Questions tagged [spi]

Acronym for 'Serial Peripheral Interface' (SPI), the SPI bus is a synchronous serial communication interface specification used for short distance communication, primarily in embedded systems.

Filter by
Sorted by
Tagged with
0 votes
0 answers
65 views

What are the general steps for reverse engineering a windows SPI driver for linux?

I have a fingerprint reader on my laptop that works under windows that doesn't show up on lsusb. Which means its not connected via USB. Through some digging around, I found out that this specific ...
juztignoreme's user avatar
2 votes
0 answers
106 views

Reverse engineering 18 Bytes protocol

I'm not really used to do algorithm reverse engineering, so I need some help It's a SPI communication between a STM and a wireless chip, hopefully the data were correctly acquired by the logic ...
bigboss59400's user avatar
0 votes
1 answer
152 views

Contents of SPI NOR Flash appears scrambled

I'm working on reverse engineering a small household weather station, and I have successfully managed to extract the contents of a SPI NOR flash chip (using a modified version of this Python library ...
BarrowWight's user avatar
2 votes
1 answer
285 views

Where is the legacy BIOS stored on a UEFI system?

Where is the legacy BIOS (the 16 bit reset code that jumps to the POST entry point at F000:E05B and indeed POST itself and all the BIOS routines) originally stored on a UEFI system before it's ...
Lewis Kelsey's user avatar
3 votes
1 answer
209 views

Dump Headunit Software

I am a computer engineering senior and have a few quick questions i couldn't find any hits about online. I know just enough to get myself into trouble. Note: I have no specialized tools just a DMM and ...
DaCoder's user avatar
  • 31
2 votes
1 answer
374 views

How to dump firmware from ATWINC1510

I got a ATWINC-1510 based device in front of me where I want to dump the firmware / flash contents from into a bin file. I know that the IC offers an SPI interface through the pins described in the ...
cobz's user avatar
  • 121
1 vote
1 answer
253 views

SD card microcontroller

I have an SD card that I want to copy the firmware / memory from, my question is what pinouts do I connect to the SPI programmer and what are the commands to copy all of the firmware /memory. Thank ...
user29875's user avatar
2 votes
1 answer
779 views

SPI Flash, how to find the System memory addresses?

How to determine the System memory addresses of SPI Flash used in device running eCos operating system? For example, show flash command returns the following info: Flash Device Information: ...
minto's user avatar
  • 215
2 votes
1 answer
3k views

Reverse Engineering BIOS (AMI A0.57)

Recently I got really interested in BIOS RE and I used chipsec to dump the content of SPI Flash ROM of my HP Omen Desktop PC to start my journey. But unlike older BIOSes, the binary file was pretty ...
LD2's user avatar
  • 21
1 vote
1 answer
545 views

SPI device sniffing/mirror feature

I have an an embedded Linux ARM board, where an application opens the /dev/spidev1.0 device and constantly talks through with another MCU. Now, if I I try to look at what exchanges (that's what I'd ...
amgnet's user avatar
  • 105
1 vote
0 answers
2k views

Dump a MX25L12845E with a bus pirate and flashrom

I just received my buspirate, I now want to dump a flash (MX25L12845E). I tried the following command: flashrom -V -p buspirate_spi:dev=/dev/tty.usbserial-AJ02XILF,spispeed=1M -r MX25L128.bin -c ...
VivienG's user avatar
  • 161
8 votes
1 answer
2k views

Reversing a 2.4Ghz Quadcopter remote control

TL;DR - I can't figure out why I'm failing to replicate the Quadcopter's remote control with, say, Arduino and NRF24L01 after eavesdropping the SPI commands on the remote control. So I got this ...
Omer's user avatar
  • 256
0 votes
1 answer
189 views

I wonder about the SPI memory access [closed]

Good evening. I have a question. I have been using router has failed. I would like to proceed with the SPI memory dump. And I have connected to the SPI memory in the router board using the Bus ...
malware's user avatar
  • 19
2 votes
0 answers
707 views

Flashing NVRAM with U-Boot 1.2.0

I tried to program SPI Flash NVRAM (S25FL064A) from U-boot, but it not allow to write: tftp 0x80000100 nvram.bin cp.b 0x80000100 0x007b0000 0x00050000 There is no error shown after cp.b command, ...
Lexx Luxx's user avatar
  • 203
1 vote
1 answer
2k views

Erase the data from the NVRAM

Cable modem SPI Flash memory have the following structure: 7 cmdlinepart partitions found on MTD device spansion partitions[0] = {.name = U-Boot, .offset = 0x00000000,.size = 0x00020000 (128K) } ...
Lexx Luxx's user avatar
  • 203
1 vote
1 answer
1k views

In-circuit programming of SPI Flash memory

Is it possible to define (using only visual inspection of PCB and multimeter) whether or not SPI Flash memory can be properly programmed keeping the device In-circuit, without desoldering IC from the ...
Lexx Luxx's user avatar
  • 203
4 votes
1 answer
522 views

Potentially non-standard SPI communication

I am looking at a SPI EEPROM chip on board which is unfortunately hidden under an epoxy blob. However, I was able to determine the pinout thanks to the silkscreen. Dumping the EEPROM with a Bus ...
mncoppola's user avatar
  • 1,388
2 votes
2 answers
1k views

How to find SPI pads (4 of them) on a logic board?

I have a logic board with 20 pads accessible on it. I know 2 of the 20 pads are UART (TX / RX) and one pad appears to reset the device when connecting a multi meter to it, so I presume that has ...
ipatch's user avatar
  • 331
7 votes
3 answers
5k views

Dump Flash Memory with SPI from SPANSION FL016KIF

I have a SPANSION FL016KIF (pinout on p.12) on a board and I want to dump the data. I try to use the BusPirate v3 for that. I want to do this in-circuit. I didn't connect WP# and HOLD#. This is the ...
samuirai's user avatar
  • 3,059
22 votes
1 answer
33k views

How to dump flash memory with SPI?

Often flash memory is connected via SPI (Serial Peripheral Interface Bus) to a processing unit like an ARM core or a micro controller. How can one dump the memory? Can there be protection mechanisms? ...
samuirai's user avatar
  • 3,059