Skip to main content
5 votes
Accepted

Hex timestamp decode

import sys import os if(len(sys.argv) != 2): sys.exit("usage %s 0xdead" % os.path.basename(sys.argv[0])) if((sys.argv[1].startswith("0x")!=True) or (len(sys.argv[1])!=6 )): sys.exit("0x ...
blabb's user avatar
  • 16.7k
4 votes
Accepted

Need help with a USB gaming mouse

my understanding of USB is very low at best (even if I do develop some simple USB devices for a living) so read this with major prejudice... Your driver class and configuration must match the USB (...
Spektre's user avatar
  • 1,384
4 votes
Accepted

Reverse engineering serial communication CRC algorithm

This question seems simpler than you might expect. Since as OP noted, the code is irrelevant to validation mechanism used in the discussed system, I shall ignore it. It is indeed irrelevant as will ...
NirIzr's user avatar
  • 11.8k
4 votes
Accepted

Reverse engineering the IBM BSC (Bisync) protocol

SOLUTION I got help from a guy named Peter. He gave me a piece of test code in C. The CRC algorithm looked pretty similar to the ones I already tried. But what was important was that he pointed out ...
Mattis Lind's user avatar
4 votes

Reverse engineering the IBM BSC (Bisync) protocol

If you have known data and a known CRC, and an unknown value (like the initial CRC value or the final XOR value), you can always loop through all possible values and find those that give you the ...
Malvineous's user avatar
3 votes

Why can't I decode this UART signal?

Answering my own question: just figured out that the board that the CP2102 decoder was mounted on had a LED wired to the RXD line. It happens that this board was poorly designed, and this LED was set ...
Bernardo Donadio's user avatar
3 votes

Reverse engineering USB peripheral driver

Well, your question is a bit broad as it stands, but let's take it one by one. Typically (but not always) drivers for printers these days are user mode drivers (UMDF), which means you're looking for a ...
3 votes
Accepted

2byte checksum for serial traffic

It is a CRC-A checksum. 16bits. Preface: From my research this is the crc for that standard. Its calculated from start of packet up to checksum https://crccalc.com Put 8209 and check the result: ...
Thomas's user avatar
  • 178
2 votes

Decoding proprietary 485 comms

I managed to decode the protocol on XYE connection. My findings are here https://codeberg.org/xye/xye The XYE connection is the bus between a central controller and the indoor units. The bus from the ...
xye's user avatar
  • 21
2 votes

Reverse engineering checksum from RS-485 device

The protocol spec clearly does not apply to your device, so don't bother trying to use its checksum calculation. However it may be similar enough to provide some clues to the actual protocol. The ...
Bruce Abbott's user avatar
2 votes

Sniffing serial Bluetooth traffic on Android

According to this StackOverflow answer, Android has a setting in Developer Options from 4.4 onwards. You first need to enable Developer Settings (if you have not done so already), then enable “Enable ...
user149408's user avatar
2 votes

UE Megaboom serial protocol

If the device doesn’t respond to unsolicited traffic, it probably needs some specific commands to return results. You could try bruteforcing it by sending random data but it’s a chancy business. A ...
Igor Skochinsky's user avatar
  • 36.9k
2 votes

Identifying a toner chip and its communication protocol to re-program it

If you have a Brother printer you can use these instructions I found on Amazon on how to reset your cartridge chip, it worked for me. "I was able to reset my toner cartridges for this model by using ...
Tim Do Brava's user avatar
2 votes

Finding JTAG/UART Connections

In the second picture on the bottom there is an nonpupulated connector, whose pins are labeled RX and TX. Thats at least one of maybe more uart interfaces. You should additionaly check the traces on ...
user5626466's user avatar
2 votes
Accepted

Decipher variable length serial protocol

I understand your Arduino serves as a relay in the middle between the controller and the LCD. What you could do (not extremely exciting, but you did not mention whether you made similar experiments ...
josh's user avatar
  • 1,974
2 votes

Help decoding this UART serial signal

Every UART packets contains a start bit what is always 0 and 1 or 2 stop bit(s) what is/are always 1. If you check the middle of your trace there are single 1 bits with some spaces between them. Every ...
0x6261627564's user avatar
2 votes
Accepted

Reverse engineering 12-byte serial packets from doorbell

Based on how you have laid it out, you look to have it mostly mapped out correctly, The preamble (control device wake up) would be a general broadcast message to all units on the data bus, (The pull ...
Reroute's user avatar
  • 136
2 votes

Wrong keyboard strokes sent to serial in putty

You have probably tried already but other baud rates? 9600, 1200, 2400, 57600 Seems like 8,N,1 is common? 8 DATA, No parity, and 1 STOP bit Maybe helpful? https://stackoverflow.com/questions/...
Liam Mitchell's user avatar
2 votes

Reverse UART communication protocol

From my question: It seems to work :) Is the message length more or less ;) See procedure bellow Still wondering if it's a "common/standard protocol"? Procedure I have removed the module ...
KumZ's user avatar
  • 141
2 votes
Accepted

determine proprietary 16-bit floating-point format

Maybe it is the temperature in Kelvin: 311 - 80/2 = 217K = -2.15°C Or the offset is different than 80/2. A 16-bit floating-poitn format, especially a different one from IEEE-754 is highly unlikely. ...
ProjectPhysX's user avatar
2 votes

Reverse Engineer 16 Bit error checking byte calculation

So, after reviewing This following Stack Overflow Question I opened up an excel and made some tests and effectively Sum of all bytes is the calculation Hex ff 00 00 04 00 00 00 00 00 13 00 ...
Pau Coma Ramirez's user avatar
2 votes
Accepted

Reverse Engineer an ultrasonic cartridge communication with the station to bypass remaining uses

I think its pretty obvious it is my first time doing this. Example: FB 05 01 03 86 00 8E BF FB: Opens comm 05 01 03: Cartridge model 86 00: The actual number. 86 = a, a = X/150, 00 = b, b = X%150, ...
fpp's user avatar
  • 41
1 vote

Reverse Engineering RS232 protocol misterious last byte

Without access to the code it’s hard to say for sure but I think it’s some kind of sequence number. I’d suggest trying to record as many sequences as you can and try sending the replay on your own to ...
Igor Skochinsky's user avatar
  • 36.9k
1 vote

Can a secondary UART be used to access the MCU?

I see the following possibilities: intercept Bluetooth communication and inject bogus packets to crash the CPU firmware and hopefully achieve code execution. This is very difficult to do blindly ...
Igor Skochinsky's user avatar
  • 36.9k
1 vote
Accepted

id the HW port and protocol

It seems CSB is Chip select, and MISO (Master in/Slave out) is a typical name for an SPI pin.
Igor Skochinsky's user avatar
  • 36.9k
1 vote

Help determining pinout for communications port

I think the pinout is the following according to Server Back-Up PC Board manual:
ttt's user avatar
  • 11
1 vote

How to identify SWD (Serial Wire Debug) pinout?

Not aware of any similar software tools for SWD, but: If you can see or infer the chip part number, look at the data sheet. Look for test points (or connectors) that may be used in factory ...
esrever's user avatar
  • 55
1 vote

Reverse engineering USB peripheral driver

Answers to this question deal with generic reversing of USB devices, but if you want to start from the driver files, find the printer in Device Manager, go to properties, then Driver tab-Driver ...
Igor Skochinsky's user avatar
  • 36.9k
1 vote

Reverse engineering USB peripheral driver

I am more familiar with linux but some steps are similar. To find where is your driver, I believe that if you plug your device and go in the Device Manager, click right on the device then properties, ...
Amaury Pouly's user avatar
1 vote
Accepted

What process should I follow to sniff USB serial packets and then replicate them?

Well for starters you are going to want an in Kernel USB monitor like Linux has, a pass through USB analyzer (more expensive, but more flexible) or something like a logic analyzer. Here is a video ...
cb88's user avatar
  • 2,330

Only top scored, non community-wiki answers of a minimum length are eligible