0.08);\n\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n grid-auto-rows: auto;\n align-items: stretch;\n gap: var(--comparisonTable-gap-size);\n max-width: 1200px;\n width: 100%;\n margin: 0 auto;\n }\n\n .comparisonTable-feature-box {\n background-color: var(--comparisonTable-color-light-bg);\n padding: var(--comparisonTable-spacing-lg);\n border-radius: var(--comparisonTable-border-radius);\n box-shadow: var(--comparisonTable-box-shadow);\n border-left: 3px solid var(--comparisonTable-color-primary);\n display: flex;\n flex-direction: column;\n }\n\n .comparisonTable-feature-header {\n display: flex;\n align-items: flex-start;\n gap: var(--comparisonTable-spacing-sm);\n margin-bottom: var(--comparisonTable-spacing-sm);\n }\n\n .comparisonTable-feature-title {\n font-size: font-size: calc(var(--font-size--lg)*.75) !important;\n font-weight: 600;\n color: var(--comparisonTable-color-text);\n margin: 0 !important;\n line-height: 1.2;\n text-transform: none;\n }\n\n .comparisonTable-feature-description {\n font-size: var(--comparisonTable-font-size-sm);\n color: var(--comparisonTable-color-text);\n opacity: 0.75;\n margin: 0 !important;\n }\n\n .comparisonTable-feature-icon {\n width: 20px;\n height: 20px;\n margin-top: 0.125rem;\n border-radius: 50%;\n display: inline-flex;\n align-items: center;\n justify-content: center;\n line-height: 1;\n background-color: var(--comparisonTable-color-check-green);\n color: white;\n flex-shrink: 0;\n }\n\n \/* Mobile: 2 columns with orphan centered *\/\n @media (max-width: 768px) {\n .comparisonTable-feature-grid {\n grid-template-columns: repeat(2, 1fr);\n }\n .comparisonTable-feature-grid .comparisonTable-feature-box:last-child:nth-child(odd) {\n grid-column: 1 \/ -1;\n width: calc(50% - var(--comparisonTable-gap-size) \/ 2);\n justify-self: center;\n }\n }\n\n \/* Small phones: single column *\/\n @media (max-width: 480px) {\n .comparisonTable-feature-grid {\n grid-template-columns: 1fr;\n }\n .comparisonTable-feature-grid .comparisonTable-feature-box:last-child:nth-child(odd) {\n width: 100%;\n }\n }\n\u003c\/style\u003e\n\n\u003cdiv class=\"comparisonTable-feature-grid\"\u003e\n \u003cdiv class=\"comparisonTable-feature-box\"\u003e\n \u003cdiv class=\"comparisonTable-feature-header\"\u003e\n \u003cspan class=\"comparisonTable-feature-icon\"\u003e✓\u003c\/span\u003e\n \u003ch3 class=\"comparisonTable-feature-title\"\u003eMACOBOX Pro Kit\u003c\/h3\u003e\n \u003c\/div\u003e\n \u003cp class=\"comparisonTable-feature-description\"\u003eThe full professional hardware kit, including all premium accessories and components needed for serious fieldwork.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"comparisonTable-feature-box\"\u003e\n \u003cdiv class=\"comparisonTable-feature-header\"\u003e\n \u003cspan class=\"comparisonTable-feature-icon\"\u003e✓\u003c\/span\u003e\n \u003ch3 class=\"comparisonTable-feature-title\"\u003eVulnerability Scans\u003c\/h3\u003e\n \u003c\/div\u003e\n \u003cp class=\"comparisonTable-feature-description\"\u003eAutomated cloud-based firmware auditing with detailed reports on findings, severity, and recommended actions.\u003c\/p\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"comparisonTable-feature-box\"\u003e\n \u003cdiv class=\"comparisonTable-feature-header\"\u003e\n \u003cspan class=\"comparisonTable-feature-icon\"\u003e✓\u003c\/span\u003e\n \u003ch3 class=\"comparisonTable-feature-title\"\u003eDedicated Support\u003c\/h3\u003e\n \u003c\/div\u003e\n \u003cp class=\"comparisonTable-feature-description\"\u003ePriority access the engineering team for personalised development, training and support.\u003c\/p\u003e\n \u003c\/div\u003e \n \u003cdiv class=\"comparisonTable-feature-box\"\u003e\n \u003cdiv class=\"comparisonTable-feature-header\"\u003e\n \u003cspan class=\"comparisonTable-feature-icon\"\u003e✓\u003c\/span\u003e\n \u003ch3 class=\"comparisonTable-feature-title\"\u003eFree Hardware Upgrades\u003c\/h3\u003e\n \u003c\/div\u003e\n \u003cp class=\"comparisonTable-feature-description\"\u003eReceive new hardware revisions free of charge whenever upgraded boards are released to subscribers.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"comparisonTable-feature-box\"\u003e\n \u003cdiv class=\"comparisonTable-feature-header\"\u003e\n \u003cspan class=\"comparisonTable-feature-icon\"\u003e✓\u003c\/span\u003e\n \u003ch3 class=\"comparisonTable-feature-title\"\u003eFree Features Upgrades\u003c\/h3\u003e\n \u003c\/div\u003e\n \u003cp class=\"comparisonTable-feature-description\"\u003eAll future software features and developments are included. Your platform is always up to date.\u003c\/p\u003e\n \u003c\/div\u003e\n\n\n \u003cdiv class=\"comparisonTable-feature-box\"\u003e\n \u003cdiv class=\"comparisonTable-feature-header\"\u003e\n \u003cspan class=\"comparisonTable-feature-icon\"\u003e✓\u003c\/span\u003e\n \u003ch3 class=\"comparisonTable-feature-title\"\u003eFree Replacement Boards\u003c\/h3\u003e\n \u003c\/div\u003e\n \u003cp class=\"comparisonTable-feature-description\"\u003eThree complimentary replacement boards per year in case of accidental damage or hardware failure in the field.\u003c\/p\u003e\n \u003c\/div\u003e \n\n \u003cdiv class=\"comparisonTable-feature-box\"\u003e\n \u003cdiv class=\"comparisonTable-feature-header\"\u003e\n \u003cspan class=\"comparisonTable-feature-icon\"\u003e✨\u003c\/span\u003e\n \u003ch3 class=\"comparisonTable-feature-title\"\u003eAI Assistant\u003c\/h3\u003e\n \u003c\/div\u003e\n \u003cp class=\"comparisonTable-feature-description\"\u003eBuilt-in AI assistant \u0026amp; agentic teams for interpreting results, accelerating routine analysis tasks and audit orchestration.\u003c\/p\u003e\n \u003c\/div\u003e \n \u003cdiv class=\"comparisonTable-feature-box\"\u003e\n \u003cdiv class=\"comparisonTable-feature-header\"\u003e\n \u003cspan class=\"comparisonTable-feature-icon\"\u003e✓\u003c\/span\u003e\n \u003ch3 class=\"comparisonTable-feature-title\"\u003eBug Fixes\u003c\/h3\u003e\n \u003c\/div\u003e\n \u003cp class=\"comparisonTable-feature-description\"\u003eOngoing resolution of reported issues to keep your device stable and reliable for as long as you use it.\u003c\/p\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"comparisonTable-feature-box\"\u003e\n \u003cdiv class=\"comparisonTable-feature-header\"\u003e\n \u003cspan class=\"comparisonTable-feature-icon\"\u003e✓\u003c\/span\u003e\n \u003ch3 class=\"comparisonTable-feature-title\"\u003eSoftware Updates\u003c\/h3\u003e\n \u003c\/div\u003e\n \u003cp class=\"comparisonTable-feature-description\"\u003eRegular firmware and software releases with performance improvements and refinements to existing tools.\u003c\/p\u003e\n \u003c\/div\u003e\n\n\n\n\n\n\n\u003c\/div\u003e\n\u003c!-- End Feature Grid --\u003e\n\n\n\u003cdiv class=\"grid\" style=\"margin-top: 2em;\"\u003e\n \u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n \u003ch2\u003e\u003cstrong\u003eWhat's included\u003c\/strong\u003e\u003c\/h2\u003e\n \u003cul\u003e\n \u003cli\u003e\u003cstrong\u003e1x MACOBOX\u003c\/strong\u003e\u003c\/li\u003e\n \u003cli\u003e1x Sensepeek PCBite kit with 4x SQ10 probes and test wires\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e1x AllSocket eMMC Reader\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e1x ANENG Pen-style multimeter\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e3x SOP Flash Sockets\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e1x SPI Clips\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e3x Female-Male, Male-Male, Female-Female Dupont Connectors\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e1x 47 piece precision electric screw-driver + opening kit\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e1x Jumper Kit\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e1x Additional Portable Plate\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e1x Power Supply + USB-C Barrel Connector\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n \u003ch2\u003e\u003cstrong\u003eTechnical Specifications\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n \u003cul\u003e\n \u003cli\u003e \u003cb\u003eProcessor\u003c\/b\u003e: Cortex-A53 @ 1.5GHz\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eMemory:\u003c\/strong\u003e 4GB\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eStorage:\u003c\/strong\u003e 256GB\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eConnectivity:\u003c\/strong\u003e 4x USB Ports, 1x LAN, WIFI, BLE\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eSupported Protocols:\u003c\/strong\u003e UART, JTAG. SPI, I2C, SWD\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eSupported Levels: \u003c\/strong\u003e1.8V, 2.5V, 3.3V, 5V\u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eBattery:\u003c\/strong\u003e 10mAh Internal Battery\u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eDimensions:\u003c\/strong\u003e 22x 18 x 5cm\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003ch2\u003e\u003cstrong\u003eMACOBox Resources\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n \u003cul\u003e\n \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/mindstormsecurity.com\/product\/macobox\/\" target=\"_blank\"\u003eMACOBOX Official Site\u003c\/a\u003e\u003c\/li\u003e\n \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/mindstormsecurity.com\/docs\/macobox-changelog\/\" target=\"_blank\"\u003eMACOBOX Development Changelog\u003c\/a\u003e\u003c\/li\u003e\n \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/mindstormsecurity.com\/docs-category\/macobox_user_manual\/\" target=\"_blank\"\u003eMACOBOX User Manual\u003c\/a\u003e\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n\u003c\/div\u003e\n","brand":"Mindstorm Security","offers":[{"title":"Default Title","offer_id":50531140895067,"sku":"MACOBOX","price":9700.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/MacoBox---Standalone.png?v=1746622691"},{"product_id":"whidboard-pro","title":"WHIDBoard Pro","description":"\u003cdiv class=\"contentGroup\"\u003e\n \u003cp\u003eAuditing hardware and embedded devices has a well-earned reputation of being difficult because it is truly full-stack: it requires knowledge and tools across several disciplines: electronics, hardware, firmware and software.\u003c\/p\u003e\n \u003cp\u003eOften, hardware auditors are defeated not by the device they're testing, but by their own tools: a missing adaptor, inadequate power supplies, out-of-production devices, repetitive manual tasks prone to error, or the almost impossible task of maintaining an up-to-date and stable linux environment.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c!-- START Wide Quote --\u003e \n\u003cdiv class=\"wide-quote\"\u003e\n \u003cvideo autoplay=\"autoplay\" loop=\"loop\" muted=\"\" playsinline=\"\" preload=\"auto\" poster=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/WHIDBoard---Wide-Quote.jpg?v=1765527488\"\u003e\n \u003csource src=\"https:\/\/cdn.shopify.com\/videos\/c\/o\/v\/f1a0cda3b1f84f31abf8f066c3f66f9e.mp4\" type=\"video\/mp4\"\u003e\u003c\/video\u003e\n \u003cspan\u003e▰BUILT WITH EXPERTISE\u003cbr\u003eTRUSTED BY PROFESSIONAL HACKERS▰\u003c\/span\u003e \n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n \u003cp\u003eThe WHIDBoard was born out of necessity by renouned hardware-hacker \u0026amp; educator Luca Bongiorni - as a real-world, all-in-one, reliable solution for offensive hardware pentesting. Its philosophy is to provide \u003cb\u003eeverything you need\u003c\/b\u003e across the \u003cb\u003efull-stack\u003c\/b\u003e without getting in your way, or forcing you to change your habits work. \u003cb\u003eHere's what it provides: \u003c\/b\u003e\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\" style=\"margin-top: 2em; width:95%; margin-left: auto; margin-right: auto;\"\u003e\n \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n \u003ch3\u003ePHYSICAL LAYER: INTERFACE DISCOVERY\u003c\/h3\u003e\n \u003cp\u003eThe WHIDBoard supports multiple onboard \u003cb\u003elogic levels\u003c\/b\u003e, \u003cb\u003epin enumeration\u003c\/b\u003e for \u003cb\u003eautomated discovery\u003c\/b\u003e of interfaces, and an 8-channel \u003cb\u003elogic analyser\u003c\/b\u003e.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n \u003ch3\u003ePROTOCOL LAYER: COMMUNICATION\u003c\/h3\u003e\n \u003cp\u003eWHIDBoard is \u003cb\u003efully integrated\u003c\/b\u003e into \u003ca href=\"https:\/\/tsurugi-linux.org\" target=\"_blank\"\u003eTsurugi Linux\u003c\/a\u003e, the leading distro for digital forensics. Every tool for every interface is available, and guaranteed to be stable.\u003c\/p\u003e\n \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\" style=\"margin-top: 2em; width:95%; margin-left: auto; margin-right: auto;\"\u003e\n \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n \u003ch3\u003eFIRMWARE LAYER: EXFIL \u0026amp; ANALYSIS\u003c\/h3\u003e\n \u003cp\u003eThe WHIDBoard provides all necessary tools for exfiltration and analysis: namp, wireshark, ghidra, ZAP Proxy, binwarl, unblob - and many more.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n \u003ch3\u003eSOFTWARE LAYER: EXPLOIT\u003c\/h3\u003e\n \u003cp\u003eWhatever your goal: device hardening, credential exfiltration, low-level debugging, auditing or forensics, the WHIDBoard provides everything you need.\u003c\/p\u003e\n \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n \u003cp\u003eLab401 is proud to be the official manufacturer and exclusive distributor of the \u003cb\u003eWHIDBoard Pro Kit\u003c\/b\u003e. The kit includes the WHIDBoard itself, hand-picked accessories and a battle-ready road-case. It's made for the on-the-go hacker, and built to last.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n \u003ch2\u003eWHIDBOARD: HARDWARE HACKING MADE EASY\u003c\/h2\u003e\n \u003cp\u003eThe philosophy of the WHIDBoard is to abstract the difficult parts of hardware hacking - and allow you to to concentrate on hacking your target device. It removes the need to collect dozens of adaptors, gadgets and gizmos; you no longer need to spend hours trying to maintain your linux environment; your days of debugging your debugging tools are over.\u003c\/p\u003e\n \u003cp\u003eCheck out \u003cb\u003ereal-world\u003c\/b\u003e demonstrations of the WHIDBoard below; over 30 minutes, the tool's creator, Luca Bongiorni walks you through the device, how it works, and real-world examples of device hacking.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cvideo lite-youtube-playlist params=\"rel=0\" thumb-layout=\"vertical\" auto-play-thumb=\"true\" class=\"videoEmbed\"\u003e\n \u003cvideo playlist-entry params=\"rel=0\" videotitle=\"WHIDBoard: Product Introduction\" videodescription=\"Learn how the WHIDBoard can super-charge your hardware hacking work-flow\" videoid=\"5qwY6cdCKJo\" posterquality=\"hqdefault\"\u003e \u003c\/video\u003e\n \u003cvideo playlist-entry videotitle=\"Hardware Hacking with WHIDBoard\" videodescription=\"Deep-dive the WHIDBoard's features, with real-world targets and actual examples from in the field.\" videoid=\"0IkFaHAO8i0\" posterquality=\"hqdefault\"\u003e \u003c\/video\u003e\n \u003cvideo playlist-entry params=\"rel=0\" videotitle=\"WHIDBoard Pro Kit: Unboxing\" videodescription=\"The WHIDBoard Pro Kit includes everything you need for hardware hacking in a battle-ready case.\" videoid=\"fxfbdM2vdak\" posterquality=\"hqdefault\"\u003e \u003c\/video\u003e\n\u003c\/video\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n \u003ch2\u003eDISCOVER THE WHIDBOARD\u003c\/h2\u003e\n \u003cp\u003eIt might look like a simple PCB, but the WHIDBoard is no less than 15-tools in one. Check out each feature below:\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\" style=\"margin-top: 2em\"\u003e\n \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-third text-left\"\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"1\"\u003e\n \u003ch3\u003e1. Pin Enumerator\u003c\/h3\u003e\n \u003cp\u003ePin Enumeration means that the WHIDBoard figures out what you've got plugged in. Connect suspicious pins, and the WHIDBoard does the rest.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-third text-left\"\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"2\"\u003e\n \u003ch3\u003e2. Built-in level-shifters\u003c\/h3\u003e\n \u003cp\u003eOnboard support for all standard power levels: 1.8V, 2.5V, 3.3V and VREF. No more external supplies, no more common ground problems.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-third text-left\"\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"3\"\u003e\n \u003ch3\u003e3. Interface with everything\u003c\/h3\u003e\n \u003cp\u003eNative support for UART, SPI, I2C, SWD and JTAG. All of the accessories, clips and cables that you need are included in the WHIDBoard Pro Kit.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"product-image-container\" style=\"margin: 0em;\"\u003e\n \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/WHIDBoard---Hardware-Hacking-Tool---Topdown.png?v=1765464695\" alt=\"\"\u003e \n \u003cul class=\"markers-list\"\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"1\" data-x=\"20\" data-y=\"0\"\u003e1\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"2\" data-x=\"51\" data-y=\"21\"\u003e2\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"3\" data-x=\"67\" data-y=\"16\"\u003e3\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"4\" data-x=\"0\" data-y=\"72\"\u003e4\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"5\" data-x=\"88\" data-y=\"61\"\u003e5\u003c\/li\u003e\n \u003cli class=\"feature-marker\" data-feature-id=\"6\" data-x=\"48\" data-y=\"87\"\u003e6\u003c\/li\u003e\n \u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\" style=\"margin-top: -1em\"\u003e\n \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-third text-left\"\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"4\"\u003e\n \u003ch3\u003e4. Fully-supported OS + Tools\u003c\/h3\u003e\n \u003cp\u003eThe WHIDBoard's tools are fully integrated into TSURUGI Linux. Everything you need in an updated, stable environment. No more losing days fighting with package conflicts.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-third text-left\"\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"5\"\u003e\n \u003ch3\u003e5. On-board Logic Analyser\u003c\/h3\u003e\n \u003cp\u003ePerform real-time debugging and signal analysis. The on-board 8 channel analyser can be used \u003ci\u003esimultaneously\u003c\/i\u003e with the other tools for full-stack debugging.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv style=\"text-align: start;\" class=\"grid-item small--one-whole medium--one-whole large--one-third text-left\"\u003e\n \u003cdiv class=\"feature-item\" data-feature-id=\"6\"\u003e\n \u003ch3\u003e6. Protective Tray\u003c\/h3\u003e\n \u003cp\u003eDon't kill your hardware: The WHIDBoard comes with a field-case to protect against shorts and mishaps on the desk, and a rock-solid road-case for when you're on the move.\u003c\/p\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n \u003ch2\u003eDISCOVER THE WHIDBOARD WORKFLOW ADVANTAGE\u003c\/h2\u003e\n \u003cp\u003eIt's hard to emphasise how much the WHIDBoard removes complexity and frustration from the traditional hardware audit workflow.\u003c\/p\u003e\n \u003cp\u003eOn the physical side, the unification of multiple tools, automatic protocol detection via the pin enumerator, debugging via logic analyser, onboard level-shifting and multi-interface connectors removes \u003ci\u003ehours\u003c\/i\u003e of setup, iteration and error-prone repetitive manual tasks.\u003c\/p\u003e\n \u003cp\u003eOn the software side, WHIDBoard's integration into TSURUGI Linux means you've got a perfectly stable work environment that will always be up to date, have everything you need and never break.\u003c\/p\u003e\n \u003cp\u003eWant to \u003cb\u003esee the difference\u003c\/b\u003e between \u003cb\u003ea WHIDBoard analysis and a traditional analysis?\u003c\/b\u003e We performed identical audits using traditional tools and the WHIDBoard - and \u003cb\u003ethe results speak for themselves\u003c\/b\u003e. The \u003cb\u003eWHIDBoard\u003c\/b\u003e was \u003cb\u003e4 times faster\u003c\/b\u003e saving over \u003cb\u003e4 hours\u003c\/b\u003e of real world time. Check out the results below.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"pv-widget\"\u003e\n \u003cdiv class=\"pv-page-container\"\u003e\n \u003cdiv class=\"pv-comparison-container\"\u003e\n \u003c!-- Timeline 1: With WHIDBoard --\u003e \n \u003cdiv class=\"pv-timeline-column\"\u003e\n \u003cdiv class=\"pv-timeline-header pv-whidboard\"\u003e\n \u003cspan class=\"pv-timeline-badge\"\u003eOptimised\u003c\/span\u003e \n \u003ch2 class=\"pv-subtitle\"\u003eWith WHIDBoard\u003c\/h2\u003e\n \u003c\/div\u003e\n \u003c!-- Physical Layer --\u003e \n \u003cdiv class=\"pv-process-container pv-auto-collapse\" data-trigger=\"reveal\" data-show-times=\"true\" data-sync-group=\"comparison\" data-chain=\"whidboard\" data-chain-order=\"1\"\u003e\n \u003cdiv class=\"pv-process-header\"\u003ePhysical Layer: PCB Inspection \u0026amp; Datasheet Analysis\u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eInspect PCB\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003ePCB exposed and ready for analysis\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003eOpen device\u003c\/li\u003e\n \u003cli\u003eExpose main PCB\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eIdentify major components\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eKey components identified\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003eFind Processor, Microprocessors, Interface Controllers\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eFind datasheets\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eDatasheets located\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"20 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eAnalyse Datasheet\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eDatasheet analysis complete\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eIdentify Interfaces\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eInterfaces mapped\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eIdentify Pins\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003ePin configuration documented\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Protocol Layer --\u003e \n \u003cdiv class=\"pv-process-container pv-auto-collapse\" data-trigger=\"reveal\" data-show-times=\"true\" data-chain=\"whidboard\" data-chain-order=\"2\"\u003e\n \u003cdiv class=\"pv-process-header\"\u003eProtocol Layer\u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"2 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConnect to WHIDBoard\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eWHIDBoard connected\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003eConnect first interface to WHIDBoard Enumerator\u003c\/li\u003e\n \u003cli\u003eSet Level jumper\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"2 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eRun Enumerator Tool\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eEnumerator initialised\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-start\" data-delay=\"750\" data-time=\"2 minutes\" data-loop-iterations=\"2\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConfigure Settings\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eSettings configured\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-middle\" data-delay=\"750\" data-time=\"30 seconds\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eTurn on Target Device\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eDevice powered on\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-middle\" data-delay=\"750\" data-time=\"10 seconds\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eCheck for Confirmed Connection\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eConnection status checked\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-end\" data-delay=\"750\" data-time=\"10 seconds\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eModify Settings\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eSettings adjusted\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 seconds\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConnection Established\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eProtocol layer complete ✓\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Firmware Layer --\u003e \n \u003cdiv class=\"pv-process-container pv-auto-collapse\" data-trigger=\"reveal\" data-show-times=\"true\" data-chain=\"whidboard\" data-chain-order=\"3\"\u003e\n \u003cdiv class=\"pv-process-header\"\u003eFirmware Layer\u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"2 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConnect Device to Dedicated Interface Connector\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eDevice connected\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eRun exfiltration software\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eExfiltration software running\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eExtract Firmware\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eFirmware extracted\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003eExtract credentials\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eExfiltrate Software\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eSoftware exfiltrated\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003eExtract credentials\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eSetup tunnels\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eTunnels configured\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eEstablish SSH \/ Root\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eRoot access established\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Software Layer --\u003e \n \u003cdiv class=\"pv-process-container pv-auto-collapse\" data-trigger=\"reveal\" data-show-times=\"true\" data-chain=\"whidboard\" data-chain-order=\"4\"\u003e\n \u003cdiv class=\"pv-process-header\"\u003eSoftware Layer\u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"2 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConnect to Target Device\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eConnected to target\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eDeploy Solution\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eSolution deployed\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003ePatch\u003c\/li\u003e\n \u003cli\u003eNew Firmware\u003c\/li\u003e\n \u003cli\u003eSSH Tunnel\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"375\" data-time=\"—\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eFinished\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eAssessment complete ✓\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Summary for WHIDBoard --\u003e \n \u003cdiv class=\"pv-timeline-summary pv-whidboard\"\u003e\n \u003cdiv class=\"pv-summary-label\"\u003eTotal Time\u003c\/div\u003e\n \u003cdiv class=\"pv-summary-time\" data-timeline=\"whidboard\"\u003e~1 hour 42 minutes\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Timeline 2: Traditional Workflow --\u003e \n \u003cdiv class=\"pv-timeline-column\"\u003e\n \u003cdiv class=\"pv-timeline-header pv-traditional\"\u003e\n \u003cspan class=\"pv-timeline-badge\"\u003eTraditional\u003c\/span\u003e \n \u003ch2 class=\"pv-subtitle\"\u003eTraditional Workflow\u003c\/h2\u003e\n \u003c\/div\u003e\n \u003c!-- Physical Layer --\u003e \n \u003cdiv class=\"pv-process-container pv-auto-collapse\" data-trigger=\"reveal\" data-show-times=\"true\" data-sync-group=\"comparison\" data-chain=\"traditional\" data-chain-order=\"1\"\u003e\n \u003cdiv class=\"pv-process-header\"\u003ePhysical Layer: PCB Inspection \u0026amp; Datasheet Analysis\u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eInspect PCB\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003ePCB exposed and ready for analysis\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003eOpen device\u003c\/li\u003e\n \u003cli\u003eExpose main PCB\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eIdentify major components\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eKey components identified\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003eFind Processor, Microprocessors, Interface Controllers\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eFind datasheets\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eDatasheets located\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"20 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eAnalyse Datasheet\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eDatasheet analysis complete\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eIdentify Interfaces\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eInterfaces mapped\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eIdentify Pins\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003ePin configuration documented\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Protocol Layer --\u003e \n \u003cdiv class=\"pv-process-container pv-auto-collapse\" data-trigger=\"reveal\" data-show-times=\"true\" data-chain=\"traditional\" data-chain-order=\"2\"\u003e\n \u003cdiv class=\"pv-process-header\"\u003eProtocol Layer\u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"1 minute\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eIdentify Required Power Level\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003ePower requirements determined\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eFind \/ Setup Appropriate Power Supply\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003ePower supply configured\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eIdentify target protocols\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eProtocols identified\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-start\" data-delay=\"1500\" data-time=\"30 minutes\" data-loop-iterations=\"3\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConnect adaptor for the test protocol\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eAdaptor connected\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-middle\" data-delay=\"1125\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConnect device pins to adaptor protocol\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003ePins connected\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-middle\" data-delay=\"1125\" data-time=\"15 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eSetup the adaptor environment\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eEnvironment configured\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-middle\" data-delay=\"1125\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eRun adaptor software\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eSoftware executed\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-middle\" data-delay=\"750\" data-time=\"2 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eCheck result\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eResult analysed\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-middle\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eCheck wiring\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eWiring verified\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-middle\" data-delay=\"750\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eChange wiring position\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eWiring adjusted\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step pv-loop-end\" data-delay=\"1125\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eRepeat until exhausted or result found\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eIteration complete\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConnection Established\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eProtocol layer complete ✓\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Firmware Layer --\u003e \n \u003cdiv class=\"pv-process-container pv-auto-collapse\" data-trigger=\"reveal\" data-show-times=\"true\" data-chain=\"traditional\" data-chain-order=\"3\"\u003e\n \u003cdiv class=\"pv-process-header\"\u003eFirmware Layer\u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"2 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConnect Device to Dedicated Interface Connector\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eDevice connected\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eSetup linux environment\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eLinux environment ready\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eUpdated tools\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eTools updated\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eSanity check environment\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eEnvironment verified\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eRun exfiltration software\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eExfiltration software running\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eExtract Firmware\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eFirmware extracted\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003eExtract credentials\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eExfiltrate Software\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eSoftware exfiltrated\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003eExtract credentials\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eSetup tunnels\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eTunnels configured\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"5 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eEstablish SSH \/ Root\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eRoot access established\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Software Layer --\u003e \n \u003cdiv class=\"pv-process-container pv-auto-collapse\" data-trigger=\"reveal\" data-show-times=\"true\" data-chain=\"traditional\" data-chain-order=\"4\"\u003e\n \u003cdiv class=\"pv-process-header\"\u003eSoftware Layer\u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eConnect to Target Device\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eConnected to target\u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"1125\" data-time=\"10 minutes\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eDeploy Solution\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eSolution deployed\u003c\/div\u003e\n \u003cdiv class=\"pv-step-details\" data-state=\"closed\"\u003e\n \u003cdiv class=\"pv-details-header\"\u003eSub-tasks\u003c\/div\u003e\n \u003cdiv class=\"pv-details-content\"\u003e\n \u003cul\u003e\n \u003cli\u003ePatch\u003c\/li\u003e\n \u003cli\u003eNew Firmware\u003c\/li\u003e\n \u003cli\u003eSSH Tunnel\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"pv-step\" data-delay=\"375\" data-time=\"—\"\u003e\n \u003cdiv class=\"pv-step-title\"\u003eFinished\u003c\/div\u003e\n \u003cdiv class=\"pv-step-result\"\u003eAssessment complete ✓\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Summary for Traditional --\u003e \n \u003cdiv class=\"pv-timeline-summary pv-traditional\"\u003e\n \u003cdiv class=\"pv-summary-label\"\u003eTotal Time\u003c\/div\u003e\n \u003cdiv class=\"pv-summary-time\" data-timeline=\"traditional\"\u003e~5 hours 43 minutes\u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c!-- Time Saved Summary --\u003e \n \u003cdiv class=\"pv-time-saved-banner\"\u003e\n \u003cdiv class=\"pv-time-saved-content\"\u003e \u003cspan class=\"pv-time-saved-label\"\u003eTime Saved with WHIDBoard\u003c\/span\u003e \u003cspan class=\"pv-time-saved-value\"\u003e~4 hours 1 minute\u003c\/span\u003e \u003cspan class=\"pv-time-saved-percent\"\u003e(70% faster)\u003c\/span\u003e \u003c\/div\u003e\n \u003c\/div\u003e\n --\u0026gt; \n \u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n \u003ch2\u003eBACKED BY REAL-WORLD TRAINING \u0026amp; CERTIFICATION\u003c\/h2\u003e\n \u003cp\u003eUnlike piecemeal or homespun solutions, WHIDBoard is a reliable, maintained solution, used by thousands of professionals. Every year, \u003cb\u003ehundreds\u003c\/b\u003e of people are \u003cb\u003etrained and certified\u003c\/b\u003e on the WHIDBoard architecture. If you're looking to become a Certified Hardware Hacker, or get hands-on training on hacking real-world hardware, training and certification is available via \u003cb\u003ein-person courses\u003c\/b\u003e and via \u003cb\u003eonline, self-paced\u003c\/b\u003e curriculums.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n \u003cp\u003eLab401 is proud to be the official manufacturer and exclusive distributor of the \u003cb\u003eWHIDBoard Pro Kit\u003c\/b\u003e. The kit includes the WHIDBoard itself, hand-picked accessories and a battle-ready road-case. It's made for the on-the-go hacker, and built to last.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\" style=\"margin-top: 2em;\"\u003e\n \u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n \u003ch2\u003e\u003cstrong\u003eWhat's included\u003c\/strong\u003e\u003c\/h2\u003e\n \u003cul\u003e\n \u003cli\u003e\u003cstrong\u003e1x WHIDBoard\u003c\/strong\u003e\u003c\/li\u003e\n \u003cli\u003e1x Protective Case\u003c\/li\u003e\n \u003cli\u003e2x SOIC\/SOP8 Flash Clip\/Board\/Cable (Rev3 + Rev4)\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e1x SOP16 to DIP 8 Flash Clip\/Board\/Cable\u003c\/li\u003e\n \u003cli\u003e1x SOP8 \u0026amp; SOP16 to DIP 8 Flash Clip\/Board\/Cable\u003c\/li\u003e\n \u003cli\u003e1x SOP8\/WSON8\/QDFN8 Programming Socket\u003c\/li\u003e\n \u003cli\u003e2x Universal IC Clamp + Wires (FtF,FtM)\u003c\/li\u003e\n \u003cli\u003e1x Reinforced ABS Roadcase + Protective Foam\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003ch2\u003e\u003cstrong\u003eHardware Specifications\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n \u003cul\u003e\n \u003cli\u003e \u003cb\u003ePin Enumerator\u003c\/b\u003e: 24-channel (JTagulator Compatible)\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eLogic Analyser:\u003c\/strong\u003e 8-channel, 24MHz\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eProtocols:\u003c\/strong\u003e UART, SPI, I2C, JTAG, SWD\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eLogic Levels:\u003c\/strong\u003e 1.8V, 2.5V, 3.3V, VREF\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eSupported Protocols:\u003c\/strong\u003e UART, JTAG. SPI, I2C, SWD\u003cbr\u003e \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eConnectivity:\u003c\/strong\u003eUSB-C\u003cbr\u003e \u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\"\u003e\n \u003ch2\u003e\u003cstrong\u003eSoftware Specifications\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n \u003cul\u003e\n \u003cli\u003e \u003cb\u003eOfficial Distro\u003c\/b\u003e: TSURUGI Linux \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eTools:\u003c\/strong\u003e flashrom, OpenOCD, SNANDer, UFPROG, Pulseview, Sigrock, fxload, propoloader, openspin.. \u003c\/li\u003e\n \u003cli\u003e \u003cstrong\u003eAudit \u0026amp; Exfil tools:\u003c\/strong\u003e Nmap, Zenmap, wireshark, ghidra, ZAP Proxy, binwalk, unblob \u003c\/li\u003e\n \u003c\/ul\u003e\n \u003ch2\u003e\u003cstrong\u003eWHIDBoard Resources\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n \u003cul\u003e\n \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/github.com\/whid-injector\/WHIDBOARD\" target=\"_blank\"\u003eWHIDBoard Repository\u003c\/a\u003e\u003c\/li\u003e\n \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/github.com\/whid-injector\/WHIDBOARD\/blob\/main\/README.md\" target=\"_blank\"\u003eWHIDBoard README\u003c\/a\u003e\u003c\/li\u003e\n \u003cli\u003e \u003ca href=\"https:\/\/tsurugi-linux.org\/downloads.php\" target=\"_blank\"\u003eTsurugi Linux\u003c\/a\u003e OS Images\u003c\/li\u003e\n \u003cli\u003e\u003ca rel=\"noopener\" href=\"https:\/\/www.whid.ninja\/store\" target=\"_blank\"\u003eWHIDBoard Training Resources\u003c\/a\u003e\u003c\/li\u003e\n \u003cli\u003e\u003ca rel=\"noopener\" href=\"\/en-de\/blogs\/academy\/hackers-cookbook-exploiting-iot-cooking-appliances-with-whidboard\" target=\"_blank\"\u003eLab401 Academy: \u003ci\u003eThe 2024 Hacker's Cookbook: Exploiting IoT Cooking Appliances with WHIDBOARD \u0026amp; The Hidden Dangers of Buying'em Refurbished\u003c\/i\u003e\u003c\/a\u003e\u003c\/li\u003e\n \u003c\/ul\u003e\n \u003c\/div\u003e\n\u003c\/div\u003e\n","brand":"WHID","offers":[{"title":"Default Title","offer_id":51884697682267,"sku":"WHIDBOARD-PRO","price":295.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/WHIDBoard--Complete-Kit-Square.png?v=1765465610"},{"product_id":"faultycat","title":"Faulty Cat","description":"\u003cdiv class=\"contentGroup\"\u003e\n\u003cp\u003e\u003cstrong\u003eThe FaultyCat is the \"bump key\" of hardware auditing. \u003c\/strong\u003eIt sends high-energy electro-magnetic pulses into target devices, which can cause them to glitch. often revealing encryption keys, bypassing security checks or resetting protection mechanisms.\u003c\/p\u003e\n\u003cp\u003eWhen starting a hardware audit - the FaultyCat should be the\u003cstrong\u003e first tool you reach for\u003c\/strong\u003e: it can be used to quickly check if the target device is protected, and if not, glitch it to reveal secrets or bypass protection.\u003c\/p\u003e\n\u003cp\u003eBuilt on the foundations on an open-source product (the PicoEMP) - the FaultyCat has extra functionality, but remains economical, easy-to-use and safe. \u003cb\u003eVersion 2.2\u003c\/b\u003e adds extended functionality.\u003c\/p\u003e\n\u003cp\u003eIt's portable and self-contained - it's powered by 3xAA batteries - so you're never caught short.\u003cbr\u003eThe onboard RapsberryPi controller is fully accessible and programmable by the user for custom functionality.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\" style=\"margin-top: 2em;\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left product-image-container\"\u003e\n\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/FaultyCat---Feature---2.png?v=1775083081\"\u003e\n\u003cul class=\"markers-list\"\u003e\n\u003cli data-y=\"5\" data-x=\"64\" data-feature-id=\"1\" class=\"feature-marker\"\u003e1\u003c\/li\u003e\n\u003cli data-y=\"30\" data-x=\"34\" data-feature-id=\"2\" class=\"feature-marker\"\u003e2\u003c\/li\u003e\n\u003cli data-y=\"41\" data-x=\"38\" data-feature-id=\"3\" class=\"feature-marker\"\u003e3\u003c\/li\u003e\n\u003cli data-y=\"21\" data-x=\"31\" data-feature-id=\"4\" class=\"feature-marker\"\u003e4\u003c\/li\u003e\n\u003cli data-y=\"14\" data-x=\"28\" data-feature-id=\"5\" class=\"feature-marker\"\u003e5\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\" style=\"text-align: start;\"\u003e\n\u003cdiv data-feature-id=\"1\" class=\"feature-item\"\u003e\n\u003ch3\u003e1. Direct Voltage glitching\u003c\/h3\u003e\n\u003cp\u003ePrecisely glitch and spike signals such as reset or voltage to manipulate the target system\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv data-feature-id=\"2\" class=\"feature-item\"\u003e\n\u003ch3\u003e2. External Triggers\u003c\/h3\u003e\n\u003cp\u003eTrigger the FaultyCat manually or electronically device via dedicated pins. Use external triggers such as timers or sensors.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv data-feature-id=\"3\" class=\"feature-item\"\u003e\n\u003ch3\u003e3. Voltage Triggers\u003c\/h3\u003e\n\u003cp\u003eMonitor the target's voltage levels and trigger at glitch at preset voltage levels. Allows for triggering glitches during critical phases, such as device boot.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv data-feature-id=\"4\" class=\"feature-item\"\u003e\n\u003ch3\u003e4. Analog Input\u003c\/h3\u003e\n\u003cp\u003eMonitor and log analog data from the target; build a knowledge-base of actions and responses to make repeatable operations.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv data-feature-id=\"5\" class=\"feature-item\"\u003e\n\u003ch3\u003e5. JTAG\/JWD Scanner\u003c\/h3\u003e\n\u003cp\u003eBuilt-in JTAG\/JWD Scanner finds and detects hidden JTAG\/JWD pads to find undocumented debug interfaces.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch2\u003e\u003cstrong\u003eWhat's included\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e1x FaultyCat 2.2\u003c\/strong\u003e\u003c\/li\u003e\n\u003cli\u003e1x Inductor Tip\u003c\/li\u003e\n\u003cli\u003e1x USB-C Cable\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch2\u003e\u003cstrong\u003eTechnical Resources\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/github.com\/ElectronicCats\/faultycat\/wiki\" rel=\"noopener\" target=\"_blank\"\u003eUser Manual \/ Wiki\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/github.com\/ElectronicCats\/faultycat?tab=readme-ov-file\" rel=\"noopener\" target=\"_blank\"\u003eGitHub Repository\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/assistant\" rel=\"noopener\" target=\"_blank\"\u003eDoppelgänger Assistant Documentation and Configuration\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/flashing_firmware\" rel=\"noopener\" target=\"_blank\"\u003eFirmware \u0026amp; Flashing Documentation\u003c\/a\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n\u003ch2\u003eWhat is hardware hacking?\u003c\/h2\u003e\n\u003cp\u003eHardware Auditing techniques can be grouped into two categories: Side-Channel Attacks (SCA) and Electro-magnetic Fault Injection (EMFI). Which technique you need depends a lot on the target device. If the chip is locked but you've got access to its power, clock and data lines - Side Channel Attacks would be possible and effective.\u003c\/p\u003e\n\u003cp\u003eHowever, if the target is protected: hardened against side-channel attacks, or its power, clock and data lines aren't exposed, or you cannot modify the device: EMFI would be the best candidate.\u003c\/p\u003e\n\u003cp\u003eSide-Channel attacks capture privileged data by using an unprotected or unexpected source. Imagine two people talking in a glass sound-proof room: lip-reading allows us to derive what is being said via the visual prompts - a \"side-channel\" - as opposed to hearing it, the \"protected channel\". In hardware, a common example is extracting encryption keys by monitoring micro-fluctuations in the power-consumption when the processor is calculating them.\u003c\/p\u003e\n\u003cp\u003eSide-Channel attacks are not necessarily passive: side-channel extraction can be induced by glitching the target device: briefly spiking power or manipulating the target's clock line can evoke unexpected behaviour, which leads to leaks. In the contect of the glass room: turning off the lights or tapping on the glass may provoke a different behavior from the people talking - they may reveal different or unexpected information.\u003c\/p\u003e\n\u003cp\u003eElectro-magnetic Fault Injection creates faults in a target system without touching it - by directing high-energy electro-magnetic pulses into the chip. These pulses can cause glitches and unexpected behavior. Timing glitches to match important chip processes can allow you to jump or bypass normal behavior - like password verification.\u003c\/p\u003e\n\u003cp\u003eThere are two approaches to EMFI: using ultra-precise, ultra-sensitive devices (such as the ChipSHOUTER) to create highly accurate, repeatable experiments. The second approach is to use a simple device designed to send large electrical pulses to cause unexpected behavior.\u003c\/p\u003e\n\u003cp\u003eThe FaultyCat wiki has extensive information on EMFI Glitching and what it can achieve - \u003ca href=\"https:\/\/github.com\/ElectronicCats\/faultycat\/wiki\/1.-Understanding-Faulty-Cat#what-is-emfi-and-how-it-works\" rel=\"noopener\" target=\"_blank\"\u003eclick here for more information.\u003c\/a\u003e\u003c\/p\u003e\n\u003ch2\u003eHardware Audit Lifecycle\u003c\/h2\u003e\n\u003cp\u003eKey to understanding hardware auditing is the lifecycle. Typically - the end goal is total device control - dumping firmware, bootloaders, or getting a root shell.\u003c\/p\u003e\n\u003cp\u003eIf your target device has no protection: you can concentrate on firmware extraction.\u003cbr\u003eIf the target is locked, you'll need to unlock it, typically via Side-Channel attacks and tools.\u003cbr\u003eLikewise, if it's protected, you'll need to use EMFI to bypass protection, and then use Side Channel Attacks to unlock the target, before extracting firmware.\u003c\/p\u003e\n\u003cp\u003eThe following table provides a summary of the Hardware Audit Lifecycle.\u003c\/p\u003e\n\u003cdiv class=\"hwaudit\"\u003e\n \u003cdiv class=\"hwaudit__grid\"\u003e\n\n \u003c!-- ============ HARDENED ============ --\u003e\n \u003cdiv class=\"hwaudit__col\"\u003e\n \u003ch2 class=\"hwaudit__title\"\u003eHardened Devices\u003c\/h2\u003e\n\n \u003cdiv class=\"hwaudit__tags\"\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--red\"\u003eRestrictions\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eHardened Protection\u003c\/span\u003e\n \u003cspan\u003eNo exposed traces\u003c\/span\u003e\n \u003cspan\u003eCannot modify hardware\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eApproach\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items hwaudit__tag-items--bold\"\u003e\n \u003cspan\u003eEMFI\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eTools\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eChipShouter\u003c\/span\u003e\n \u003cspan\u003eFaultyCat\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__chip\"\u003e\n \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Chip-Protected.png?v=1775740137\" alt=\"Hardened chip\"\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__bottom\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--purple\"\u003eTechniques\u003c\/span\u003e\n\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/EMFI-4.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eFault Injection\u003c\/strong\u003e\n \u003cspan\u003eNon-invasive, non-destructive\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/EMFI-3.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eBit flips, register corruption\u003c\/strong\u003e\n \u003cspan\u003eForced unexpected conditions\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/EMFI-2.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eRoutine \u0026amp; Instruction Skips\u003c\/strong\u003e\n \u003cspan\u003eGlitch into unauthorised code\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003c!-- ============ PROTECTED ============ --\u003e\n \u003cdiv class=\"hwaudit__col\"\u003e\n \u003ch2 class=\"hwaudit__title\"\u003eProtected Devices\u003c\/h2\u003e\n\n \u003cdiv class=\"hwaudit__tags\"\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--red\"\u003eRestrictions\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eNo open interfaces\u003c\/span\u003e\n \u003cspan\u003eFirmware protection\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--green\"\u003eWeaknesses\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eExposed power rails\u003c\/span\u003e\n \u003cspan\u003eExposed clock rails\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eApproach\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items hwaudit__tag-items--bold\"\u003e\n \u003cspan\u003eSide Channel Techniques\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eTools\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eChipWhisperer HuskyPlus\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__chip\"\u003e\n \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Chip-Locked.png?v=1775740137\" alt=\"Protected chip\"\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__bottom\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--purple\"\u003eTechniques\u003c\/span\u003e\n\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Glitch-Power-Analysis.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003ePower Analysis\u003c\/strong\u003e\n \u003cspan\u003eFor key + secrets extraction\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Glitch-Power.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003ePower Glitching\u003c\/strong\u003e\n \u003cspan\u003eBypass protection routines\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Glitch-Clock.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eClock Glitching\u003c\/strong\u003e\n \u003cspan\u003eBypass protection routines\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003c!-- ============ UNPROTECTED ============ --\u003e\n \u003cdiv class=\"hwaudit__col\"\u003e\n \u003ch2 class=\"hwaudit__title\"\u003eUnprotected Devices\u003c\/h2\u003e\n\n \u003cdiv class=\"hwaudit__tags\"\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--red\"\u003eRestrictions\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eUnlabeled interfaces\u003c\/span\u003e\n \u003cspan\u003eUndocumented chip\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--green\"\u003eWeaknesses\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eSecurity through obscurity\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eApproach\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items hwaudit__tag-items--bold\"\u003e\n \u003cspan\u003ePin Enumeration\u003c\/span\u003e\u003cbr\u003e\n\t \u003cspan\u003eFirmware Extraction\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eTools\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eWHIDBoard\u003c\/span\u003e\n \u003cspan\u003eMACOBox\u003c\/span\u003e\n \u003cspan\u003eBusPirate\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__chip\"\u003e\n \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Chip-Unprotected.png?v=1775740137\" alt=\"Unprotected chip\"\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__bottom\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--purple\"\u003eTechniques\u003c\/span\u003e\n\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/HW-Pin-Enumeration.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003ePin Enumeration\u003c\/strong\u003e\n \u003cspan\u003eAutomatically detect lines\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/HW-Logic.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eLogic Analyser\u003c\/strong\u003e\n \u003cspan\u003eConvert captures to data\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/HW-Multi-Interface.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eMulti Protocol Support\u003c\/strong\u003e\n \u003cspan\u003eConnect with any interface\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/HW-BaudDetection.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eAuto Speed Detection\u003c\/strong\u003e\n \u003cspan\u003eAutomatically detect speeds\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003c\/div\u003e\n\u003c\/div\u003e\n\u003ch3\u003eCase Study: Hacking an automotive ECU\u003c\/h3\u003e\n\u003cp\u003eIn depth, hands-on presentation using FaultyCat-type product to glitch secrets from an automotive controller circuit.\u003c\/p\u003e\n \u003cfigure style=\"margin-top: 1em;\"\u003e\n \u003cvideo lite-youtube=\"\" videoid=\"0tkdst3JE0g\" posterquality=\"maxresdefault\" params=\"rel=0\"\u003e\n \u003cimg slot=\"image\" src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/YT-Thumb.png?v=1775081615\"\u003e\n \u003c\/video\u003e\n\u003c\/figure\u003e\n\u003c\/div\u003e","brand":"Lab401","offers":[{"title":"Default Title","offer_id":52451564519771,"sku":"EC-FAULTYCAT","price":165.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/FaultyCat---Top.png?v=1775066561"},{"product_id":"faulty-cat-copy","title":"Faulty Cat (Copy)","description":"\u003cdiv class=\"contentGroup\"\u003e\n\u003cp\u003e\u003cstrong\u003eThe FaultyCat is the \"bump key\" of hardware auditing. \u003c\/strong\u003eIt sends high-energy electro-magnetic pulses into target devices, which can cause them to glitch. often revealing encryption keys, bypassing security checks or resetting protection mechanisms.\u003c\/p\u003e\n\u003cp\u003eWhen starting a hardware audit - the FaultyCat should be the\u003cstrong\u003e first tool you reach for\u003c\/strong\u003e: it can be used to quickly check if the target device is protected, and if not, glitch it to reveal secrets or bypass protection.\u003c\/p\u003e\n\u003cp\u003eBuilt on the foundations on an open-source product (the PicoEMP) - the FaultyCat has extra functionality, but remains economical, easy-to-use and safe. \u003cb\u003eVersion 2.2\u003c\/b\u003e adds extended functionality.\u003c\/p\u003e\n\u003cp\u003eIt's portable and self-contained - it's powered by 3xAA batteries - so you're never caught short.\u003cbr\u003eThe onboard RapsberryPi controller is fully accessible and programmable by the user for custom functionality.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\" style=\"margin-top: 2em;\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left product-image-container\"\u003e\n\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/FaultyCat---Feature---2.png?v=1775083081\"\u003e\n\u003cul class=\"markers-list\"\u003e\n\u003cli data-y=\"5\" data-x=\"64\" data-feature-id=\"1\" class=\"feature-marker\"\u003e1\u003c\/li\u003e\n\u003cli data-y=\"30\" data-x=\"34\" data-feature-id=\"2\" class=\"feature-marker\"\u003e2\u003c\/li\u003e\n\u003cli data-y=\"41\" data-x=\"38\" data-feature-id=\"3\" class=\"feature-marker\"\u003e3\u003c\/li\u003e\n\u003cli data-y=\"21\" data-x=\"31\" data-feature-id=\"4\" class=\"feature-marker\"\u003e4\u003c\/li\u003e\n\u003cli data-y=\"14\" data-x=\"28\" data-feature-id=\"5\" class=\"feature-marker\"\u003e5\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-half large--one-half text-left\" style=\"text-align: start;\"\u003e\n\u003cdiv data-feature-id=\"1\" class=\"feature-item\"\u003e\n\u003ch3\u003e1. Direct Voltage glitching\u003c\/h3\u003e\n\u003cp\u003ePrecisely glitch and spike signals such as reset or voltage to manipulate the target system\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv data-feature-id=\"2\" class=\"feature-item\"\u003e\n\u003ch3\u003e2. External Triggers\u003c\/h3\u003e\n\u003cp\u003eTrigger the FaultyCat manually or electronically device via dedicated pins. Use external triggers such as timers or sensors.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv data-feature-id=\"3\" class=\"feature-item\"\u003e\n\u003ch3\u003e3. Voltage Triggers\u003c\/h3\u003e\n\u003cp\u003eMonitor the target's voltage levels and trigger at glitch at preset voltage levels. Allows for triggering glitches during critical phases, such as device boot.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv data-feature-id=\"4\" class=\"feature-item\"\u003e\n\u003ch3\u003e4. Analog Input\u003c\/h3\u003e\n\u003cp\u003eMonitor and log analog data from the target; build a knowledge-base of actions and responses to make repeatable operations.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003cdiv data-feature-id=\"5\" class=\"feature-item\"\u003e\n\u003ch3\u003e5. JTAG\/JWD Scanner\u003c\/h3\u003e\n\u003cp\u003eBuilt-in JTAG\/JWD Scanner finds and detects hidden JTAG\/JWD pads to find undocumented debug interfaces.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid\"\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch2\u003e\u003cstrong\u003eWhat's included\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e1x FaultyCat 2.2\u003c\/strong\u003e\u003c\/li\u003e\n\u003cli\u003e1x Inductor Tip\u003c\/li\u003e\n\u003cli\u003e1x USB-C Cable\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"grid-item small--one-whole medium--one-whole large--one-half text-left\"\u003e\n\u003ch2\u003e\u003cstrong\u003eTechnical Resources\u003cbr\u003e\u003c\/strong\u003e\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/github.com\/ElectronicCats\/faultycat\/wiki\" rel=\"noopener\" target=\"_blank\"\u003eUser Manual \/ Wiki\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/github.com\/ElectronicCats\/faultycat?tab=readme-ov-file\" rel=\"noopener\" target=\"_blank\"\u003eGitHub Repository\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/assistant\" rel=\"noopener\" target=\"_blank\"\u003eDoppelgänger Assistant Documentation and Configuration\u003c\/a\u003e\u003c\/li\u003e\n\u003cli\u003e\u003ca href=\"https:\/\/physicalexploit.com\/docs\/products\/code\/flashing_firmware\" rel=\"noopener\" target=\"_blank\"\u003eFirmware \u0026amp; Flashing Documentation\u003c\/a\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"contentGroup\"\u003e\n\u003ch2\u003eWhat is hardware hacking?\u003c\/h2\u003e\n\u003cp\u003eHardware Auditing techniques can be grouped into two categories: Side-Channel Attacks (SCA) and Electro-magnetic Fault Injection (EMFI). Which technique you need depends a lot on the target device. If the chip is locked but you've got access to its power, clock and data lines - Side Channel Attacks would be possible and effective.\u003c\/p\u003e\n\u003cp\u003eHowever, if the target is protected: hardened against side-channel attacks, or its power, clock and data lines aren't exposed, or you cannot modify the device: EMFI would be the best candidate.\u003c\/p\u003e\n\u003cp\u003eSide-Channel attacks capture privileged data by using an unprotected or unexpected source. Imagine two people talking in a glass sound-proof room: lip-reading allows us to derive what is being said via the visual prompts - a \"side-channel\" - as opposed to hearing it, the \"protected channel\". In hardware, a common example is extracting encryption keys by monitoring micro-fluctuations in the power-consumption when the processor is calculating them.\u003c\/p\u003e\n\u003cp\u003eSide-Channel attacks are not necessarily passive: side-channel extraction can be induced by glitching the target device: briefly spiking power or manipulating the target's clock line can evoke unexpected behaviour, which leads to leaks. In the contect of the glass room: turning off the lights or tapping on the glass may provoke a different behavior from the people talking - they may reveal different or unexpected information.\u003c\/p\u003e\n\u003cp\u003eElectro-magnetic Fault Injection creates faults in a target system without touching it - by directing high-energy electro-magnetic pulses into the chip. These pulses can cause glitches and unexpected behavior. Timing glitches to match important chip processes can allow you to jump or bypass normal behavior - like password verification.\u003c\/p\u003e\n\u003cp\u003eThere are two approaches to EMFI: using ultra-precise, ultra-sensitive devices (such as the ChipSHOUTER) to create highly accurate, repeatable experiments. The second approach is to use a simple device designed to send large electrical pulses to cause unexpected behavior.\u003c\/p\u003e\n\u003cp\u003eThe FaultyCat wiki has extensive information on EMFI Glitching and what it can achieve - \u003ca href=\"https:\/\/github.com\/ElectronicCats\/faultycat\/wiki\/1.-Understanding-Faulty-Cat#what-is-emfi-and-how-it-works\" rel=\"noopener\" target=\"_blank\"\u003eclick here for more information.\u003c\/a\u003e\u003c\/p\u003e\n\u003ch2\u003eHardware Audit Lifecycle\u003c\/h2\u003e\n\u003cp\u003eKey to understanding hardware auditing is the lifecycle. Typically - the end goal is total device control - dumping firmware, bootloaders, or getting a root shell.\u003c\/p\u003e\n\u003cp\u003eIf your target device has no protection: you can concentrate on firmware extraction.\u003cbr\u003eIf the target is locked, you'll need to unlock it, typically via Side-Channel attacks and tools.\u003cbr\u003eLikewise, if it's protected, you'll need to use EMFI to bypass protection, and then use Side Channel Attacks to unlock the target, before extracting firmware.\u003c\/p\u003e\n\u003cp\u003eThe following table provides a summary of the Hardware Audit Lifecycle.\u003c\/p\u003e\n\u003cdiv class=\"hwaudit\"\u003e\n \u003cdiv class=\"hwaudit__grid\"\u003e\n\n \u003c!-- ============ HARDENED ============ --\u003e\n \u003cdiv class=\"hwaudit__col\"\u003e\n \u003ch2 class=\"hwaudit__title\"\u003eHardened Devices\u003c\/h2\u003e\n\n \u003cdiv class=\"hwaudit__tags\"\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--red\"\u003eRestrictions\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eHardened Protection\u003c\/span\u003e\n \u003cspan\u003eNo exposed traces\u003c\/span\u003e\n \u003cspan\u003eCannot modify hardware\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eApproach\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items hwaudit__tag-items--bold\"\u003e\n \u003cspan\u003eEMFI\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eTools\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eChipShouter\u003c\/span\u003e\n \u003cspan\u003eFaultyCat\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__chip\"\u003e\n \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Chip-Protected.png?v=1775740137\" alt=\"Hardened chip\"\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__bottom\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--purple\"\u003eTechniques\u003c\/span\u003e\n\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/EMFI-4.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eFault Injection\u003c\/strong\u003e\n \u003cspan\u003eNon-invasive, non-destructive\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/EMFI-3.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eBit flips, register corruption\u003c\/strong\u003e\n \u003cspan\u003eForced unexpected conditions\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/EMFI-2.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eRoutine \u0026amp; Instruction Skips\u003c\/strong\u003e\n \u003cspan\u003eGlitch into unauthorised code\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003c!-- ============ PROTECTED ============ --\u003e\n \u003cdiv class=\"hwaudit__col\"\u003e\n \u003ch2 class=\"hwaudit__title\"\u003eProtected Devices\u003c\/h2\u003e\n\n \u003cdiv class=\"hwaudit__tags\"\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--red\"\u003eRestrictions\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eNo open interfaces\u003c\/span\u003e\n \u003cspan\u003eFirmware protection\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--green\"\u003eWeaknesses\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eExposed power rails\u003c\/span\u003e\n \u003cspan\u003eExposed clock rails\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eApproach\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items hwaudit__tag-items--bold\"\u003e\n \u003cspan\u003eSide Channel Techniques\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eTools\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eChipWhisperer HuskyPlus\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__chip\"\u003e\n \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Chip-Locked.png?v=1775740137\" alt=\"Protected chip\"\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__bottom\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--purple\"\u003eTechniques\u003c\/span\u003e\n\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Glitch-Power-Analysis.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003ePower Analysis\u003c\/strong\u003e\n \u003cspan\u003eFor key + secrets extraction\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Glitch-Power.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003ePower Glitching\u003c\/strong\u003e\n \u003cspan\u003eBypass protection routines\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Glitch-Clock.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eClock Glitching\u003c\/strong\u003e\n \u003cspan\u003eBypass protection routines\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003c!-- ============ UNPROTECTED ============ --\u003e\n \u003cdiv class=\"hwaudit__col\"\u003e\n \u003ch2 class=\"hwaudit__title\"\u003eUnprotected Devices\u003c\/h2\u003e\n\n \u003cdiv class=\"hwaudit__tags\"\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--red\"\u003eRestrictions\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eUnlabeled interfaces\u003c\/span\u003e\n \u003cspan\u003eUndocumented chip\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--green\"\u003eWeaknesses\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eSecurity through obscurity\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eApproach\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items hwaudit__tag-items--bold\"\u003e\n \u003cspan\u003ePin Enumeration\u003c\/span\u003e\u003cbr\u003e\n\t \u003cspan\u003eFirmware Extraction\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__tag-row\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--blue\"\u003eTools\u003c\/span\u003e\n \u003cdiv class=\"hwaudit__tag-items\"\u003e\n \u003cspan\u003eWHIDBoard\u003c\/span\u003e\n \u003cspan\u003eMACOBox\u003c\/span\u003e\n \u003cspan\u003eBusPirate\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__chip\"\u003e\n \u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/Chip-Unprotected.png?v=1775740137\" alt=\"Unprotected chip\"\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__bottom\"\u003e\n \u003cspan class=\"hwaudit__pill hwaudit__pill--purple\"\u003eTechniques\u003c\/span\u003e\n\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/HW-Pin-Enumeration.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003ePin Enumeration\u003c\/strong\u003e\n \u003cspan\u003eAutomatically detect lines\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/HW-Logic.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eLogic Analyser\u003c\/strong\u003e\n \u003cspan\u003eConvert captures to data\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/HW-Multi-Interface.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eMulti Protocol Support\u003c\/strong\u003e\n \u003cspan\u003eConnect with any interface\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card\"\u003e\n \u003cdiv class=\"hwaudit__card-icon\"\u003e\u003cimg src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/HW-BaudDetection.png?v=1775740137\" alt=\"\"\u003e\u003c\/div\u003e\n \u003cdiv class=\"hwaudit__card-text\"\u003e\n \u003cstrong\u003eAuto Speed Detection\u003c\/strong\u003e\n \u003cspan\u003eAutomatically detect speeds\u003c\/span\u003e\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003c\/div\u003e\n \u003c\/div\u003e\n\n \u003c\/div\u003e\n\u003c\/div\u003e\n\u003ch3\u003eCase Study: Hacking an automotive ECU\u003c\/h3\u003e\n\u003cp\u003eIn depth, hands-on presentation using FaultyCat-type product to glitch secrets from an automotive controller circuit.\u003c\/p\u003e\n \u003cfigure style=\"margin-top: 1em;\"\u003e\n \u003cvideo lite-youtube=\"\" videoid=\"0tkdst3JE0g\" posterquality=\"maxresdefault\" params=\"rel=0\"\u003e\n \u003cimg slot=\"image\" src=\"https:\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/YT-Thumb.png?v=1775081615\"\u003e\n \u003c\/video\u003e\n\u003c\/figure\u003e\n\u003c\/div\u003e","brand":"Lab401","offers":[{"title":"Default Title","offer_id":52782436974939,"sku":null,"price":165.0,"currency_code":"EUR","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/2175\/8571\/files\/FaultyCat---Top.png?v=1775066561"}],"url":"https:\/\/lab401.com\/en-de\/collections\/hardware-audit-hardware-audit-tools.oembed","provider":"Lab401","version":"1.0","type":"link"}