hardware-security

> ⚠️ AUTHORIZED USE ONLY

> This skill is for educational purposes or authorized security assessments only.

> You must have explicit, written permission from the system owner before using this tool.

> Misuse of this tool is illegal and strictly prohibited.

> Mandatory confirmation gate

> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

> 1. Ask the user to state the exact target URL, IP, account, or resource.

> 2. Ask the user to confirm written authorization and the permitted scope.

> 3. Show the exact command(s) and explain their expected effect.

> 4. Wait for explicit confirmation in the current conversation.

>

> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

Hardware / Embedded Interface Security

When to Use

• Physical security review of a device you own or are authorized to test.
• Locating and documenting exposed debug interfaces.

适用场景

• UART / JTAG / SWD 调试口发现
• 启动日志、root shell、引导打断
• 配合拆机提取 Flash
• 安全启动/加密 Flash 的可行性评估（非破坏性优先）

工作流

□ 拆解授权设备；拍照标注测试点
□ 万用表找 GND/VCC/TX/RX；逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志；记录波特率
□ JTAG：枚举 IDCODE；评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra

工具链

| 工具 | 用途 |

|------|------|

| USB-TTL / logic analyzer | UART |

| J-Link / CMSIS-DAP | 调试 |

| bus pirate / flipper（实验室） | 多协议 |

| binwalk / flashrom | 提取 |

参考

• references/debug-interface-triage.md
• ../firmware-pentest/ ../ot-ics/

路由上下文

上游: MASTER R34

MUST NOT: 未授权拆机/损坏他人设备

任务完成自检

• [ ] 是否记录接口电平与引脚图？
• [ ] 镜像是否哈希保全？
• [ ] Checklist？

Limitations

• Requires physical access and basic HW tooling (adapters, multimeter).
• Soldered or disabled debug ports raise the difficulty sharply.

> Adapted from zhaoxuya520/reverse-skill (MIT).