Presented By: Joe FitzPatrick
This course introduces and explores attacks on several different relatively accessible interfaces on embedded systems. Attendees will get hands-on experience implementing and deploying a number of low-cost hardware devices to enable access, privilege, and deception which is in some cases imperceptible from software.We’ll examine UART, JTAG and SPI interfaces on embedded devices, representative of a wide range of embedded devices that span consumer electronics, medical devices, industrial control hardware, and mobile devices. We will observe, interact with, and exploit each interface to use physical access to enable software privilege.
The 2 day course will take place on the 12th & 13th September 2017
Cost is £ 1,300.00 (inc VAT). Buy your place in our shop now.
Course Outline
Day 1:
- UART Background: UART History, Architecture, and Uses
- UART Lab 1: Connecting to a known UART
- UART Lab 2: Identifying and analyzing an unknown UART
- UART Lab 3: Escalating and persisting UART privilege
- JTAG Background: JTAG History and Purpose
- JTAG Lab 1: Hardware and Software Setup
- JTAG Lab 2: Escalating Privilege via Kernel
- JTAG Lab 3: Escalating Privilege via a Process
Day 2:
- SPI Background: Flash storage and the SPI interface
- SPI Lab 1: Accessing Flash from software
- SPI Lab 2: Sniffing and Parsing SPI
- SPI Lab 3: Dumping SPI from Hardware
- Firmware Background: More types of Flash, Storage, and Firmware
- Firmware Lab 1: Dumping Firmware from Software
- Firmware Lab 2: Manipulating firmware images
- Firmware Lab 3: Finding software bugs in firmware
Target Audience
This course is geared toward pen testers, developers and others with a security background who wish to learn how to take advantage of physical access to systems to assist and enable other attacks.
Student Requirements
No hardware or electrical background is required. Computer architecture knowledge, low-level programming experience, and Linux command-line familiarity are all very helpful, but not required.
What to Bring
All hardware and software is provided for use in the class. Optionally, bring your own usb keyboard/mouse if you have strong preferences.
About the Trainer
Joe (@securelyfitz) is an Instructor and Researcher at SecuringHardware.com. Joe has spent over a decade working on low-level silicon debug, security validation, and penetration testing of CPUS, SOCs, and microcontrollers. He has spend the past 5 years developing and leading hardware security related training, instructing hundreds of security researchers, pen testers, hardware validators worldwide. When not teaching classes on applied physical attacks, Joe is busy developing new course content or working on contributions to the NSA Playset and other misdirected hardware projects, which he regularly presents at all sorts of fun conferences.