Questions tagged [physical-attacks]

Attacks requiring a physical access to the target device or infrastructure to operate.

Filter by
Sorted by
Tagged with
10 votes
3 answers
2k views

How to reverse engineer an ATM?

This question is using ATMs as an example, but it could apply to any number of 'secure' devices such as poker machines, E-voting machines, payphones etc. Given that ATMs are relatively hardened (in ...
NULLZ's user avatar
  • 343
9 votes
1 answer
3k views

Advice on how to attack my first reverse engineering project?

Suppose you've never done reverse engineering before (apart from taking apart already-broken tape recorders). Also suppose you had a machine as pictured below, with a serial-looking and another multi-...
noughtnaut's user avatar
8 votes
1 answer
902 views

What is fault-injection reverse engineering? What are the techniques involved?

Trying to extract data from the hardware is often quite difficult (especially when dealing with smartcards). Fault-injection attacks allow to guess cryptographic keys based on the propagation of ...
perror's user avatar
  • 19.1k
5 votes
1 answer
1k views

What is SCARE (Side-Channel Attacks Reverse-Engineering)?

When reversing smart-cards, the side-channel attacks are known to be quite effective on hardware. But, what is it, and can it be used in software reverse-engineering and how?
perror's user avatar
  • 19.1k
3 votes
2 answers
225 views

Attack on wireless interconnection [duplicate]

Scenario: Two devices have wireless connect. ( like wi-fi ) Probably encrypted. ( like wi-fi's WPA2 ) Which instruments are best for discovering carrier frequency? How encrypted-text should be ...
polar bear on the white snow's user avatar
2 votes
0 answers
98 views

Identifying unknown chip - markings erased

There seems to be a (relatively) easy way to remove the markings on a chip via laser. When reverse engineering a device with such a chip, what would be some methods of identifying it. It seems that ...
pzirkind's user avatar
  • 437
1 vote
1 answer
535 views

Do TPMs Send Stored Keys in Plaintext?

As you may know, the TPM (Trusted Platform Module), which resides on the LPC bus, allows the storage and retrieval of encryption keys and certificates securely. Within this Trusted Computing concept, ...
Alpha's user avatar
  • 43
1 vote
1 answer
40 views

MITM a Connection Between Components on a Motherboard

I have been thinking about it lately and was wondering if a Man In The Middle attack could be established physically on a motherboard. The goal would be to intercept the signals between two ...
Alpha's user avatar
  • 43