Questions tagged [hardware]

Any physical device analyzed for reverse engineering purpose. This tag is used to denote that the question is about hardware reverse engineering and not (only) about software reverse engineering.

Filter by
Sorted by
Tagged with
0 votes
0 answers
32 views

Finding JTAG/UART Connections on smart doorbell

Trying to dump firmware of this device. I can't find the UART/JTAG connections. I've searched over it for awhile now; I feel like I must just be missing something.
Eric's user avatar
  • 1
0 votes
1 answer
54 views

What's this connector type?

Does anybody know this kind of connector? It is used as a diagnostic connector on diesel engines. Inner diameter 15mm, outer 19mm.
Alex4102's user avatar
0 votes
1 answer
85 views

microcontroller to microcontroller - is this I2C protocol?

I have a consumer grade hot water boiler that I am trying to interface to get various internal measurements (outlet temp, inlet temp, etc.). The main control board is powered by a defunct Fujitsu ...
DaveInPA's user avatar
0 votes
1 answer
87 views

Router shadow password generation

I'm reverse engineering a router, I'm fairly new to embedded devices and how Linux boots up, but I have a root UART shell, there's already a password hash in the /etc/shadow file, these passwords/...
spergy's user avatar
  • 1
1 vote
0 answers
112 views

Got access to SWD, but I need to identify the chip

I was able to connect to the chip via SWD/openocd, but I can't figure out what chip it is (says SM9PQ1 2322-52 on chip, googled but cant find anything). I'm hoping to download the firmware after I ...
Low Est's user avatar
  • 11
1 vote
1 answer
46 views

Chip identification in nonin module

This chip is off the Nonin OEM MODULE III. I would appreciate if anyone can find out what this chip and datasheet is. I have tried looking up the numbers in alldatasheet.com and the company to no ...
Rich's user avatar
  • 11
0 votes
0 answers
32 views

Audio problem rushing?

After using a new Pc for some time, suddendly a problem with the Audio occured. While listening music with Headphones, some rushing noise appeared. I tried to narrow down the problem : Checking the ...
Jack's user avatar
  • 1
0 votes
0 answers
89 views

What are the general steps for reverse engineering a windows SPI driver for linux?

I have a fingerprint reader on my laptop that works under windows that doesn't show up on lsusb. Which means its not connected via USB. Through some digging around, I found out that this specific ...
juztignoreme's user avatar
2 votes
0 answers
37 views

Identify unknown TI controller

Can anyone ID this TI chip? Looks like some sort of controller (in a older toy keyboard). there is only one other chip on the PCB (the audio amplifier). Quick googling ended on a dead end since the ...
masterX244's user avatar
3 votes
0 answers
77 views

Determining power supply needs for a first class, reclining airplane seat

I have a Sicma Majesty 1606 seat pair from a retired Boeing 767-300. My goal is to provide power and get them working as reasonably functional and fun home furniture for a living room. I'm documenting ...
Eric Jackson's user avatar
3 votes
1 answer
92 views

Reverse engineer a blackbox function operating on single or double precision floats for emulation

I own and run a NEC VectorEngine 10C which is a PCIe accelerator running a proprietary ISA which has many fun instructions among them is VRSQRT which computes an approximation of the inverse ...
worldsmithhelper's user avatar
3 votes
0 answers
444 views

How can I disable watchdog in U-boot using mw command

So I have DVR with 2*Hi3511RBC CPU: ARM926EJ-Sid(wb) [41069265] revision 5 (ARMv5TEJ) and when I enter U-boot (how do I know that I'm in U-boot ? ) well over UART I get following message U-Boot 1.1.4 (...
Vido's user avatar
  • 515
4 votes
0 answers
65 views

Decyphering 8kbps audio file format used in Solar Chanting Lotus

I'm trying to reverse engineer a solar powered chanting lotus flower so that I might replace the built in audio with something more interesting. The main chip (JL16B-083A - haven't been able to find ...
Captain Lavender's user avatar
3 votes
0 answers
940 views

Problem getting root shell on Ezviz camera

I got a CS-C6N Ezviz camera. My friend gave it to me because he doesn't use it anymore. I was able to get rtsp stream from the camera (but laggy), and I also was able to connect to UART port on the ...
raspiduino's user avatar
3 votes
1 answer
148 views

What device is this?

I found this old device, but I don't know what it is.
Paa's user avatar
  • 71
1 vote
1 answer
109 views

I need to get the source of my net application which is obfuscated

I need to recover the source of my net application which is obfuscated. I formatted the PC by error and lost the information. And some ransomware obfuscated my files, Is it possible to recover my ...
Tecnology Now's user avatar
2 votes
1 answer
250 views

How to access files stored in mouse?

I own a Razer Mamba Elite mouse. After plugging it in to the usb port, an software installation window shows up. Basically it's the Razer software to manage device's options such as profiles, macros, ...
Matt's user avatar
  • 21
2 votes
0 answers
43 views

Is there a way to run arbitrary code on a vtech Nitro Vision?

Note: If this the wrong place to ask the question, please redirect me to the appropriate stack exchange and/or subreddit. I just figured reverse engineering is my best bet since it's kinda what I'm ...
Clement's user avatar
  • 21
2 votes
0 answers
55 views

Access to CPU registers in GMM space

AMD's BIOS and Kernel Developer’s Guide (BKDG) documents GMM registers and access to them: GMMxXXXXX: GPU memory mapped registers; XXXXX specifies the hexadecimal byte address offset (this may be 2 ...
Hweaker's user avatar
  • 121
1 vote
1 answer
115 views

Need help identifying this IC

Does anybody know which IC this is? I cannot find anything for "2746 QA7A" or any combination of it. Neither do I recognise the manufacturer. The IC is actually very small, so I cannot take ...
Alex4102's user avatar
0 votes
0 answers
29 views

Are physical databooks of any use?

I have taken over the office of an old retired electronics guy. As a result, I have a huge shelf filled with data books: Intel, Atmel, Texas Instruments... etc. My instinct is to throw these all away ...
P Novak's user avatar
1 vote
0 answers
35 views

Tuning motor temperature

I have a DC motor, running in two modes, slow and fast. I will need to run the motor in FAST mode only. The motor is already running for 10 years. The motor experiences variable load. According to the ...
Habib Anwari's user avatar
3 votes
0 answers
119 views

Spy on LCD screen with Raspberry Pi

I have this digital crane scale. It has a 5 digit 7 segment LCD display. My objective is to be able to read what is displayed on the LCD display with a Raspberry Pi. This is what the PCB looks like: ...
Ben Walker's user avatar
2 votes
0 answers
225 views

Identify microcontroller (24CC MQRV819.1 1739 on P6901 V2.6 board)

I was trying to identify the following integrated circuit (marked with the codes 24CC MQRV819.1 1739). It is mounted on the P6901 V2.6 board of a fingerprint presence recorder. Given the function of ...
Paa's user avatar
  • 71
1 vote
0 answers
433 views

Getting rid of a custom Shell on a LiteOS based outdoor camera

I started reversing this camera in order to get rid of the unwanted traffic it constantly does towards Chinese servers. I have a serial access to it thanks to an obvious UART port (bottom left in the ...
iMil's user avatar
  • 141
0 votes
1 answer
45 views

Unknown proprietary Micro-USB variant

While reversing a Sena Bluetooth Headset i noticed that the programming port of the internal chip is routed out to 6 additional undocumented Pins inside of the Micro-USB connector. Whats the best ...
masterX244's user avatar
1 vote
1 answer
116 views

ASUS RP-AC51 UART doesn't work with any common baud rate

I have an ASUS RP-AC51. It doesn't broadcast any WiFi network when powered on, the management interface cannot be accessed over Ethernet, and the reset button seemingly does nothing. I decided to try ...
localhost's user avatar
3 votes
1 answer
540 views

Brother DCP-L2550DW Identify Toner Reset TN-760 or TN-730 (Continued)

I'm really continuing discussion on a previous question posed 2 years ago ("Identifying a toner chip and its communication protocol to re-program it"). I found that user to have the most ...
G. L.'s user avatar
  • 31
3 votes
1 answer
352 views

How is lite hash rate (LHR) of Nvidia implemented?

Nvidia limited some of their GPUs with LHR to decrease the performance of Ethereum mining. What in detail is LHR doing? It seems to limit non sequential memory operations (which is actually not what ...
David Jonsson's user avatar
2 votes
0 answers
120 views

How I can interface the MCU without soldering?

My router has the following pin layout between flash memory and MCU: The big chip is the MCU from a Sercomm H300s router. What I want is to analyze the signaling between 2 chips using the most ...
Dimitrios Desyllas's user avatar
1 vote
0 answers
61 views

I attempted to read from an Intel 87C54 microcontroller and it came up all FF's. Any way to read from this?

I'm using the popular TL866II Plus programmer to read from the chip. I see in the datasheet that it has lock bits which can disable the verify (read) function, but I'm not sure if that causes an ...
Sparkette's user avatar
  • 166
0 votes
1 answer
801 views

Windows User Identification / HWID Limiting

I've been playing a game that has an HWID limit and a bunch of other limitations, such as: a) Cannot be ran in a VM b) Cannot be ran using Sandboxie and other Sandbox environments c) Limits 3 ...
layer07's user avatar
0 votes
1 answer
303 views

Identify unknown Atmel chip

wondering if folks can help identify this chip. It looks like ATMLH017 2FCM CN ©2017AB4 Googling all manner of permutations on these numbers has not been helpful. The chip appears next to an ...
Matt Montag's user avatar
0 votes
0 answers
64 views

is it possible to get code out of chipset through reverse engineering?

for example, encryption/decryption mechanism was inbuilt in a chip, to get the code that performs this mechanisms, is there some ways you can get this code through reverse engineering? what tools and ...
hanan's user avatar
  • 309
3 votes
2 answers
238 views

How should I go about reversing this USB crypto dongle?

I have some kind of authentication token device delivered by a bank (that I do not expect to use for its initially-intended purpose any more). I’d like to learn how it works and whether I can recycle ...
user3840170's user avatar
1 vote
0 answers
219 views

Reversing Logitech G933 Battery Charge Values

I have a Logitech G933 headset. I replaced the stock battery with a larger capacity. The headset now lasts many hours longer than it was originally designed, and the software is configured to give ...
webjocky's user avatar
6 votes
1 answer
2k views

HackRF One - Replay Attack on Garage Door does not work (12 DIP switches)

TL;DR solution Setting 4MHz sample rate and 2Mhz bandwidth in the capture tab (according to the Nyquist theorem the sample rate has to be double the bandwidth) Using the length of a DIP switch ...
John St's user avatar
  • 63
1 vote
0 answers
113 views

Reverse Engineering SNES adapter

A good "Hello world" for everybody here I've bought a Mayflash PC052 adapter to convert an original SNES-mini controller (CLV-202) to a USB port on PC or PS4... The thing is, this CLV-202 ...
Thiago's user avatar
  • 11
2 votes
0 answers
67 views

Help with identifying 10pin chip

I've tried every possible combination of the markings of the chip but I can't seem to find anything on Google. I think the chip is 96TI 35R but apart from that I can't find anything. It's like the ...
Marti Markov's user avatar
5 votes
2 answers
4k views

How do I extract the firmware from this bluetooth speaker board?

I have a bluetooth speaker. Infinity Fuze 100. It's a good speaker. But it has annoying messages on startup and shutdown. And for other interface events. I'd like to either get rid of them entirely, ...
Capstone's user avatar
  • 143
1 vote
1 answer
93 views

trying to identify this SOP14 chip

I'm trying to find out what is this chip I have two devices that have this chip in them one of them stopped working and the problem was from this chip(I know that because when I removed that same chip ...
Jwdsoft's user avatar
  • 191
1 vote
1 answer
215 views

Most idiot-proof method of entry to Reverse Engineer Visual/Control feed for security camera

I am looking to reverse engineer a construction security camera. I am a self-learner, and have a very general grasp on electrical engineering and coding - so I'm not entirely 'out of my element' - but ...
Photo Voltaeic's user avatar
0 votes
0 answers
62 views

exports kernel Windows for informations on hardware

Good day! I develop small security software and use a driver like any modern security software. Can you please tell me if there are any exported functions from ntoskrnl.exe or hal.dll or other kernel ...
ALex's user avatar
  • 21
2 votes
1 answer
112 views

Identify a chip that's very hot on PCB

Does anyone recognize this chip by chance? On the chip it is written: DEYA SB86 See picture: I can't find anything on the web... Any help will be appreciated!
Elazar's user avatar
  • 21
9 votes
1 answer
3k views

Advice on how to attack my first reverse engineering project?

Suppose you've never done reverse engineering before (apart from taking apart already-broken tape recorders). Also suppose you had a machine as pictured below, with a serial-looking and another multi-...
noughtnaut's user avatar
3 votes
1 answer
785 views

Is it possible to sniff an ATA Drive password?

Context: I have a proprietary Tandberg Data RDX QuickStor Internal USB3 drive bay for PC (item number 8666-RDX) and some storage cartridges for it. Esentially, these are just regular TOSHIBA MK3276GSX ...
Brian's user avatar
  • 31
2 votes
1 answer
176 views

How devices such as smart Wi-Fi power plugs and Wi-Fi ip cameras connect to a private Wi-Fi network?

How devices such as smart Wi-Fi power plugs and Wi-Fi ip cameras connect to a private Wi-Fi network ? The usual steps are the following : You buy the device You install the maker application on ...
Erwan's user avatar
  • 121
2 votes
2 answers
350 views

Chip Identification in Push Button Toy

I have a toy that simply consists of a button which plays a variety of phrases when activated. My intention is to replace the sounds with my own. However, I have been unable to identify the chip and ...
Q3El58's user avatar
  • 121
1 vote
1 answer
121 views

Recover data from old HDD (word files mostly)

I am trying to help my mother recover some of her work from an old HDD, but I am facing multiple problems. Firstly, I do not know the best way I could interface the old HDD with my laptop (or a newer ...
Daniel Wagner's user avatar
0 votes
0 answers
767 views

Binwalk on flash dump yielding useless files and empty file systems

I have been investigating some routers by desoldering their nand flash and dumping them using a flash programmer. However when I use binwalk on these dumps I end up with fragments of files mixed in ...
Plasma_000's user avatar

1
2 3 4 5