Questions tagged [hardware]

Any physical device analyzed for reverse engineering purpose. This tag is used to denote that the question is about hardware reverse engineering and not (only) about software reverse engineering.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

How to initiate usb connection as usb display

I'm trying to essentially make an hdmi dummy plug to trick the computer into thinking there is a second monitor. I am planning on doing it by having a raspberry pi pico act as a usb monitor. (much ...
user avatar
0 votes
0 answers
18 views

Find Vivosmart 4 pinout

I'm on vacation and just realized that I forgot the charger for my vivosmart 4. The vivosmart 4 has 3 pins above and 1 underneath the 3. I'm assuming that there's two data pins, power, and ground. ...
user avatar
1 vote
0 answers
29 views

Identify microcontroller (24CC MQRV819.1 1739 on P6901 V2.6 board)

I was trying to identify the following integrated circuit (marked with the codes 24CC MQRV819.1 1739). It is mounted on the P6901 V2.6 board of a fingerprint presence recorder. Given the function of ...
user avatar
  • 13
0 votes
0 answers
174 views

Getting rid of a custom Shell on a LiteOS based outdoor camera

I started reversing this camera in order to get rid of the unwanted traffic it constantly does towards Chinese servers. I have a serial access to it thanks to an obvious UART port (bottom left in the ...
user avatar
  • 101
0 votes
1 answer
41 views

Unknown proprietary Micro-USB variant

While reversing a Sena Bluetooth Headset i noticed that the programming port of the internal chip is routed out to 6 additional undocumented Pins inside of the Micro-USB connector. Whats the best ...
user avatar
0 votes
1 answer
55 views

ASUS RP-AC51 UART doesn't work with any common baud rate

I have an ASUS RP-AC51. It doesn't broadcast any WiFi network when powered on, the management interface cannot be accessed over Ethernet, and the reset button seemingly does nothing. I decided to try ...
user avatar
1 vote
0 answers
165 views

Brother DCP-L2550DW Identify Toner Reset TN-760 or TN-730 (Continued)

I'm really continuing discussion on a previous question posed 2 years ago ("Identifying a toner chip and its communication protocol to re-program it"). I found that user to have the most ...
user avatar
  • 11
3 votes
1 answer
231 views

How is lite hash rate (LHR) of Nvidia implemented?

Nvidia limited some of their GPUs with LHR to decrease the performance of Ethereum mining. What in detail is LHR doing? It seems to limit non sequential memory operations (which is actually not what ...
user avatar
0 votes
0 answers
230 views

Extract RFS (rootfs) on UBIFS NAND Dump

I am practicing (studying) hardware reverse engineering. I dumped a NAND flash (smart TV), and managed to remove OOB data and emulate NAND in my environment. I detected that NAND used UBI filesystem, ...
user avatar
2 votes
0 answers
45 views

How I can interface the MCU without soldering?

My router has the following pin layout between flash memory and MCU: The big chip is the MCU from a Sercomm H300s router. What I want is to analyze the signaling between 2 chips using the most ...
user avatar
1 vote
0 answers
37 views

I attempted to read from an Intel 87C54 microcontroller and it came up all FF's. Any way to read from this?

I'm using the popular TL866II Plus programmer to read from the chip. I see in the datasheet that it has lock bits which can disable the verify (read) function, but I'm not sure if that causes an ...
user avatar
  • 166
0 votes
1 answer
183 views

Windows User Identification / HWID Limiting

I've been playing a game that has an HWID limit and a bunch of other limitations, such as: a) Cannot be ran in a VM b) Cannot be ran using Sandboxie and other Sandbox environments c) Limits 3 ...
user avatar
0 votes
1 answer
87 views

Identify unknown Atmel chip

wondering if folks can help identify this chip. It looks like ATMLH017 2FCM CN ©2017AB4 Googling all manner of permutations on these numbers has not been helpful. The chip appears next to an ...
user avatar
0 votes
0 answers
57 views

How can I identify JTAG in this case and utilize it?

I'm developer and I somehow tried today to reverse engineer and take apart a hardware, just after learning that some devices have hardware debugging. First thing to try to know in my understanding of ...
user avatar
  • 179
0 votes
0 answers
40 views

is it possible to get code out of chipset through reverse engineering?

for example, encryption/decryption mechanism was inbuilt in a chip, to get the code that performs this mechanisms, is there some ways you can get this code through reverse engineering? what tools and ...
user avatar
  • 179
0 votes
0 answers
26 views

how to analyze USB packet data on a device that is not a PC

So basically, in order to "jailbreak" a PlayStation Vita console, on firmware versions 3.61 and above, you have to run h-encore2 which is basically just a regular signed executable primarily ...
user avatar
0 votes
0 answers
81 views

Unpacking firmware of TP-LINK IPC firmware

I have some TP-LINK IPC firmware that must be reversed (as a task). But I can not unpack the .bin firmware and extract the file system. Binwalk output: 576 0x240 xz compressed data ...
user avatar
0 votes
0 answers
45 views

Identify unknown MEMS sensor

Could someone give me any clue how to identify this chip? It should be a 9D accelerometer-gyroscope-magnetometer but I'm not sure. The case seems to be LGA-14.
user avatar
  • 1
2 votes
1 answer
70 views

How should I go about reversing this USB crypto dongle?

I have some kind of authentication token device delivered by a bank (that I do not expect to use for its initially-intended purpose any more). I’d like to learn how it works and whether I can recycle ...
user avatar
1 vote
0 answers
78 views

Reversing Logitech G933 Battery Charge Values

I have a Logitech G933 headset. I replaced the stock battery with a larger capacity. The headset now lasts many hours longer than it was originally designed, and the software is configured to give ...
user avatar
6 votes
1 answer
725 views

HackRF One - Replay Attack on Garage Door does not work (12 DIP switches)

TL;DR solution Setting 4MHz sample rate and 2Mhz bandwidth in the capture tab (according to the Nyquist theorem the sample rate has to be double the bandwidth) Using the length of a DIP switch ...
user avatar
  • 63
1 vote
0 answers
61 views

Reverse Engineering SNES adapter

A good "Hello world" for everybody here I've bought a Mayflash PC052 adapter to convert an original SNES-mini controller (CLV-202) to a USB port on PC or PS4... The thing is, this CLV-202 ...
user avatar
  • 11
2 votes
0 answers
55 views

Help with identifying 10pin chip

I've tried every possible combination of the markings of the chip but I can't seem to find anything on Google. I think the chip is 96TI 35R but apart from that I can't find anything. It's like the ...
user avatar
3 votes
2 answers
908 views

How do I extract the firmware from this bluetooth speaker board?

I have a bluetooth speaker. Infinity Fuze 100. It's a good speaker. But it has annoying messages on startup and shutdown. And for other interface events. I'd like to either get rid of them entirely, ...
user avatar
  • 123
1 vote
1 answer
61 views

trying to identify this SOP14 chip

I'm trying to find out what is this chip I have two devices that have this chip in them one of them stopped working and the problem was from this chip(I know that because when I removed that same chip ...
user avatar
  • 191
0 votes
1 answer
68 views

Most idiot-proof method of entry to Reverse Engineer Visual/Control feed for security camera

I am looking to reverse engineer a construction security camera. I am a self-learner, and have a very general grasp on electrical engineering and coding - so I'm not entirely 'out of my element' - but ...
user avatar
0 votes
0 answers
49 views

exports kernel Windows for informations on hardware

Good day! I develop small security software and use a driver like any modern security software. Can you please tell me if there are any exported functions from ntoskrnl.exe or hal.dll or other kernel ...
user avatar
  • 21
2 votes
1 answer
74 views

Identify a chip that's very hot on PCB

Does anyone recognize this chip by chance? On the chip it is written: DEYA SB86 See picture: I can't find anything on the web... Any help will be appreciated!
user avatar
  • 21
9 votes
1 answer
3k views

Advice on how to attack my first reverse engineering project?

Suppose you've never done reverse engineering before (apart from taking apart already-broken tape recorders). Also suppose you had a machine as pictured below, with a serial-looking and another multi-...
user avatar
3 votes
1 answer
306 views

Is it possible to sniff an ATA Drive password?

Context: I have a proprietary Tandberg Data RDX QuickStor Internal USB3 drive bay for PC (item number 8666-RDX) and some storage cartridges for it. Esentially, these are just regular TOSHIBA MK3276GSX ...
user avatar
  • 31
0 votes
1 answer
79 views

How devices such as smart Wi-Fi power plugs and Wi-Fi ip cameras connect to a private Wi-Fi network?

How devices such as smart Wi-Fi power plugs and Wi-Fi ip cameras connect to a private Wi-Fi network ? The usual steps are the following : You buy the device You install the maker application on ...
user avatar
  • 101
1 vote
0 answers
83 views

Chip Identification in Push Button Toy

I have a toy that simply consists of a button which plays a variety of phrases when activated. My intention is to replace the sounds with my own. However, I have been unable to identify the chip and ...
user avatar
  • 111
1 vote
1 answer
115 views

Recover data from old HDD (word files mostly)

I am trying to help my mother recover some of her work from an old HDD, but I am facing multiple problems. Firstly, I do not know the best way I could interface the old HDD with my laptop (or a newer ...
user avatar
0 votes
0 answers
388 views

Binwalk on flash dump yielding useless files and empty file systems

I have been investigating some routers by desoldering their nand flash and dumping them using a flash programmer. However when I use binwalk on these dumps I end up with fragments of files mixed in ...
user avatar
1 vote
1 answer
294 views

Reverse UART communication protocol

I'm objective is to build a custom wifi module to be used on a Samsung AC AR24HSFSAWKN. I have such an official module SWL-B70F for which I'm trying to reverse engineer the communication with the main ...
user avatar
  • 121
0 votes
0 answers
77 views

Trying to edit the source code of AOC monitor

So long story short the AOC monitor comes with a G-Menu gui that lets you customize different monitor features. One specific one I am interested in is the "Dial Point" setting. Where it ...
user avatar
2 votes
0 answers
106 views

What are these pads called, what can I solder to them and could I do any damage?

I am wondering what this is called (those are 1 and 2 cm marks, divided into 1 mm segments): I'm fairly certain it's not JST. I think the two larger pads are used to hold whatever connector is ...
user avatar
  • 10.5k
1 vote
0 answers
27 views

Looking at a PCB is it possible to ascertain the number of layers it has?

Is there a way to ascertain - without special equipment (other than what a "layman electronics enthusiast" may have around) - how many layers a PCB has? Is there some sort of marking or a ...
user avatar
  • 10.5k
2 votes
1 answer
172 views

crc - reverse engineering GAL16V8 checksum method

While working with the GAL16V8 (an old programmable logic device), I found out that the Programmers Electronic Signature (PES) of each GAL has a checksum byte I've read the PES of some GALs but was ...
user avatar
  • 121
1 vote
1 answer
72 views

I have a two pin debug interface, confused on how to use it

I'm very much on the software side of things so I'm super inexperienced with debugging hardware. A custom processor I'm working with gives 2 debug pins, and given that it's an ARM system I suspect it ...
user avatar
1 vote
1 answer
354 views

Wrong keyboard strokes sent to serial in putty

I am attempting to communicate to a device i have via the onboard rx/tx solder points i found on the board. I am doing this via an arduino uno. The problem i am having is that when i connect to it ...
user avatar
  • 111
3 votes
1 answer
148 views

Construct a number from 0-999.9 using 5 data bytes of a MIDI SysEx message

I'm sending MIDI messages to a proprietary turntable that has an LCD screen on it. The normal software sends out updates via MIDI SysEx to display the current tempo on the LCD. The MIDI is being ...
user avatar
  • 33
0 votes
1 answer
101 views

Can a UART port change baud rate at runtime?

I've been probing this CCTV DVR board trying to find a serial port to see if I can get console access to it. I found a set of 4 through holes with no headers that looked like a good candidate. I ...
user avatar
1 vote
1 answer
100 views

Interact with a network-less Chinese MP3 player running a modified version of Linux

My friend gave me this cheap little chinese MP3 player. I'm curious about exploring it learning more about the hardware, and potentially seeing if I could expand it's functionality in some way or run ...
user avatar
0 votes
0 answers
258 views

How does this levitating clock work?

I came across the Flyte STORY clock recently (link) and I’m stumped as to how it works. Does anyone know how it holds the ball against gravity when it’s vertically upright? I asked Physics but they ...
user avatar
0 votes
1 answer
148 views

Misterious USB dongle

I have this USB stick that seems to have a slot for a SIM and for a SD card. I don't know nothing else about this module. Searching the codes on internet I didn't find anything. How could I find ...
user avatar
  • 13
1 vote
2 answers
524 views

Can a secondary UART be used to access the MCU?

I have a gamepad with a Chinese ShanWan BM-729 SWQP179 22 MCU which is most likely a clone but i didn't manage to find any info on it. The board is also lacking information like serial pins and the ...
user avatar
0 votes
1 answer
120 views

Is it possible to read a device's firmware or internal programming in computer's RAM?

Let us say I want to reverse engineer a PCIe-based FPGA device. Can I read or extract the IP core or any firmware in the computer's RAM or by trying to communicate with the device in some way?
user avatar
  • 101
0 votes
0 answers
661 views

Samsung A520F usb type-c uart debug mode

I'm trying to create UART cable for A520F phone with USB type-c. Seems, there is no UART debug modes S8+ either. On Samsung phones with micro USB one may access UART JIG mode with 619K resistor, ...
user avatar
0 votes
1 answer
163 views

Manufacturer interface on OCZ Agility 4 SSD

Inside the housing of an OCZ Agility 4 SSD I found several additional connectors on the opposite site of the SATA connectors. What are they good for and how to connect them properly? Zoomed:
user avatar