Questions tagged [hardware]

Any physical device analyzed for reverse engineering purpose. This tag is used to denote that the question is about hardware reverse engineering and not (only) about software reverse engineering.

39 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
83 views

How does cartridge protection distinguish an original vs fake cartridge?

Based on what explained here, genuine ink cartridges may come with cartridge protection embedded in their chip. Once an ink cartridge is installed, printer will mark it as protected. What is ...
4
votes
1answer
450 views

Identifying a toner chip and it's communication protocol to re-program it

I need help identifying a chip and how to reset it from a new brother toner cartridge TN227 and TN223. This comes from the new Brother HL-L3230CDW laser printer. There is currently no information on ...
4
votes
0answers
51 views

Reverse engineering Nord Lead 4 control board

I am reverse engineering a synthesizer named nord lead 4. I want to tap in between the control board and mainboard which has the microprocessor. I didn't start analyzing the signals on the board ...
4
votes
0answers
286 views

Trouble finding the right Checksum algorithm

After reading a lot of posts here and their solutions, Punching lines in CRC calculators for several days now. I can't seem to find on which Checksum this code is based. Background This is a data ...
4
votes
0answers
185 views

How to perform manual flashing of a bricked device?

I bought a broken Zoom H4n audio recorder, expecting an easy repair. What I got is a little bit over my head. It isn't booting (beyond a certain point) and I can't enter the firmware update tool. I ...
4
votes
0answers
99 views

DSi Data Recovery Process?

I have been asked to recover data from a Nintendo DSi device that has some critical pictures and audio on it. After looking closely at the system, it appears that the memory must be integraded onto ...
3
votes
0answers
76 views

Trying to identify Renesas Device through CPU die inspection

Was wondering if someone could help me identify a Renesas device by looking at the CPU circuitry layout of the device. The model # of the device is R8A02021ABG, and it is attached to a roland music ...
3
votes
0answers
914 views

Reverse engineering unknown RS232/UART binary protocol

Background story For couple of days I'm trying to crack the protocol used the old medical device, in order to collect data for a research in an automated way. The device in question is Novametrix ...
3
votes
0answers
93 views

“Sound Box” Custom Message

I am trying to put a custom message on a "sound box" in a stuffed animal. Here is a picture of the circuit board: The blue wires lead are connected to the speaker. I am thinking that those pads ...
2
votes
0answers
38 views

Voltage Glitching to Read Internal EEPROM

I am trying to read the cryptographic key from my car key fob for exploration, basically seeing if I can clone it. I popped open the case and I see it's using a Microchip HCS361. The HCS361 stores it'...
2
votes
0answers
89 views

Hacking old gym equipment

Anyone reversed ifit? I just picked up a discounted NordicTrack Elite 11.0 Elliptical on Ebay, I want to hack it. I would like to extract performance data and it would be great if I could control ...
2
votes
0answers
43 views

Is there a way to identify a specific microprocessor model?

I'm working on reversing a USB flash drive controller chip. I know there's a microprocessor that runs some 8051 variant, and I have the ability to run arbitrary code on it. There's lots of different ...
2
votes
0answers
153 views

Reverse engineering a checksum algorithm

I am attempting to implement an editor for a discontinued hardware drum synthesizer which uses undocumented system exclusive MIDI messages for communication. I've figured out the patch format, but I ...
2
votes
0answers
86 views

Reversing a firmware update for an LG HTS

I'm trying to reverse a firmware update for an LG Home Theater BH7220, and I've hit a brick wall. This HTS has a main chip from LG referred to as "BH7000:1165" in the schematics. The chip has the ...
2
votes
0answers
73 views

Identifying unknown chip - markings erased

There seems to be a (relatively) easy way to remove the markings on a chip via laser. When reverse engineering a device with such a chip, what would be some methods of identifying it. It seems that ...
2
votes
0answers
287 views

What optics are used in Microsoft HoloLens?

How does Microsoft project an image so close to the eye yet understandable by the brain? How is the display transparent? This link has good information but is speculative. https://www.reddit.com/r/...
1
vote
0answers
44 views

Dumping firmware from Winbond W25Q64JVSSIQ using BusPirate

I have a Winbond W25Q64JVSSIQ flash chip that supports SPI. I've connected BusPirate through a SOP8 cable to the memory chip. PWR and VREG LEDs are on, so they're connected. BusPirate is connected to ...
1
vote
0answers
27 views

Using an arduino or raspberry pi, how can I drive and control a proprietary diehen servomotor?

I’m trying to resurrect this robot from Daihen-I need to determine how this proprietary motor and encoder are wired. Anyone got experience with this?
1
vote
0answers
65 views

Need help : restoring a netgear dgn1000 v3 adsl modem/router

coming in from openwrt forum: https://forum.openwrt.org/t/trying-to-rescue-bricked-dgn1000-v3-need-help/36909 currently have serial console but i may have borked the u-boot looking for help on how to ...
1
vote
0answers
49 views

Motorola Freescale mpc564 microcontroller

Im hoping somebody here can give me some advice. Im trying to read the flash contents of a Mpc564 Motorola MCU. The flash size is 512KB The processor was removed from a bad circuit board. Is there ...
1
vote
0answers
110 views

Reverse engineering a bar code's check digit

I'm looking for a tool to reverse engineer a checksum character. Just something to brute force through most commonly used checksum char algorithms without the needing to implement every single one of ...
1
vote
1answer
131 views

Bp on memory access in arm deb

I'm using idapro for arm native debugging (with androidseever) . I'd like to check when a memory data is read by code (what instruction and where). Hardware bp is not possible. How can i do? How to ...
1
vote
0answers
100 views

What is this RS-485 communication protocol/

I am trying to reverse engineer a two wire RS-485 standard serial bus interface to talk to a samsung heat pump. Here are some hex commands I was able to sniff. Every message starts with 0x32 and ...
1
vote
0answers
99 views

How to dump firmware from R5F71424 MCU

I've read through the Renesas SH7417 family manual and I don't see how to extract the firmware. It has a limited boot mode that only allows writing to the MCU. Any pointers or ideas would be helpful....
1
vote
0answers
89 views

MSP430 JTAG FUSE

I'm using MSP430 micro controller which support physical fuse for jtag. The problem is I have blown the physical fuse so I can't interact with the controller, is there any way that I can interact with ...
1
vote
0answers
92 views

Trying to read/write an Renesas's M30626FHPGP flash memory

I need to make a little introduction: I'm a 37 years old man who is affected by multiple sclerosis. My neurologist gave me Rebif 44 (44mg) as a treatment. I started at full dose and went on for, ...
1
vote
0answers
101 views

Patch is detected yet hardware access breakpoint isn't hit

I wonder how is that possible. I found debugger detection in TLS Callback function - there is conditional jump after some check. When I step over it with debugger and modify ZF flag to bypass ...
1
vote
0answers
307 views

Discovering byte array obfuscation function

I'm in the middle of reverse engineering SafeNet (formerly Rainbow) iKey 1000 USB dongle protocol, in order to create Linux driver for it. I'm using Windows as guest in virtual machine on Linux host ...
1
vote
0answers
126 views

Serial console stops output abruptly

I've been playing with a device similar to this one: EPC3208G. I've connected GND, TX and what i think is an RX pins via ttl adapter. Using minicom, 8N1 and baudrate of 115200, I managed to get some ...
0
votes
0answers
27 views

Is it possible to read a device's firmware or internal programming in computer's RAM?

Let us say I want to reverse engineer a PCIe-based FPGA device. Can I read or extract the IP core or any firmware in the computer's RAM or by trying to communicate with the device in some way?
0
votes
0answers
28 views

Make operational an old FTDI USB hardware on new OS

I have an old hardware that is controlled by a software for which I don't have the source code and the company that made it has closed their business. The original software is really slow (it use ...
0
votes
0answers
15 views

Samsung A520F usb type-c uart debug mode

I'm trying to create UART cable for A520F phone with USB type-c. Seems, there is no UART debug modes S8+ either. On Samsung phones with micro USB one may access UART JIG mode with 619K resistor, ...
0
votes
0answers
56 views

Export logic analyzer data to protocol analyzer

Probably I'm little ot but I'm unsure where to ask this. Is there any easy (already working) way to export my logic analyzer data (vcd format) to a protocol analyzer like Wireshark? I'm analyzing an ...
0
votes
1answer
51 views

Need to identify a diode

I need help as i'm new to reverse engineering. I need to identify a diode in a PCB that i'm currently working on. Do you guys have any idea or advise on how to identify the diode. The diode which I ...
0
votes
0answers
32 views

Can anyone please help to identify an unknown chip on auo lcd

I am trying to identify an unknown chip with these markings: 2L736 OE1940 Can anyone please help me? I have become frustrated over this.
0
votes
0answers
23 views

Find with IDA where an executable checks for devices plugged into computer

The executable is a firmware updater for a specific device. I want to find where exactly does the executable checks for the devices plugged into the computer, before updating the firmware of the ...
0
votes
0answers
39 views

Can machine learning be used to simulate the working of an actual machine?

I have seen one paper on decompiling C code and other software-based reverse engineering (of sorts) been done using machine learning (or claims on doing so). I am interested in finding out if the ...
0
votes
0answers
1k views

Emulating a sentinel c-plus security dongle to attach to a virtual machine

My company has an ancient payroll system that we want to virtualise so that it can be preserved for legal reasons. The software runs on an operating system called THEOS http://www.theos-software.com/ ...
0
votes
0answers
1k views

How to hack a digital photo frame to remove JPEG compression?

I have purchased this digital photo frame: http://www.globalshiping.com/en/usb-24-tft-16mb-digital-photo-frame-flash-can-store-32-of-your-favorite-photos.html?language=en&currency=USD[1] I am ...