BUSPIRATESoyoucan probablyhaQ
InterentofshitDEVICES
&OtherThings&Watev
A hands on play with buspirates and things you can connect to
them with
Where What Who
Ruxcon 2017 Hardware Village Bus Pirates sort of Tim Noise
tIMNOISE
• twitter/dnoiz1
• github/dnoiz1
• mIRC/dnz
• streetz/notorious D N Z
• tim@drkns.net
I dont know anything about electronics^W^W
BUSPIRATE
• Open source hardware
• Designed by Ian Lesnet
(dangerous prototypes)
• designed to program

micro controllers
• jack of many trades master of
probably UART
pirate of the public transport
unfortunately limited by speed
BUSPIRATE
• Universal soldier
• USB FTDI interface
• 115200 8N1 or Bridge
• 3.3v and 5v Supply
• Customisable FW
• Remap Pins
• Internal pull-ups for safety
pirate of the public transport
FirstmateInterface
• connect to serial interface
• 115200 8N1
• Clients:

Windows: Putty (?)

Mac/Linux: Screen, 

Minicom, cu

Plan9: ??
your serial terminal on /dev/ttyUSB0
BOOTTHEPIRATE
• Send a few returns
• in HiZ mode (safe-ish)
• Hi 2 u 2
• resets on power cycle
• Can be jumpered to stop
at boot loader for flashing
• Waiting your orders Cap`n
When you first connect
Helpme
• Available in most
modes
• control power
• read / write
• set baud
• measure power / freq
• set pull ups
• etc
General Commands
SETTHEmODE
• Modes set pinout!
• m to switch mode
• modes have options
• modes have macros!
• different firmware
supports different
interfaces
Available interfaces in the default firmware
UARTMEHEARTIES
• Only requires 3 pins
• TX (MOSI)
• RX (MISO)
• GND
Universal Async TX/RX
• Lets phone a friend!
• MOSI -> MISO
• MISO -> MOSI
• GND -> GND
UART2HEART<3
• can be used to
sniff UART / other
buses!
KiddieCode
• Using bus pirate with the
Arduino IDE
• Writing firmware to your
Ruxcon 2017 badge
• Using example `scratches`
• Get better examples from
Morgan
Your Ruxcon badges
STEPPINGUP
• Connect to a router
console, enter boot loader
• Check voltage with a
Multimeter
• Google Pins for the lazy
• Logic Analyzer
• JTAGulator UART
detection
Lets talk to something real
JTAGTIME
• MIPS eJTAG Pinouts
• OpenOCD bus pirate
configuration
• Firmware dump
• Firmware write
• Remote GDB!
Next level computer interfacing
JTAGTIMENext level computer interfacing
EASYMONEYYou don't say "affirmative," or some shit like that. You say "no problemo." 
MoreTools(SOFTWARE)
• Python / scr1ptz for bit banging - don`t
forget to get good at programming.
• flashdump (for dumping firmware)
• Arduino IDE
• pretty anything else that can utilise a serial
adapter
Pair your bus pirate with friends for more hacking
MoreTools(hardware)
• Probe Kits for connecting to in use ICs
(SPI, I2C, UART sniffing)
• Logic Analyser (For detecting
interfaces)
• JTAGulator (for finding UART/JTAG)
• BusBlaster (For connecting to JTAG)
• GPIO on RPI can also be handy
• 360/Uniclip + Teensy for NOR/NAND
Pair your bus pirate with friends for more hacking
tIMNOISE
• twitter/dnoiz1
• github/dnoiz1
• mIRC/dnz
• streetz/notorious D N Z
• tim@drkns.net
I dont know anything about electronics^W^W
BUSPIRATESoyoucan probablyhaQ
InterentofshitDEVICES
&OtherThings&Watev
A hands on play with buspirates and things you can connect to
them with
Where What Who
Ruxcon 2017 Hardware Village Bus Pirates sort of Tim Noise

Bus Pirate Workshop Ruxcon Hardware Hacking 2017

  • 1.
    BUSPIRATESoyoucan probablyhaQ InterentofshitDEVICES &OtherThings&Watev A handson play with buspirates and things you can connect to them with Where What Who Ruxcon 2017 Hardware Village Bus Pirates sort of Tim Noise
  • 2.
    tIMNOISE • twitter/dnoiz1 • github/dnoiz1 •mIRC/dnz • streetz/notorious D N Z • tim@drkns.net I dont know anything about electronics^W^W
  • 3.
    BUSPIRATE • Open sourcehardware • Designed by Ian Lesnet (dangerous prototypes) • designed to program
 micro controllers • jack of many trades master of probably UART pirate of the public transport unfortunately limited by speed
  • 4.
    BUSPIRATE • Universal soldier •USB FTDI interface • 115200 8N1 or Bridge • 3.3v and 5v Supply • Customisable FW • Remap Pins • Internal pull-ups for safety pirate of the public transport
  • 5.
    FirstmateInterface • connect toserial interface • 115200 8N1 • Clients:
 Windows: Putty (?)
 Mac/Linux: Screen, 
 Minicom, cu
 Plan9: ?? your serial terminal on /dev/ttyUSB0
  • 6.
    BOOTTHEPIRATE • Send afew returns • in HiZ mode (safe-ish) • Hi 2 u 2 • resets on power cycle • Can be jumpered to stop at boot loader for flashing • Waiting your orders Cap`n When you first connect
  • 7.
    Helpme • Available inmost modes • control power • read / write • set baud • measure power / freq • set pull ups • etc General Commands
  • 8.
    SETTHEmODE • Modes setpinout! • m to switch mode • modes have options • modes have macros! • different firmware supports different interfaces Available interfaces in the default firmware
  • 9.
    UARTMEHEARTIES • Only requires3 pins • TX (MOSI) • RX (MISO) • GND Universal Async TX/RX • Lets phone a friend! • MOSI -> MISO • MISO -> MOSI • GND -> GND
  • 10.
    UART2HEART<3 • can beused to sniff UART / other buses!
  • 11.
    KiddieCode • Using buspirate with the Arduino IDE • Writing firmware to your Ruxcon 2017 badge • Using example `scratches` • Get better examples from Morgan Your Ruxcon badges
  • 12.
    STEPPINGUP • Connect toa router console, enter boot loader • Check voltage with a Multimeter • Google Pins for the lazy • Logic Analyzer • JTAGulator UART detection Lets talk to something real
  • 13.
    JTAGTIME • MIPS eJTAGPinouts • OpenOCD bus pirate configuration • Firmware dump • Firmware write • Remote GDB! Next level computer interfacing
  • 14.
  • 15.
    EASYMONEYYou don't say"affirmative," or some shit like that. You say "no problemo." 
  • 16.
    MoreTools(SOFTWARE) • Python /scr1ptz for bit banging - don`t forget to get good at programming. • flashdump (for dumping firmware) • Arduino IDE • pretty anything else that can utilise a serial adapter Pair your bus pirate with friends for more hacking
  • 17.
    MoreTools(hardware) • Probe Kitsfor connecting to in use ICs (SPI, I2C, UART sniffing) • Logic Analyser (For detecting interfaces) • JTAGulator (for finding UART/JTAG) • BusBlaster (For connecting to JTAG) • GPIO on RPI can also be handy • 360/Uniclip + Teensy for NOR/NAND Pair your bus pirate with friends for more hacking
  • 18.
    tIMNOISE • twitter/dnoiz1 • github/dnoiz1 •mIRC/dnz • streetz/notorious D N Z • tim@drkns.net I dont know anything about electronics^W^W
  • 19.
    BUSPIRATESoyoucan probablyhaQ InterentofshitDEVICES &OtherThings&Watev A handson play with buspirates and things you can connect to them with Where What Who Ruxcon 2017 Hardware Village Bus Pirates sort of Tim Noise