└── README.md /README.md: -------------------------------------------------------------------------------- 1 | # Hardware hacking for software folks 2 | 3 | Aggregated resources on hardware hacking/embedded device exploitation for software exploitation people. 4 | 5 | Topics include: 6 | - Hardware hacking. 7 | - Firmware analysis. 8 | - ARM | MIPS exploitation. 9 | 10 | **Feel free to add any resources that you think will fit in this list** 11 | 12 | 13 | ## Reading material 14 | 15 | ### Blogs 16 | 17 | http://www.devttys0.com/
18 | http://hackaday.com
19 | https://dontstuffbeansupyournose.com/
20 | 21 | ### Books 22 | 23 | - Android Hacker's Handbook (esp. hardware hacking chapter) 24 | - Hacking the Xbox https://www.nostarch.com/xboxfree 25 | - Car hacker's handbook(GPL 3.0) http://opengarages.org/handbook/ 26 | 27 | ## Electric/Electronic stuff 28 | - EEVBlog 29 | https://www.youtube.com/user/EEVblog/videos 30 | 31 | ## Free Courses 32 | 33 | - Hardware reverse engineering by RPISEC 34 | http://security.cs.rpi.edu/courses/hwre-spring2014/ 35 | 36 | - Introduction to ARM architecture 37 | http://www.opensecuritytraining.info/IntroARM.html 38 | 39 | 40 | 41 | ## Hardware 42 | 43 | ### ARM Boards 44 | - Raspberry 45 | - Beagle Board 46 | - ARMini 47 | - CuBox 48 | - Panda board 49 | - Gumstix 50 | 51 | ### Hacker gadgets 52 | 53 | - Bus pirate (open source hardware) 54 | http://dangerousprototypes.com/docs/Bus_Pirate 55 | 56 | - JTAGulator (open source hardware) 57 | http://www.grandideastudio.com/portfolio/jtagulator 58 | 59 | ## Software 60 | 61 | **QEMU** - For emulating ARM architecture on your X86 machines. 62 | 63 | 64 | **Interfacing software** 65 | 66 | - Minicom 67 | - OpenOCD 68 | 69 | 70 | **Firmware analysis tools** 71 | - Firmwalker 72 | - Firmware Modification Kit 73 | - Angr binary analysis framework 74 | - Binwalk firmware analysis tool 75 | - Binary Analysis Tool 76 | - Firmadyne 77 | - Flashrom 78 | 79 | **Binary analysis & Reverse engineering tools** 80 | 81 | - IDA pro 82 | - Radare 2 83 | - Hopper 84 | 85 | ## Conferences 86 | 87 | - Chaos Communication Congress 88 | https://www.youtube.com/user/CCCen/videos 89 | 90 | - Hardware.io 91 | http://hardwear.io/ 92 | 93 | 94 | ## Projects 95 | 96 | - OWASP IoT project 97 | https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project 98 | 99 | - Damn Vulnerable Router Firmware 100 | https://github.com/praetorian-inc/DVRF 101 | 102 | ## Paid courses 103 | 104 | - SEx via HEx by xipiter 105 | http://www.sexviahex.com/ 106 | 107 | - IoT Firmware Exploitation 108 | https://www.tacnetsol.com/collections/2016-live-training/products/iot-firmware-exploitation 109 | 110 | - Offensive IoT Exploitation 111 | http://nullcon.net/website/nullcon-bang-2016/training/offensive_iot_exploitation_training.php 112 | 113 | - Pentester Academy: Offensive IoT exploitation 114 | https://www.pentesteracademy.com/course?id=27 115 | 116 | - Pentester Academy - Make your own Hacker Gadget 117 | https://www.pentesteracademy.com/course?id=15 118 | 119 | 120 | ## People 121 | 122 | - Joe Grand, Grand Idea Studio 123 | - Stephen Ridley, Xipiter 124 | - Travis Goodspeed, twitter.com/travisgoodspeed 125 | - Andrew "bunnie" Huang, bunniestudios.com 126 | - Craig Smith 127 | - Charlie Miller 128 | 129 | ## Other links 130 | http://jcjc-dev.com/2016/04/08/reversing-huawei-router-1-find-uart/ 131 | --------------------------------------------------------------------------------