Questions tagged [hardware]

Any physical device analyzed for reverse engineering purpose. This tag is used to denote that the question is about hardware reverse engineering and not (only) about software reverse engineering.

Filter by
Sorted by
Tagged with
1
vote
0answers
23 views

Reversing Logitech G933 Battery Charge Values

I have a Logitech G933 headset. I replaced the stock battery with a larger capacity. The headset now lasts many hours longer than it was originally designed, and the software is configured to give ...
6
votes
1answer
300 views

HackRF One - Replay Attack on Garage Door does not work (12 DIP switches)

TL;DR solution Setting 4MHz sample rate and 2Mhz bandwidth in the capture tab (according to the Nyquist theorem the sample rate has to be double the bandwidth) Using the length of a DIP switch ...
1
vote
0answers
35 views

Reverse Engineering SNES adapter

A good "Hello world" for everybody here I've bought a Mayflash PC052 adapter to convert an original SNES-mini controller (CLV-202) to a USB port on PC or PS4... The thing is, this CLV-202 ...
2
votes
0answers
46 views

Help with identifying 10pin chip

I've tried every possible combination of the markings of the chip but I can't seem to find anything on Google. I think the chip is 96TI 35R but apart from that I can't find anything. It's like the ...
3
votes
2answers
230 views

How do I extract the firmware from this bluetooth speaker board?

I have a bluetooth speaker. Infinity Fuze 100. It's a good speaker. But it has annoying messages on startup and shutdown. And for other interface events. I'd like to either get rid of them entirely, ...
1
vote
1answer
42 views

trying to identify this SOP14 chip

I'm trying to find out what is this chip I have two devices that have this chip in them one of them stopped working and the problem was from this chip(I know that because when I removed that same chip ...
0
votes
1answer
41 views

Most idiot-proof method of entry to Reverse Engineer Visual/Control feed for security camera

I am looking to reverse engineer a construction security camera. I am a self-learner, and have a very general grasp on electrical engineering and coding - so I'm not entirely 'out of my element' - but ...
0
votes
0answers
54 views

Can I reverse engineer original file names?

I'm new to IT and I turned my external hard-drive into a windows boot disc. I managed to recover files with testdisc & photorec_win. The downside is I got more than I bargened for and I have twice ...
0
votes
0answers
37 views

exports kernel Windows for informations on hardware

Good day! I develop small security software and use a driver like any modern security software. Can you please tell me if there are any exported functions from ntoskrnl.exe or hal.dll or other kernel ...
0
votes
0answers
26 views

UART RX not accepting input

I am currently trying to gain access to an Epson PX700W printer that exposes UART. It has been shown, that the UART exposes a root shell. For Epson Artisan 700 this UART is fully functional: https://...
0
votes
0answers
23 views

Smart Battery Issues, a RE Quest?

TL;DR: Perhaps this doesn't sound like a RE post at first, but it's kind of moving in that direction. Essentially, I replaced the battery in my Surface laptop with 2x different new batteries, and they ...
0
votes
0answers
20 views

Any ways to read out the ICs (using qca4531 or similar packages) without desoldering the chips on this board?

I'm currently evaluating different boards in order to read EEPROM and Flash accesses by attempting to read the bus lines with a logic analyzer. While for SMDs using TQFP (and other similiar packaging) ...
2
votes
1answer
67 views

Identify a chip that's very hot on PCB

Does anyone recognize this chip by chance? On the chip it is written: DEYA SB86 See picture: I can't find anything on the web... Any help will be appreciated!
9
votes
1answer
3k views

Advice on how to attack my first reverse engineering project?

Suppose you've never done reverse engineering before (apart from taking apart already-broken tape recorders). Also suppose you had a machine as pictured below, with a serial-looking and another multi-...
3
votes
1answer
134 views

Is it possible to sniff an ATA Drive password?

Context: I have a proprietary Tandberg Data RDX QuickStor Internal USB3 drive bay for PC (item number 8666-RDX) and some storage cartridges for it. Esentially, these are just regular TOSHIBA MK3276GSX ...
0
votes
1answer
48 views

How devices such as smart Wi-Fi power plugs and Wi-Fi ip cameras connect to a private Wi-Fi network?

How devices such as smart Wi-Fi power plugs and Wi-Fi ip cameras connect to a private Wi-Fi network ? The usual steps are the following : You buy the device You install the maker application on ...
1
vote
0answers
60 views

Chip Identification in Push Button Toy

I have a toy that simply consists of a button which plays a variety of phrases when activated. My intention is to replace the sounds with my own. However, I have been unable to identify the chip and ...
1
vote
1answer
75 views

Recover data from old HDD (word files mostly)

I am trying to help my mother recover some of her work from an old HDD, but I am facing multiple problems. Firstly, I do not know the best way I could interface the old HDD with my laptop (or a newer ...
0
votes
0answers
58 views

XAP2 processor firmware reverse engeneering

I'm looking for way to load to Ghidra,radare or IDA firmware of DFU firmware identified by binwalk as: 0x0 CSR (XAP2) DFU Firmware update header 0x4c8 CSR Bluecore firmware segment I've already ...
0
votes
0answers
162 views

Extracting a firmware image via U-Boot and mounting/expanding it

I'm attempting to extract the file system from an embedded Hi3518 SoC that runs Linux (Busybox) but has a U-Boot boot loader. There is no console once the device is fully booted, so it seems that the ...
0
votes
0answers
177 views

Binwalk on flash dump yielding useless files and empty file systems

I have been investigating some routers by desoldering their nand flash and dumping them using a flash programmer. However when I use binwalk on these dumps I end up with fragments of files mixed in ...
1
vote
1answer
172 views

Reverse UART communication protocol

I'm objective is to build a custom wifi module to be used on a Samsung AC AR24HSFSAWKN. I have such an official module SWL-B70F for which I'm trying to reverse engineer the communication with the main ...
0
votes
0answers
44 views

infrared remote codes yamaha RXV-596 / RAV211

My remote (one of ...) is not working anymore. I've search in differents databases, but the model is too old and I've not success to get the IR codes. If someone has this old Yamaha receiver*, with a ...
0
votes
0answers
104 views

Reverse Engineering a CPU

So, I got inspired through a friend, how single-handedly reverse engineered a little cpu(nvidia falcon) and I was wondering if there any other cpu's like this one, because I want to do this myself but ...
0
votes
0answers
47 views

Trying to edit the source code of AOC monitor

So long story short the AOC monitor comes with a G-Menu gui that lets you customize different monitor features. One specific one I am interested in is the "Dial Point" setting. Where it ...
2
votes
0answers
84 views

What are these pads called, what can I solder to them and could I do any damage?

I am wondering what this is called (those are 1 and 2 cm marks, divided into 1 mm segments): I'm fairly certain it's not JST. I think the two larger pads are used to hold whatever connector is ...
1
vote
0answers
23 views

Looking at a PCB is it possible to ascertain the number of layers it has?

Is there a way to ascertain - without special equipment (other than what a "layman electronics enthusiast" may have around) - how many layers a PCB has? Is there some sort of marking or a ...
0
votes
0answers
45 views

Data XREF in IDAPro (C166/167 Arch)

try to reverse some algo in c167 arch. in a part of the file i saw a variable that located in XRAM mov to accumulator registers and finally xor with other registers. as below: mov r1, word_E1C4 ...
2
votes
1answer
103 views

crc - reverse engineering GAL16V8 checksum method

While working with the GAL16V8 (an old programmable logic device), I found out that the Programmers Electronic Signature (PES) of each GAL has a checksum byte I've read the PES of some GALs but was ...
1
vote
1answer
66 views

I have a two pin debug interface, confused on how to use it

I'm very much on the software side of things so I'm super inexperienced with debugging hardware. A custom processor I'm working with gives 2 debug pins, and given that it's an ARM system I suspect it ...
1
vote
1answer
54 views

Wrong keyboard strokes sent to serial in putty

I am attempting to communicate to a device i have via the onboard rx/tx solder points i found on the board. I am doing this via an arduino uno. The problem i am having is that when i connect to it ...
3
votes
1answer
120 views

Construct a number from 0-999.9 using 5 data bytes of a MIDI SysEx message

I'm sending MIDI messages to a proprietary turntable that has an LCD screen on it. The normal software sends out updates via MIDI SysEx to display the current tempo on the LCD. The MIDI is being ...
0
votes
1answer
75 views

Can a UART port change baud rate at runtime?

I've been probing this CCTV DVR board trying to find a serial port to see if I can get console access to it. I found a set of 4 through holes with no headers that looked like a good candidate. I ...
1
vote
1answer
70 views

Interact with a network-less Chinese MP3 player running a modified version of Linux

My friend gave me this cheap little chinese MP3 player. I'm curious about exploring it learning more about the hardware, and potentially seeing if I could expand it's functionality in some way or run ...
0
votes
0answers
166 views

How does this levitating clock work?

I came across the Flyte STORY clock recently (link) and I’m stumped as to how it works. Does anyone know how it holds the ball against gravity when it’s vertically upright? I asked Physics but they ...
0
votes
1answer
89 views

Misterious USB dongle

I have this USB stick that seems to have a slot for a SIM and for a SD card. I don't know nothing else about this module. Searching the codes on internet I didn't find anything. How could I find ...
1
vote
2answers
305 views

Can a secondary UART be used to access the MCU?

I have a gamepad with a Chinese ShanWan BM-729 SWQP179 22 MCU which is most likely a clone but i didn't manage to find any info on it. The board is also lacking information like serial pins and the ...
0
votes
1answer
93 views

Is it possible to read a device's firmware or internal programming in computer's RAM?

Let us say I want to reverse engineer a PCIe-based FPGA device. Can I read or extract the IP core or any firmware in the computer's RAM or by trying to communicate with the device in some way?
0
votes
0answers
452 views

Samsung A520F usb type-c uart debug mode

I'm trying to create UART cable for A520F phone with USB type-c. Seems, there is no UART debug modes S8+ either. On Samsung phones with micro USB one may access UART JIG mode with 619K resistor, ...
0
votes
1answer
107 views

Manufacturer interface on OCZ Agility 4 SSD

Inside the housing of an OCZ Agility 4 SSD I found several additional connectors on the opposite site of the SATA connectors. What are they good for and how to connect them properly? Zoomed:
1
vote
1answer
131 views

If flashrom tool don't have support for rom chip what are the ways you can extract data without it?

I am currently working on a Netgear router having MX25L1606E rom chip, my goal is to extract firmware for reverse engineering but flashrom don't have support for it. So question is how someone can ...
2
votes
0answers
70 views

Voltage Glitching to Read Internal EEPROM

I am trying to read the cryptographic key from my car key fob for exploration, basically seeing if I can clone it. I popped open the case and I see it's using a Microchip HCS361. The HCS361 stores it'...
2
votes
1answer
534 views

Analysis of BusyBox Shell router U-Boot firmware

I am trying to get access to the BusyBox Shell and if possible to get a firmware dump. The "U-Boot" has limited possibilities but what is good is "sf - SPI flash sub-system". Can anyone help me get ...
4
votes
1answer
3k views

Hacking old gym equipment

Anyone reversed ifit? I just picked up a discounted NordicTrack Elite 11.0 Elliptical on Ebay, I want to hack it. I would like to extract performance data and it would be great if I could control ...
4
votes
0answers
237 views

Trying to identify Renesas custom SoC through CPU die inspection

Was wondering if someone could help me identify which series a Renesas Custom SoC belongs to within the super-H family by looking at optical images of the die circuitry layout of the device, and by ...
1
vote
0answers
449 views

Dumping firmware from Winbond W25Q64JVSSIQ using BusPirate

I have a Winbond W25Q64JVSSIQ flash chip that supports SPI. I've connected BusPirate through a SOP8 cable to the memory chip. PWR and VREG LEDs are on, so they're connected. BusPirate is connected to ...
2
votes
0answers
52 views

Is there a way to identify a specific microprocessor model?

I'm working on reversing a USB flash drive controller chip. I know there's a microprocessor that runs some 8051 variant, and I have the ability to run arbitrary code on it. There's lots of different ...
2
votes
2answers
419 views

Reverse engineering a checksum algorithm

I am attempting to implement an editor for a discontinued hardware drum synthesizer which uses undocumented system exclusive MIDI messages for communication. I've figured out the patch format, but I ...
1
vote
1answer
37 views

id the HW port and protocol

i have a vtech baby monitor and since i want to be aware of it while i'm playing in VR (PC, HTC vaive/Valve index) i still want to see if the baby starts crying. on this monitor there is external ...
0
votes
0answers
144 views

Export logic analyzer data to protocol analyzer

Probably I'm little ot but I'm unsure where to ask this. Is there any easy (already working) way to export my logic analyzer data (vcd format) to a protocol analyzer like Wireshark? I'm analyzing an ...