Questions tagged [jtag]
JTAG, short for Joint Test Action Group, is a method used for boundary scanning. Possibly applications are hardware testing/debugging and firmware flashing, including debricking of hardware which ended up in a defunct state.
18
questions with no upvoted or accepted answers
5
votes
0
answers
129
views
JTAG Dumped Flash is scrambled
I dumped the flash memory of an old ARM9 Chip running VxWorks using the SEGGER J-Link and the savebin command from J-Link Commander.
Here is an example of a line of HTML stored on memory.
<!DOC^...
- 51
4
votes
0
answers
26
views
JTAG Version 2.0 or 2.1
I need to identify which device has JTAG Version 2.1 for TI TMS320DM8168CCYG4 (Digital Media Processor). What socket is recommended?
4
votes
1
answer
208
views
What is an "mpi register base"?
For the past few months, I have been using my spare time reverse engineering a set top box that will not be named. I am trying to run a media server or use it as a debian desktop. It is rocking a ...
- 41
3
votes
0
answers
60
views
Help required to figure out the JTAG or UART pins
I have an old CDMA dongle lying around, so I thought to try to reverse engineer them, but am unable to figure out the UART or JTAG pins, I have attached a photo of the probable pins, can anyone help ...
2
votes
0
answers
47
views
Greenpacket OH-735 onboard header
I got myself a Greenpacket OH-735 LTE outdoor unit. On the outside it has a SIM slot and an ethernet interface. Access to the web interface is pretty restricted, not much to set and it is branded with ...
- 21
2
votes
0
answers
142
views
MSP430 JTAG FUSE
I'm using MSP430 micro controller which support physical fuse for jtag. The problem is I have blown the physical fuse so I can't interact with the controller, is there any way that I can interact with ...
2
votes
0
answers
317
views
Help identify missing component for jtag connection
I found JTAG header for ARM (OMAP3x). It's a Cortex 10-pin 0.05" JTAG/SWD Connector.
(See here)
I think it's JTAG because PIN#3 and 5 are on GND and it's close of CPU
When I follow the wires, TCK, ...
- 185
2
votes
0
answers
542
views
Solve problem with debugging Linksys-wrt54gl with JTAG using BusPirate programmer
I am getting this output when I am issuing this command:
$ sudo openocd -f board/MyBuspirate.cfg -f board/linksys-wrt54gl.cfg
Open On-Chip Debugger 0.10.0+dev-00092-g77189db (2017-02-25-13:44)
...
- 131
2
votes
0
answers
183
views
JTAG finding BS registers for IC's pins
On the internet, it always shows that each pin of the IC has its own Boundary Scan register (the yellow boxes)
But looking at BSDL files there are actually more BS registers than pins.
So for the ...
- 21
1
vote
0
answers
47
views
Reading/writing flash ROM connected to OMAP L138 without JTAG
I have a product that uses an OMAP L138 with a flash rom. There are a couple different models of this product available, but they all share the same hardware with the only difference being the ...
- 141
1
vote
0
answers
381
views
WRT54GL firmware extraction via JTAG with OpenOCD and Raspberry Pi as interface. Can not dump because the device is not halted
Good day!
Sorry to come up with something very old. Since I am currently teaching myself hardware hacking, I wanted to use my old router for this. I soldered pins to the JTAG interface and connected ...
- 11
1
vote
0
answers
92
views
cheap BGA x-ray machine?
I want to look under a BGA chip and map JTAG pins to traces where I can attach a JTAGulator. Is there some version of a BGA x-ray that isn't thousands of $'s?
Here's a picture of the BGA's. Would it ...
- 131
1
vote
0
answers
171
views
ARM 20-pin JTAG header?
I'm trying to find the JTAG header for an Intel X Scale (ArmV5) PXA270 board. I found and populated a 20-pin header:
but JTAGulator doesn't think it has a valid combination of TDI/TDO/TMS/TCK on ...
- 131
1
vote
0
answers
109
views
Finding the function of test points on a router
I have a BCM3383 based cable router here where I ultimately want to dump the firmware. I have serial access to the broadcom bootloader and the linux console. Login for linux is unkown and telnet does ...
- 11
1
vote
0
answers
1k
views
Trying to dump firmware from embedded flash
I have an Infineon XC161CJ-16F SoC and Micron/ST M29W320EB parallel nor flash memory that I am trying to dump the firmware from but I'm not sure how to proceed. I found JTAG pads that I soldered pins ...
- 11
1
vote
0
answers
331
views
OpenOCD, Buspirate JTAG reads fail after short time
I have a board that I'm reversing - and attempting to dump the image out of the NAND flash.
Board has a SAMSUNG s3c2440 SOC CPU, and there's a SAMSUNG k9f1g08u0d 128 MB NAND flash device.
I'm using ...
- 11
0
votes
1
answer
57
views
Microchip ATSAME70Q21-CN unable to connect with JTAG or SWD
First time delving into hardware reverse engineering and can't seem to connect using JTAG nor SWD. I found two identical devices that I'm trying to understand how they work and see if I can extract ...
- 1
0
votes
0
answers
60
views
embedded Linux, UART & JTAG disabled, how to access system?
So i have this device running embedded Linux, UART and JTAG interfaces are disabled by software. The device creates a WiFi hotspot and i know the password. By entering the devices IP adress i can ...
- 1