INTRODUCTION
Auditing hardware and embedded devices has a well-earned reputation of being difficult because it is truly full-stack: it requires knowledge and tools across several disciplines: electronics, hardware, firmware and software.
Often, hardware auditors are defeated not by the device they're testing, but by their own tools: a missing adaptor, inadequate power supplies, out-of-production devices, repetitive manual tasks prone to error, or the almost impossible task of maintaining an up-to-date and stable linux environment.
TRUSTED BY PROFESSIONAL HACKERS▰
The WHIDBoard was born out of necessity by renouned hardware-hacker & educator Luca Bongiorni - as a real-world, all-in-one, reliable solution for offensive hardware pentesting. Its philosophy is to provide everything you need across the full-stack without getting in your way, or forcing you to change your habits work. Here's what it provides:
PHYSICAL LAYER: INTERFACE DISCOVERY
The WHIDBoard supports multiple onboard logic levels, pin enumeration for automated discovery of interfaces, and an 8-channel logic analyser.
PROTOCOL LAYER: COMMUNICATION
WHIDBoard is fully integrated into Tsurugi Linux, the leading distro for digital forensics. Every tool for every interface is available, and guaranteed to be stable.
FIRMWARE LAYER: EXFIL & ANALYSIS
The WHIDBoard provides all necessary tools for exfiltration and analysis: namp, wireshark, ghidra, ZAP Proxy, binwarl, unblob - and many more.
SOFTWARE LAYER: EXPLOIT
Whatever your goal: device hardening, credential exfiltration, low-level debugging, auditing or forensics, the WHIDBoard provides everything you need.
Lab401 is proud to be the official manufacturer and exclusive distributor of the WHIDBoard Pro Kit. The kit includes the WHIDBoard itself, hand-picked accessories and a battle-ready road-case. It's made for the on-the-go hacker, and built to last.
WHIDBOARD: HARDWARE HACKING MADE EASY
The philosophy of the WHIDBoard is to abstract the difficult parts of hardware hacking - and allow you to to concentrate on hacking your target device. It removes the need to collect dozens of adaptors, gadgets and gizmos; you no longer need to spend hours trying to maintain your linux environment; your days of debugging your debugging tools are over.
Check out real-world demonstrations of the WHIDBoard below; over 30 minutes, the tool's creator, Luca Bongiorni walks you through the device, how it works, and real-world examples of device hacking.
DISCOVER THE WHIDBOARD
It might look like a simple PCB, but the WHIDBoard is no less than 15-tools in one. Check out each feature below:
1. Pin Enumerator
Pin Enumeration means that the WHIDBoard figures out what you've got plugged in. Connect suspicious pins, and the WHIDBoard does the rest.
2. Built-in level-shifters
Onboard support for all standard power levels: 1.8V, 2.5V, 3.3V and VREF. No more external supplies, no more common ground problems.
3. Interface with everything
Native support for UART, SPI, I2C, SWD and JTAG. All of the accessories, clips and cables that you need are included in the WHIDBoard Pro Kit.
- 1
- 2
- 3
- 4
- 5
- 6
4. Fully-supported OS + Tools
The WHIDBoard's tools are fully integrated into TSURUGI Linux. Everything you need in an updated, stable environment. No more losing days fighting with package conflicts.
5. On-board Logic Analyser
Perform real-time debugging and signal analysis. The on-board 8 channel analyser can be used simultaneously with the other tools for full-stack debugging.
6. Protective Tray
Don't kill your hardware: The WHIDBoard comes with a field-case to protect against shorts and mishaps on the desk, and a rock-solid road-case for when you're on the move.
DISCOVER THE WHIDBOARD WORKFLOW ADVANTAGE
It's hard to emphasise how much the WHIDBoard removes complexity and frustration from the traditional hardware audit workflow.
On the physical side, the unification of multiple tools, automatic protocol detection via the pin enumerator, debugging via logic analyser, onboard level-shifting and multi-interface connectors removes hours of setup, iteration and error-prone repetitive manual tasks.
On the software side, WHIDBoard's integration into TSURUGI Linux means you've got a perfectly stable work environment that will always be up to date, have everything you need and never break.
Want to see the difference between a WHIDBoard analysis and a traditional analysis? We performed identical audits using traditional tools and the WHIDBoard - and the results speak for themselves. The WHIDBoard was 4 times faster saving over 4 hours of real world time. Check out the results below.
BACKED BY REAL-WORLD TRAINING & CERTIFICATION
Unlike piecemeal or homespun solutions, WHIDBoard is a reliable, maintained solution, used by thousands of professionals. Every year, hundreds of people are trained and certified on the WHIDBoard architecture. If you're looking to become a Certified Hardware Hacker, or get hands-on training on hacking real-world hardware, training and certification is available via in-person courses and via online, self-paced curriculums.
Lab401 is proud to be the official manufacturer and exclusive distributor of the WHIDBoard Pro Kit. The kit includes the WHIDBoard itself, hand-picked accessories and a battle-ready road-case. It's made for the on-the-go hacker, and built to last.
What's included
- 1x WHIDBoard
- 1x Protective Case
- 2x SOIC/SOP8 Flash Clip/Board/Cable (Rev3 + Rev4)
- 1x SOP16 to DIP 8 Flash Clip/Board/Cable
- 1x SOP8 & SOP16 to DIP 8 Flash Clip/Board/Cable
- 1x SOP8/WSON8/QDFN8 Programming Socket
- 2x Universal IC Clamp + Wires (FtF,FtM)
- 1x Reinforced ABS Roadcase + Protective Foam
Hardware Specifications
-
Pin Enumerator: 24-channel (JTagulator Compatible)
-
Logic Analyser: 8-channel, 24MHz
-
Protocols: UART, SPI, I2C, JTAG, SWD
-
Logic Levels: 1.8V, 2.5V, 3.3V, VREF
-
Supported Protocols: UART, JTAG. SPI, I2C, SWD
-
Connectivity:USB-C
Software Specifications
- Official Distro: TSURUGI Linux
- Tools: flashrom, OpenOCD, SNANDer, UFPROG, Pulseview, Sigrock, fxload, propoloader, openspin..
- Audit & Exfil tools: Nmap, Zenmap, wireshark, ghidra, ZAP Proxy, binwalk, unblob