Hardware Hacking 2 Day Course – 9th May 2022

This is a 2 day Hardware Hacking Course

The Course Outline

This is a structured course aimed at those in the IoT Industry or wishing to learn more about the art of Hardware Pen Testing. Unlike other courses that just teach techniques, we also explore the risk element and the mitigation of such attacks and some of the challenges of introducing these mitigation’s in the business development chain. The course is designed to be largely practical but given the subject matter their is a theory element but this is kept to the necessary items to address the subject at hand. Students will be taught a methodology for reviewing a new previously unseen board, use industry tools, JTAG Emulators, Logic Analysers etc to see the effect of using legitimate services in an unintended manner against the manufacturer of the board.

We don’t waste hours of your time on the course teaching you to solder, you can do this in your own time, we point you to supplementary material for further reading to expand on your knowledge post the course.

We guarantee to run the course with a minimum of 2 students, so no waiting for numbers, we run the course during the week and over the weekend, if you don’t want to take time off work. We can run the course on your company site if there are 2 or more students from the same company wishing to take the course.

Students are encouraged to bring their own projects/boards, if they wish and use the tools and techniques that are available during breaks and in the evening.

Learning Technology

• A board running embedded linux with connected LCD Screen and Flash Memory chip
• TTL USB serial cable
• Digital Multimeter
• 16 Channel logic analyser and Saleae Logic software
• XDS100v2 JTAG emulator and Texas Instruments code composer studio
• OpenOCD – Open Source On Chip Debug Software
• 16Gb USB stick containing course slides, software and supplementary material

Students have the option for an additional £200 to take away, the embedded board, LCD and flash, 16 Channel logic analyser, XDS100v2 Jtag Emulator, Multimeter and TTL USB Cable.

Course Layout – HW Hacking

• IoT Attack/examination Methodology
• Identification of potential attack vectors
• Harware Protocol theory UART, I2C, SPI and JTAG
• Bus sniffing and decoding using the Saleae logic analyser software and logic analyser
• Dumping EMMC and flash memory
• Access RAM in real time using XDS100v2 Jtag emulator
• Gain root via Jtag
• Challenge – Deface the screen message in as many ways as you can devise

Who Should Attend this Course

• Penetration testers who want to get into IoT security
• Bug hunters who want to find new bugs in IoT products
• Government officials from defensive or offensive units
• Red team members tasked with compromising the IoT infrastructure
• Security professionals who want to build IoT security skills
• Embedded security enthusiasts
• IoT Developers and testers
• Anyone interested in IoT security

Student Requirements

No previous knowledge is required, basic knowledge is built upon quickly so students understand theoretical concepts that are put into practice in the labs.

What Students Should Bring

• Windows laptop with at least 40 GB free space
• 8GB RAM
• 2 x External USB access
• Administrative access on the laptop

What Students Will Be Provided With

Software and hardware necessary to complete the course

AT the end of the course student will be able to –

• Learn how to get root via JTAG on Embedded Linux devices
• Sniff data from system buses and decode them using logic analysers
• Manipulate program values directly in device memory to affect execution
• Identify and test likely UART, JTAG, SPI etc pins/test pads/ports etc
• Learn and apply a methodology for analysing new boards

This is a UK hosted 2 day full on practical course and requires no soldering

To register your interest email info@hardware-hacking.co.uk for further details