Extracting Firmware from Embedded Devices (SPI NOR Flash) ⚡

Learn tricks and techniques like these, with us, in our amazing training courses!

One of the first things you have to do when hacking and breaking embedded device security is to obtain the firmware. If you're lucky, you can download it from the manufacturer's website or, if you have a shell, you can just copy it over to your computer.

But what if none of these options are available?

In this video, we will show you how you can connect directly to a NOR flash chip with the SPI protocol to dump the firmware and find your vulns, even if off the shelf tools don't work!

00:00 Intro
00:40 Technical Introduction
01:55 Flash Memory Types
03:51 NOR Flash
06:25 SPI Protocol
07:55 Our Training
09:27 Logic Analyzer
12:04 How SPI Works
13:53 Firmware Extraction

Did you enjoy this video? Then follow us on Twitter, and subscribe to our channel for more awesome hacking videos.

~ Flashback Team

[TheFlatronify]

Really informative video, thank you! Sadly I see there will be fewer and fewer devices "hackable" in the near future as more and more manufacturers (especially of routers / e.g. DOCSIS 3.1) start using hardware based encryption technology for their ROM. With little to no possibility to ever read extracted data. What do you think about this?

[jakesweany]

Everything is explained clearly without wasting time or over-explaining. Well done.

[billclark]

Very helpful for someone like myself just beginning to understand this stuff. Explaining the function and description of terminology is something i would normally have to do significant research for.

[MoisesCaster]

Please never delete this video, it's very helpful.

[terminaltears]

Your videos are the best! Please don't stop making the tutorials! Thank you.

[idiotwithasolderingiron]

I will use this information to fix my kitchen stove as it had a rom checksum error. $400 is way to much for a control board. HACK THE PLANET. RIGHT TO REPAIR.

[StarsManny]

What an entertaining channel! I've been watching some pluralsight and udemy courses recently, and I wish the presenters of those courses had the same style and pace as you guys. You are always interesting. Well done!

[electrolabs]

What a beautiful work!. Thank you for sharing your time and effort.

[noambergauz]

Damn this channel is so underrated.. just stumbled upon this while scrolling but definitely gonna stay for more .. Thanks for explaining this so well!

[justusjonas]

Thanks for this content, it is really well explained.

[bradrickrobinson]

Thank you for explaining this for those who are trying to get into this line of work but find it difficult to do so. Keep up the great work!!!

[plunder]

Thanks for this content we can see al the time you have spend to make this incredible video !

[pawel]

wow.... this is one of the most fascinating videos I've ever seen on YT....

[kevinwydler]

I just discovered your team, thank you so much for this interesting content!

[stevekoehn]

Perfect! Not to simple, not to complicated, with practical information.. Thank You

[diegolucassilva]

That's nice. Great video brother!

[PcParamedics]

WOW mind blow stunmbled on this channel and glued to the screen...

[ProfessorLinux]

Very interesting, and looking forward to more content!

[ZeekSuds]

impressive stuff guys. I'm just getting started with electrical engineering. I've been seeing that a lot of intelligence agencies like to play games with each other at this level. It's all really fascinating.

[miladgolfam]

thank you so much, Ive learnt alot from you in this video.