Questions tagged [serial-communication]

Process of sending data one bit at a time, sequentially, over a communication channel or computer bus. Most of the computer systems, and especially embedded systems, have such communication port.

Filter by
Sorted by
Tagged with
0
votes
1answer
56 views

determine proprietary 16-bit floating-point format

Background / Introducion CAN message Mercedes-Benz, cannot determine 16-bit data type for temperature. 7E 00 32 01 37 00 According to @rnd-ash (who has reverse engineered ACTIA Basic XS Monitor ...
1
vote
0answers
30 views

Launching Linux kernel on UART serial interface, but can't login because key-mappings change randomly

I am trying to root an old Linux device I have, it uses the CFE bootloader by Broadcom. I know the username and the password, but something really strange happens when I try to login. I get a prompt ...
1
vote
1answer
25 views

How to capture control flow pins on emulated serial port?

I am reverse engineering how a CPS software package communicates to a radio device. I have the basics down, and want to trick the software into thinking COM1 is the radio, when in reality I want to ...
0
votes
1answer
80 views

Strategies for Deciphering RS-232 Data

I'm working with an old irrigation controller that is connected to a PC via the DB9 serial port. I was able to capture that data (tapped into the appropriate TX wire) on a separate laptop, but now I'm ...
1
vote
0answers
30 views

Tapping into Ford SCP BUS

I'm looking to tap into the Ford SCP BUS to display text onto my dashboard on my '01 Jaguar S-Type. This car has a two row screen that displays the odometer, average fuel consumption - amongst other ...
1
vote
1answer
69 views

Is it possible to see the traffic on Virtual COM Port to reverse engineer how a device works?

I have a USB device that when connected into the computer ends up showing up as 4 Virtual COM ports in the device manager. As far as I know, two of these are never used. One of them is seldom used and ...
0
votes
0answers
33 views

UART RX not accepting input

I am currently trying to gain access to an Epson PX700W printer that exposes UART. It has been shown, that the UART exposes a root shell. For Epson Artisan 700 this UART is fully functional: https://...
0
votes
1answer
33 views

The Logic Of Incremental Data on Serial Communication Encoding

These are the serial communication reverse values. I am trying to understand the logic behind this. I am pretty sure that 2 bytes represent 1 byte(high byte and low byte), values are correct. I tried ...
2
votes
0answers
14 views

LIN bus frame replacement

I am searching for a way to replace certain frames on a LIN bus network. My aim is to be able to intercept a frame in transmission, and change certain bits. Naturally, that involves recalculating the ...
1
vote
1answer
208 views

Reverse UART communication protocol

I'm objective is to build a custom wifi module to be used on a Samsung AC AR24HSFSAWKN. I have such an official module SWL-B70F for which I'm trying to reverse engineer the communication with the main ...
1
vote
1answer
152 views

Wrong keyboard strokes sent to serial in putty

I am attempting to communicate to a device i have via the onboard rx/tx solder points i found on the board. I am doing this via an arduino uno. The problem i am having is that when i connect to it ...
0
votes
1answer
81 views

Can a UART port change baud rate at runtime?

I've been probing this CCTV DVR board trying to find a serial port to see if I can get console access to it. I found a set of 4 through holes with no headers that looked like a good candidate. I ...
0
votes
1answer
37 views

How to determine commands sent over DC-37 port by software from 1992

Background Since some time we've been in the possession of a greenhouse. It was build around 1990 and had an automated system for climate control. However most of the installation has been removed ...
1
vote
1answer
74 views

t.amp Quadro 500 DSP - calculate checksum

I'm trying to decode the protocol to control the PA amp t.amp Quadro 500 DSP (also branded as FiveO AR4). The serial interface is provided by an PL2303 interface, Baud 57600 8N1. To set volume on ...
2
votes
1answer
116 views

Reverse engineering 12-byte serial packets from doorbell

I'm trying to reverse engineer the protocol used by a fairly old video intercom. Using a UART logic analyser was able to guess the baud rate, data bits, start/stop bit. It idles at 14v and pulls to ...
2
votes
3answers
173 views

Reverse Engineering RS232 protocol misterious last byte

I have an old water purifier system that consists of a PDA and a main board (I think the ic is a Renesas) that communicate by RS232, I need to know the protocol they use to communicate in order to ...
1
vote
2answers
376 views

Can a secondary UART be used to access the MCU?

I have a gamepad with a Chinese ShanWan BM-729 SWQP179 22 MCU which is most likely a clone but i didn't manage to find any info on it. The board is also lacking information like serial pins and the ...
3
votes
2answers
205 views

Reverse engineering the IBM BSC (Bisync) protocol

I am trying to connect to an old piece of communication controller which use the IBM BSC synchronous protocol but I have problems to get the CRC right. Background The protocol itself is described ...
1
vote
1answer
39 views

id the HW port and protocol

i have a vtech baby monitor and since i want to be aware of it while i'm playing in VR (PC, HTC vaive/Valve index) i still want to see if the baby starts crying. on this monitor there is external ...
0
votes
0answers
58 views

Checksum of an old serial devices

I've got an old devices which communicate through serial port. There's main device which send simple commands and then asked device responds. I've got almost all sorted out. The only thing left is the ...
3
votes
1answer
123 views

What is an "mpi register base"?

For the past few months, I have been using my spare time reverse engineering a set top box that will not be named. I am trying to run a media server or use it as a debian desktop. It is rocking a ...
1
vote
1answer
1k views

Help decoding this UART serial signal

I'm trying to break into a doorbell. It has a clearly labeled TX pin. Here's the output from my Labrador oscilloscope/logic analyzer.. I can't get it to make any sense though. Any ideas? I have the ...
2
votes
1answer
341 views

Help determining pinout for communications port

I have a Panasonic air conditioner that has a header on the mainboard that various optional (expensive) addon communications modules can connect into eg wifi The unit is a Panasonic Split system from ...
6
votes
1answer
2k views

Identifying a toner chip and it's communication protocol to re-program it

I need help identifying a chip and how to reset it from a new brother toner cartridge TN227 and TN223. This comes from the new Brother HL-L3230CDW laser printer. There is currently no information on ...
1
vote
1answer
2k views

2byte checksum for serial traffic

I'm working on an RFID reader that has partial implementation with ISO/IEC 14443-4 although not specifically compliant. I can decode a lot of the strings and understand the command base but I have not ...
0
votes
0answers
85 views

Reverse engineer 8 bit check sequence for old unkown protocol

I am using an old piece of hardware which uses an RS485 serial interface. I'm trying to simulate slave node data but I don't have any documentation on the protocol and unfortunately the hardware is ...
0
votes
1answer
537 views

Reverse engineering checksum from RS-485 device

Attempting to reverse-engineer a checksum for a serial timing device that updates a display. Protocol is partly understood, however the checksum calculation specified does not produce the expected ...
3
votes
1answer
1k views

Sniffing serial Bluetooth traffic on Android

Related to UE Megaboom serial protocol: I am trying to get some insights on the serial protocol spoken by the UE Megaboom, which I suspect is how the app controls the advanced features of the speaker. ...
2
votes
1answer
242 views

UE Megaboom serial protocol

I recently got a UE Megaboom Bluetooth speaker. Apart from various audio profiles, I noticed the speaker also exposes a Serial Port BT profile. I suspect this is the channel the app uses to control ...
0
votes
1answer
348 views

Why can't I decode this UART signal?

I have a modem that I'm trying to get into. It's composed of two SoCs, both with UART headers. I was already successful trying to connect to the first SoC's UART, with my USB-to-UART CP2102 decoder ...
1
vote
0answers
159 views

What is this RS-485 communication protocol/

I am trying to reverse engineer a two wire RS-485 standard serial bus interface to talk to a samsung heat pump. Here are some hex commands I was able to sniff. Every message starts with 0x32 and ...
3
votes
1answer
302 views

Decipher variable length serial protocol

I have an ebike consisting of a controller which regulates power to the motor and a smart LCD which can adjust max speed, power output, pedal assist sensitivity etc as well as displaying the current ...
1
vote
0answers
59 views

How to make sense of this one pin serial communication

I am trying to reverse engineer a serial communication between to microcontrollers (1 device & 1 microcontroller on a board). One MCU validates the other MCU and I want to crack the validation and ...
0
votes
1answer
308 views

Decoding serial data package

I have an assignment at work, to get information from Jenbacher generator and show values in new SCADA system. It has a B&R CP260 PLC with RS232 port and RS232 to RS485 converter. Currently it’s ...
1
vote
1answer
236 views

Hex timestamp decode

I am trying to decode this hex timestamp: 5A24 B103 73AE --> 02/26/2018 15:45:44 5A24 FC03 83BC --> 02/26/2018 17:00:48 5A24 FE03 93E3 --> 02/26/2018 17:02:58 Data is coming from an old ...
5
votes
1answer
1k views

How to identify SWD (Serial Wire Debug) pinout?

When trying to access firmware, JTAG and SWD can be really helpful to the reverse engineer. When looking at an unknown board/device tools such as JTAGEnum or JTAGulator are really helpful in ...
2
votes
0answers
137 views

serial protocol patterns

I am reversing a serial 232 protocol and I found these pattern in the data. E5 A7 CD 01 00 79 .. .. 40 00 23 00 23 00 23 00 23 00 22 00 22 00 22 00 21 follows some recording and expected approx ...
1
vote
1answer
1k views

Finding JTAG/UART Connections

I need help identifying the UART or JTAG connections on this board. I would like to dump the firmware using a pirate bus.
6
votes
3answers
5k views

Reverse engineering USB peripheral driver

I'm looking to reverse engineer a Windows driver for a printer I have here. I found out a bit about USB sniffing but I don't think Snoopy runs on Windows 7. I know the driver is on my computer ...
4
votes
0answers
339 views

Trouble finding the right Checksum algorithm

After reading a lot of posts here and their solutions, Punching lines in CRC calculators for several days now. I can't seem to find on which Checksum this code is based. Background This is a data ...
5
votes
1answer
847 views

Need help with a USB gaming mouse

I have a Chinese USB gaming mouse (04d9:a070) which has 4 color modes and 4 light levels. I know for a fact that this mouse is capable for showing at least 5 different color so it must be an RGB led (...
1
vote
1answer
536 views

What process should I follow to sniff USB serial packets and then replicate them?

Summary I'm currently using wireshark to sniff USB serial packets from a program that sends data to FPGA boards. So far I'm able to acquire the packets and data, but I'm not sure how to test each ...
0
votes
1answer
237 views

RE USB-Serial device driver [Canon ES-E1 for EOS-1V]

I've got an old film camera that uses a cable to connect to a PC. The camera records information like shutter speed, lens used, flash fired, focal length, etc. I'd like to download this information ...
3
votes
0answers
1k views

Reverse engineering unknown RS232/UART binary protocol

Background story For couple of days I'm trying to crack the protocol used the old medical device, in order to collect data for a research in an automated way. The device in question is Novametrix ...
1
vote
0answers
745 views

ZyXEL P-2812HNU-F1, replacing the U-Boot on the board

I want flash regular(non branded) firmware on ZyXEL P-2812HNU-F1 router, which have branded version of firmware (customized for local MSO provider). To do this, I should first replace the U-Boot image ...
0
votes
1answer
526 views

Handling of the communication data I received with PySerial (Python)

In a nutshell: I've sniffed the data that goes from the controlling PC to the modem via RS232 serial port by building a little Y-adapter, now I want to figure out how to reverse engineer that data so ...
1
vote
2answers
2k views

Serial output garbage

I know you have seen this asked before but hear me out first. I have a prototype device that I am playing around with. On the main board there is a USB port, next to the port there is a FTDI FT232R ...
3
votes
2answers
126 views

Finding code in MFC32 binary

I am trying to figure out where the code is that interacts with the Serial Port on an MFC Win32 binary - and am utterly out of ideas on how to find this code block. I have even tried, say, stopping ...
3
votes
1answer
730 views

Reverse engineering serial communication CRC algorithm

I'm working on reverse engineering the serial communication protocol of an obsolete electronic control system, but I'm having trouble figuring out the CRC algorithm and polynomial. I have reverse ...
4
votes
2answers
302 views

Anti-theft system rs485 keypad

I'm trying to recycle an Anti-theft system keypad. My goal is use this keypad as my system peripheral. This keypad is interfaced with its master device phisically using bus rs485. The first step in ...