Questions tagged [serial-communication]

Process of sending data one bit at a time, sequentially, over a communication channel or computer bus. Most of the computer systems, and especially embedded systems, have such communication port.

Filter by
Sorted by
Tagged with
0 votes
0 answers
167 views

Getting rid of a custom Shell on a LiteOS based outdoor camera

I started reversing this camera in order to get rid of the unwanted traffic it constantly does towards Chinese servers. I have a serial access to it thanks to an obvious UART port (bottom left in the ...
user avatar
  • 101
0 votes
1 answer
55 views

ASUS RP-AC51 UART doesn't work with any common baud rate

I have an ASUS RP-AC51. It doesn't broadcast any WiFi network when powered on, the management interface cannot be accessed over Ethernet, and the reset button seemingly does nothing. I decided to try ...
user avatar
0 votes
1 answer
93 views

determine proprietary 16-bit floating-point format

Background / Introducion CAN message Mercedes-Benz, cannot determine 16-bit data type for temperature. 7E 00 32 01 37 00 According to @rnd-ash (who has reverse engineered ACTIA Basic XS Monitor ...
user avatar
  • 103
1 vote
0 answers
45 views

Launching Linux kernel on UART serial interface, but can't login because key-mappings change randomly

I am trying to root an old Linux device I have, it uses the CFE bootloader by Broadcom. I know the username and the password, but something really strange happens when I try to login. I get a prompt ...
user avatar
1 vote
1 answer
29 views

How to capture control flow pins on emulated serial port?

I am reverse engineering how a CPS software package communicates to a radio device. I have the basics down, and want to trick the software into thinking COM1 is the radio, when in reality I want to ...
user avatar
0 votes
1 answer
83 views

Strategies for Deciphering RS-232 Data

I'm working with an old irrigation controller that is connected to a PC via the DB9 serial port. I was able to capture that data (tapped into the appropriate TX wire) on a separate laptop, but now I'm ...
user avatar
1 vote
0 answers
73 views

Tapping into Ford SCP BUS

I'm looking to tap into the Ford SCP BUS to display text onto my dashboard on my '01 Jaguar S-Type. This car has a two row screen that displays the odometer, average fuel consumption - amongst other ...
user avatar
1 vote
1 answer
145 views

Is it possible to see the traffic on Virtual COM Port to reverse engineer how a device works?

I have a USB device that when connected into the computer ends up showing up as 4 Virtual COM ports in the device manager. As far as I know, two of these are never used. One of them is seldom used and ...
user avatar
0 votes
1 answer
42 views

The Logic Of Incremental Data on Serial Communication Encoding

These are the serial communication reverse values. I am trying to understand the logic behind this. I am pretty sure that 2 bytes represent 1 byte(high byte and low byte), values are correct. I tried ...
user avatar
2 votes
0 answers
18 views

LIN bus frame replacement

I am searching for a way to replace certain frames on a LIN bus network. My aim is to be able to intercept a frame in transmission, and change certain bits. Naturally, that involves recalculating the ...
user avatar
  • 21
1 vote
1 answer
274 views

Reverse UART communication protocol

I'm objective is to build a custom wifi module to be used on a Samsung AC AR24HSFSAWKN. I have such an official module SWL-B70F for which I'm trying to reverse engineer the communication with the main ...
user avatar
  • 121
1 vote
1 answer
327 views

Wrong keyboard strokes sent to serial in putty

I am attempting to communicate to a device i have via the onboard rx/tx solder points i found on the board. I am doing this via an arduino uno. The problem i am having is that when i connect to it ...
user avatar
  • 111
0 votes
1 answer
96 views

Can a UART port change baud rate at runtime?

I've been probing this CCTV DVR board trying to find a serial port to see if I can get console access to it. I found a set of 4 through holes with no headers that looked like a good candidate. I ...
user avatar
0 votes
1 answer
42 views

How to determine commands sent over DC-37 port by software from 1992

Background Since some time we've been in the possession of a greenhouse. It was build around 1990 and had an automated system for climate control. However most of the installation has been removed ...
user avatar
1 vote
1 answer
101 views

t.amp Quadro 500 DSP - calculate checksum

I'm trying to decode the protocol to control the PA amp t.amp Quadro 500 DSP (also branded as FiveO AR4). The serial interface is provided by an PL2303 interface, Baud 57600 8N1. To set volume on ...
user avatar
2 votes
1 answer
151 views

Reverse engineering 12-byte serial packets from doorbell

I'm trying to reverse engineer the protocol used by a fairly old video intercom. Using a UART logic analyser was able to guess the baud rate, data bits, start/stop bit. It idles at 14v and pulls to ...
user avatar
2 votes
3 answers
181 views

Reverse Engineering RS232 protocol misterious last byte

I have an old water purifier system that consists of a PDA and a main board (I think the ic is a Renesas) that communicate by RS232, I need to know the protocol they use to communicate in order to ...
user avatar
  • 31
1 vote
2 answers
509 views

Can a secondary UART be used to access the MCU?

I have a gamepad with a Chinese ShanWan BM-729 SWQP179 22 MCU which is most likely a clone but i didn't manage to find any info on it. The board is also lacking information like serial pins and the ...
user avatar
3 votes
2 answers
241 views

Reverse engineering the IBM BSC (Bisync) protocol

I am trying to connect to an old piece of communication controller which use the IBM BSC synchronous protocol but I have problems to get the CRC right. Background The protocol itself is described ...
user avatar
1 vote
1 answer
45 views

id the HW port and protocol

i have a vtech baby monitor and since i want to be aware of it while i'm playing in VR (PC, HTC vaive/Valve index) i still want to see if the baby starts crying. on this monitor there is external ...
user avatar
0 votes
0 answers
65 views

Checksum of an old serial devices

I've got an old devices which communicate through serial port. There's main device which send simple commands and then asked device responds. I've got almost all sorted out. The only thing left is the ...
user avatar
  • 1
3 votes
1 answer
145 views

What is an "mpi register base"?

For the past few months, I have been using my spare time reverse engineering a set top box that will not be named. I am trying to run a media server or use it as a debian desktop. It is rocking a ...
user avatar
1 vote
1 answer
2k views

Help decoding this UART serial signal

I'm trying to break into a doorbell. It has a clearly labeled TX pin. Here's the output from my Labrador oscilloscope/logic analyzer.. I can't get it to make any sense though. Any ideas? I have the ...
user avatar
  • 455
2 votes
1 answer
396 views

Help determining pinout for communications port

I have a Panasonic air conditioner that has a header on the mainboard that various optional (expensive) addon communications modules can connect into eg wifi The unit is a Panasonic Split system from ...
user avatar
7 votes
1 answer
2k views

Identifying a toner chip and its communication protocol to re-program it

I need help identifying a chip and how to reset it from a new Brother's toner cartridge TN227 and TN223. This comes from the new Brother HL-L3230CDW laser printer. There is currently no information on ...
user avatar
1 vote
1 answer
2k views

2byte checksum for serial traffic

I'm working on an RFID reader that has partial implementation with ISO/IEC 14443-4 although not specifically compliant. I can decode a lot of the strings and understand the command base but I have not ...
user avatar
0 votes
0 answers
87 views

Reverse engineer 8 bit check sequence for old unkown protocol

I am using an old piece of hardware which uses an RS485 serial interface. I'm trying to simulate slave node data but I don't have any documentation on the protocol and unfortunately the hardware is ...
user avatar
0 votes
1 answer
660 views

Reverse engineering checksum from RS-485 device

Attempting to reverse-engineer a checksum for a serial timing device that updates a display. Protocol is partly understood, however the checksum calculation specified does not produce the expected ...
user avatar
  • 101
3 votes
1 answer
1k views

Sniffing serial Bluetooth traffic on Android

Related to UE Megaboom serial protocol: I am trying to get some insights on the serial protocol spoken by the UE Megaboom, which I suspect is how the app controls the advanced features of the speaker. ...
user avatar
2 votes
1 answer
261 views

UE Megaboom serial protocol

I recently got a UE Megaboom Bluetooth speaker. Apart from various audio profiles, I noticed the speaker also exposes a Serial Port BT profile. I suspect this is the channel the app uses to control ...
user avatar
1 vote
1 answer
381 views

Why can't I decode this UART signal?

I have a modem that I'm trying to get into. It's composed of two SoCs, both with UART headers. I was already successful trying to connect to the first SoC's UART, with my USB-to-UART CP2102 decoder ...
user avatar
1 vote
0 answers
177 views

What is this RS-485 communication protocol/

I am trying to reverse engineer a two wire RS-485 standard serial bus interface to talk to a samsung heat pump. Here are some hex commands I was able to sniff. Every message starts with 0x32 and ...
user avatar
  • 11
3 votes
1 answer
357 views

Decipher variable length serial protocol

I have an ebike consisting of a controller which regulates power to the motor and a smart LCD which can adjust max speed, power output, pedal assist sensitivity etc as well as displaying the current ...
user avatar
  • 33
1 vote
0 answers
60 views

How to make sense of this one pin serial communication

I am trying to reverse engineer a serial communication between to microcontrollers (1 device & 1 microcontroller on a board). One MCU validates the other MCU and I want to crack the validation and ...
user avatar
0 votes
1 answer
319 views

Decoding serial data package

I have an assignment at work, to get information from Jenbacher generator and show values in new SCADA system. It has a B&R CP260 PLC with RS232 port and RS232 to RS485 converter. Currently it’s ...
user avatar
  • 1
1 vote
1 answer
266 views

Hex timestamp decode

I am trying to decode this hex timestamp: 5A24 B103 73AE --> 02/26/2018 15:45:44 5A24 FC03 83BC --> 02/26/2018 17:00:48 5A24 FE03 93E3 --> 02/26/2018 17:02:58 Data is coming from an old ...
user avatar
  • 133
5 votes
1 answer
1k views

How to identify SWD (Serial Wire Debug) pinout?

When trying to access firmware, JTAG and SWD can be really helpful to the reverse engineer. When looking at an unknown board/device tools such as JTAGEnum or JTAGulator are really helpful in ...
user avatar
  • 417
2 votes
0 answers
139 views

serial protocol patterns

I am reversing a serial 232 protocol and I found these pattern in the data. E5 A7 CD 01 00 79 .. .. 40 00 23 00 23 00 23 00 23 00 22 00 22 00 22 00 21 follows some recording and expected approx ...
user avatar
  • 133
1 vote
1 answer
1k views

Finding JTAG/UART Connections

I need help identifying the UART or JTAG connections on this board. I would like to dump the firmware using a pirate bus.
user avatar
6 votes
3 answers
5k views

Reverse engineering USB peripheral driver

I'm looking to reverse engineer a Windows driver for a printer I have here. I found out a bit about USB sniffing but I don't think Snoopy runs on Windows 7. I know the driver is on my computer ...
user avatar
  • 71
4 votes
0 answers
362 views

Trouble finding the right Checksum algorithm

After reading a lot of posts here and their solutions, Punching lines in CRC calculators for several days now. I can't seem to find on which Checksum this code is based. Background This is a data ...
user avatar
5 votes
1 answer
915 views

Need help with a USB gaming mouse

I have a Chinese USB gaming mouse (04d9:a070) which has 4 color modes and 4 light levels. I know for a fact that this mouse is capable for showing at least 5 different color so it must be an RGB led (...
user avatar
1 vote
1 answer
605 views

What process should I follow to sniff USB serial packets and then replicate them?

Summary I'm currently using wireshark to sniff USB serial packets from a program that sends data to FPGA boards. So far I'm able to acquire the packets and data, but I'm not sure how to test each ...
user avatar
  • 113
0 votes
1 answer
266 views

RE USB-Serial device driver [Canon ES-E1 for EOS-1V]

I've got an old film camera that uses a cable to connect to a PC. The camera records information like shutter speed, lens used, flash fired, focal length, etc. I'd like to download this information ...
user avatar
3 votes
0 answers
2k views

Reverse engineering unknown RS232/UART binary protocol

Background story For couple of days I'm trying to crack the protocol used the old medical device, in order to collect data for a research in an automated way. The device in question is Novametrix ...
user avatar
  • 153
1 vote
0 answers
765 views

ZyXEL P-2812HNU-F1, replacing the U-Boot on the board

I want flash regular(non branded) firmware on ZyXEL P-2812HNU-F1 router, which have branded version of firmware (customized for local MSO provider). To do this, I should first replace the U-Boot image ...
user avatar
  • 215
0 votes
1 answer
553 views

Handling of the communication data I received with PySerial (Python)

In a nutshell: I've sniffed the data that goes from the controlling PC to the modem via RS232 serial port by building a little Y-adapter, now I want to figure out how to reverse engineer that data so ...
user avatar
1 vote
2 answers
3k views

Serial output garbage

I know you have seen this asked before but hear me out first. I have a prototype device that I am playing around with. On the main board there is a USB port, next to the port there is a FTDI FT232R ...
user avatar
  • 111
3 votes
2 answers
133 views

Finding code in MFC32 binary

I am trying to figure out where the code is that interacts with the Serial Port on an MFC Win32 binary - and am utterly out of ideas on how to find this code block. I have even tried, say, stopping ...
user avatar
3 votes
1 answer
757 views

Reverse engineering serial communication CRC algorithm

I'm working on reverse engineering the serial communication protocol of an obsolete electronic control system, but I'm having trouble figuring out the CRC algorithm and polynomial. I have reverse ...
user avatar