SlideShare a Scribd company logo
1 of 61
Download to read offline
Hardware Hacking
Made Easy (BS)
Jonathan Singer
The Undercroft
February 20, 2020
YOU CAN LOOK AT THE TABLE OF
BOARDS@!
Agenda
• #whoami
• #badgelife
• Prototyping
• Software & Hardware
• Boards and Parts
• Reading Docs
• Fabrication & Assembly
• Programming
• Hacking
#whoami
• Masters of The Cybers from USF
• BS of IT from UCF
• DEF CON Security Goon
• OWASP Tampa Co-leader
• BSides Orlando Co-founder
• GuidePoint Security Splunk Dude
• SANS Certs and Stuff
• Undercroft Guild Master
#badgelife
#badgelife
Past Projects
• Security B-Sides Orlando 2013 (First Badge)
• Security B-Sides Orlando 2018
• Security B-Sides Orlando 2019
• Security B-Sides Orlando 2020 (Soon)
• Florida_Man 2017 Gator
• Florida_Man 2018 Conch
• Mini Florida Shitty Add-on
• Florida_Man 2019 Weather Station
• There is no cloud Shitty Add-on
History
• Joe Grand created the first digital badge at
DEF CON 14 in 2006
• Joe Grand retired at DEF CON 18, passed to l0st
• L0st retired at DEF CON 26, passed to TYMKRS
• Official #badgelife community founded in
2016 by wbm
• Today, often found at hacker cons around the
world
• Now at other technical cons
Software
• KiCad (pronounced key-cad) – free software
suite for electronic design automation (EDA)
• Fritzing – open-source amateur or hobby
computer aided drafting (CAD) software
• EasyEDA – web-based tool suite to design,
simulate, and share projects. Free and paid
premium subscription
• Eagle – oldest of the bunch (1988), Autodesk
purchased in 2016, tons of features
Prototyping
• Usually the first step
• Placing components to test a circuit
• Through-hole technology
Breadboard
Perf Board
Through Hole
Through Hole Technology
Surface Mount
Circuit Boards
Copper Layer
Board
Multiple Layers
Internal and Via
Software - Fritzing
Software - Eagle CAD
Schematics
Reading Docs
Components
• Resistors
• Capacitors
• Diodes
• Switches
• Transistors
• Integrated Circuits
Layout
Output – Gerber Files
Output – Drill Files
Output – Copper Files
Panelizing
Solder Mask
Fabrication
Fabrication Machines
Assembly
Surface Mount Technology
Part Packaging
• Tube
• Reel
• Cut Tape
• Loose
Reels
Tube
Tray
Through Hole Assembly
Solder Bath
Programming
• Arduino
• Atmel Studio
• MicroPython
• Visual Studio
• Eclipse
Flashing
• AVR-USBasp
• USBtinyISP
• FTDI
• Generic TTL
Supply Chain
• Most, if not all, parts come from China
• Board fabrication is cheaper in China
• The joys of shipping internationally
• Poor English and Chinese translations
Part Sources
• LCSC – Subsidiary of JLCPCB (China)
• AliExpress – eBay of China
• Mouser – Domestic parts supplier
• Digi-Key – Domestic parts supplier
Microcontrollers
• Texas Instruments (MSP430)
• Microchip Company (PIC)
• Atmel (ATMega)
• Silicon Labs (EFM)
• NXP
• STMicroelectronics
• Freescale
Fab Houses
• Send these companies GERBER files (output from EDA)
• OSH Park – Purple PCBs
• Marcofab – US based
• Elecrow
• JLCPCB
• PCBWay
• Seeed Studio
Distribution
• Tindie – owned by Hackaday
• Crowd Supply
• Kickstarter / Indiegogo
• Conferences
Hardware Hacks
Discovering Headers
Dumping Memory and Console
Software Method
Disassembly and Reverse Engineering
Prevention
Where to learn more
• Contextual Electronics
• EEVBlog
• VoltLog
• Julian Ilett
• Bigclivedotcom
• Marco Reps
• Great Scott!
Questions?
My Desk
• Kind of messy, but that’s part of the fun
Hardware Hacking - The Undercroft - February 2020
Hardware Hacking - The Undercroft - February 2020
Hardware Hacking - The Undercroft - February 2020
Hardware Hacking - The Undercroft - February 2020
Hardware Hacking - The Undercroft - February 2020

More Related Content

Similar to Hardware Hacking - The Undercroft - February 2020

BlueHat v17 || Extracting Secrets from Silicon – A New Generation of Bug Hunt...
BlueHat v17 || Extracting Secrets from Silicon – A New Generation of Bug Hunt...BlueHat v17 || Extracting Secrets from Silicon – A New Generation of Bug Hunt...
BlueHat v17 || Extracting Secrets from Silicon – A New Generation of Bug Hunt...
BlueHat Security Conference
 
Black diamond engineering lcp
Black diamond engineering lcpBlack diamond engineering lcp
Black diamond engineering lcp
Paul Wheeler
 

Similar to Hardware Hacking - The Undercroft - February 2020 (20)

Introduction to Hardware Design Using KiCAD
Introduction to Hardware Design Using KiCADIntroduction to Hardware Design Using KiCAD
Introduction to Hardware Design Using KiCAD
 
News
NewsNews
News
 
Hello, Arduino (Nerd Nite Austin)
Hello, Arduino (Nerd Nite Austin)Hello, Arduino (Nerd Nite Austin)
Hello, Arduino (Nerd Nite Austin)
 
The Internet of Things and You - A Developers Guide to IoT
The Internet of Things and You - A Developers Guide to IoTThe Internet of Things and You - A Developers Guide to IoT
The Internet of Things and You - A Developers Guide to IoT
 
BlueHat v17 || Extracting Secrets from Silicon – A New Generation of Bug Hunt...
BlueHat v17 || Extracting Secrets from Silicon – A New Generation of Bug Hunt...BlueHat v17 || Extracting Secrets from Silicon – A New Generation of Bug Hunt...
BlueHat v17 || Extracting Secrets from Silicon – A New Generation of Bug Hunt...
 
Lets have a look at Apple's Metal Framework
Lets have a look at Apple's Metal FrameworkLets have a look at Apple's Metal Framework
Lets have a look at Apple's Metal Framework
 
The Four Pillars of PCB Design for Creating a Successful IoT Product
The Four Pillars of PCB Design for Creating a Successful IoT ProductThe Four Pillars of PCB Design for Creating a Successful IoT Product
The Four Pillars of PCB Design for Creating a Successful IoT Product
 
Software Developer and Architecture @ LinkedIn (QCon SF 2014)
Software Developer and Architecture @ LinkedIn (QCon SF 2014)Software Developer and Architecture @ LinkedIn (QCon SF 2014)
Software Developer and Architecture @ LinkedIn (QCon SF 2014)
 
The Complete Hardware Crash Course
The Complete Hardware Crash CourseThe Complete Hardware Crash Course
The Complete Hardware Crash Course
 
Dimond recognition system
Dimond recognition systemDimond recognition system
Dimond recognition system
 
A brief introduction to making your own (Internet of Things) Thing
A brief introduction to making your own (Internet of Things) ThingA brief introduction to making your own (Internet of Things) Thing
A brief introduction to making your own (Internet of Things) Thing
 
Unite2015 frima lab
Unite2015 frima labUnite2015 frima lab
Unite2015 frima lab
 
Black diamond engineering lcp
Black diamond engineering lcpBlack diamond engineering lcp
Black diamond engineering lcp
 
Kathryn McElroy: Building IoT Prototypes with Arduino
Kathryn McElroy: Building IoT Prototypes with ArduinoKathryn McElroy: Building IoT Prototypes with Arduino
Kathryn McElroy: Building IoT Prototypes with Arduino
 
CTFs, Bugbounty and your security career
CTFs, Bugbounty and your security careerCTFs, Bugbounty and your security career
CTFs, Bugbounty and your security career
 
Electric Imp - Hackathon Intro
Electric Imp - Hackathon IntroElectric Imp - Hackathon Intro
Electric Imp - Hackathon Intro
 
Introduction to arduino
Introduction to arduinoIntroduction to arduino
Introduction to arduino
 
Reverse engineering
Reverse engineeringReverse engineering
Reverse engineering
 
Diy arduino
Diy arduinoDiy arduino
Diy arduino
 
Internet of Things, TYBSC IT, Semester 5, Unit V
Internet of Things, TYBSC IT, Semester 5, Unit VInternet of Things, TYBSC IT, Semester 5, Unit V
Internet of Things, TYBSC IT, Semester 5, Unit V
 

Recently uploaded

Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slide
vu2urc
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@
 

Recently uploaded (20)

🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?
 
GenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdfGenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdf
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
Histor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slideHistor y of HAM Radio presentation slide
Histor y of HAM Radio presentation slide
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf
 

Hardware Hacking - The Undercroft - February 2020