Remote Debugging ARM Chip with SWD/JTAG - Hardware Wallet Research #3

Using ARM SWD with a development board to debug the chip with GDB.

DISCLAIMER: The security research shown here was done a while ago and since then the software and hardware was updated; These videos are not sponsored or endorsed by Ledger.

-=[ ❤️ Support ]=-

-=[ 🐕 Social ]=-

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

#HardwareSecurity #ReverseEngineering

[bryan]

*screaming* “use a pin header!”

*think* with all this trouble he must not have any

*opens drawer full of pin headers*

DEAD

[bboysil]

I love that you show the whole thought process, including the failed steps as well.

[sorin.n]

You should either power it via its usb port or via the SWD, not both. Especially if you are powering them from different sources. Keep just the ground connection, two data lines and the reset if you want to power it via the ledger's usb.

Later edit: although a lot of serial programmers (microchip, atmel, arduino, etc.) provide VDD to the target, it seems that this is not the case here (ST link nucleo). See the reply from Repligon below.

[Daniii]

So you basically made a PCB so that the pins are at a right angle? Instead of just poking them through the PCB of the ledger? Why is that? Why not just solder the pins directly to the PCB and, looking at the pinout, directly put the ledger with it's pins into the debugger?

[vnceigz]

3:31 - Technically, the dot (or beveled corner) indicates pin-1.

[anonde]

You could've used the pin headers as a link between your perf-board and the PCB, or directly hook up the female-to-male connectors to the pin-headers.

[samsempl]

I am both simulatenously attracted to eletronics because of how cool it is and repulsed by it because how annoying it can be

[Leonelf]

Tip: you can flash the ST-Link with the firmware of the Segger J-Link, enabling more features and compatibility. IDK if it works with non ST devices, but they say it would be "illegal"

[kissinger]

Gosh, I love your videos especially the ones that talk about niche subjects in computer security such as Debugging Hardware. we need more.

Love & respect

[QuickishFM]

BTW Mr Overflow, that copper mesh is called solder wick.

[maltehei]

I'd love to see a collab with GreatScott, whatever that would be!

[Ncky]

Next time just solder jumper directly to pad and don't apply any force. You dont want pad to lift up. Trust me its simple as that.

[ciarfah]

That soldering hurt my brain, but everything else was super interesting. Appreciate all you're doing :)

[nikize]

The dot on the chip designates PIN 1 and NOTHING ELSE!

[cyruscuenca]

Your intro on the ledger was pretty cool. I don't understand much of this, but your videos are really entertaining nonetheless 🙃

[mordekaiser_]

as a non native english speaker your subtitles are a bless, regards from spain :D

[electronicsandcode]

Soso, das Bändchen vom 35c3 fehlt schon ... :D
Tolles Video mal wieder - Hardware Debugging macht richtig Laune! :)

[randybuttigieg]

Sticky tack works awesome for holding components on the board while you solder.

[theastroquantumguy]

Nice video! Can't wait for the next episode of Hardware Wallet Research#4!

[stanuel]

Great series! Thanks for putting so much effort into these videos.