Skip to content

Latest commit

Β 

History

History
345 lines (285 loc) Β· 26.1 KB

File metadata and controls

345 lines (285 loc) Β· 26.1 KB

πŸ”§ Hardware Hacking Tools

Hardware Hacking Tools

Hardware Hacking Tools! πŸš€ lists various tools used in hardware hacking, categorized by attack methods. Whether you're a security researcher, penetration tester, or just curious about hardware security, this repo is for you! πŸ”πŸ’»

WhatsApp Channel Telegram Channel LinkedIn WhatsApp Channel Lichess Email Telegram Channel

Firmware Analysis & Extraction πŸ–₯️

πŸ› οΈ JTAG/SWD Debugging

  • JTAGulator – Identifies JTAG pinouts on embedded devices.
  • OpenOCD – Open-source debugging and programming tool for embedded devices.
  • UrJTAG – Universal JTAG library supporting multiple devices.
  • Segger J-Link – A commercial JTAG/SWD debugger with high-speed debugging.
  • Xilinx Platform Cable USB II – Used for debugging and programming Xilinx devices.
  • STM32 ST-Link – Debugging and flashing STM32 microcontrollers.
  • Black Magic Probe – Open-source JTAG debugger supporting SWD.

πŸ”Œ UART/SPI/I2C Debugging

πŸ“₯ Firmware Dumping

  • CH341A Programmer – Reads and writes SPI flash chips.
  • Flashrom – Open-source tool for reading, writing, and erasing firmware.
  • Dediprog SF100 – High-speed SPI Flash programmer.
  • Shikra – Debug and communicate with UART, JTAG, and SPI devices.
  • RT809H – Universal programmer for dumping firmware from EEPROMs.
  • Teensy – Custom DIY method for SPI flash dumping.

πŸ“‚ Reverse Engineering Firmware

  • Ghidra – NSA’s open-source reverse engineering framework.
  • IDA Pro – Industry-standard tool for disassembling firmware binaries.
  • Binwalk – Extracts and analyzes firmware images.
  • Firmware-Mod-Kit – Extracts and modifies firmware.
  • Unblob – Extracts and analyzes binary blobs.
  • GDB (GNU Debugger) – Debugging firmware in real-time.
  • Radare2 – Open-source framework for binary analysis.
  • Capstone – Disassembly framework for analyzing instruction sets.
  • Angr – Python-based binary analysis tool.
  • Cutter – GUI-based alternative to Radare2 for reverse engineering.

πŸ”¨ Physical Attacks Toolkit

πŸ› οΈ Side-Channel Attacks & Fault Injection

  • ChipWhisperer – Open-source side-channel analysis and fault injection tool.
  • ChipSHOUTER – Advanced electromagnetic fault injection (EMFI) tool.
  • GlitchKit – Tool for voltage glitching on embedded devices.
  • Raspberry Pi Pico + PicoEMP – DIY EM fault injection tool.
  • OpenQASM – Side-channel vulnerability analysis tool for quantum computing.
  • Riscure Inspector – Commercial side-channel analysis tool.

πŸ”₯ Voltage & Clock Glitching

πŸ”© Hardware Debugging & Tampering

  • JTAGulator – Finds JTAG pinouts for debugging.
  • Shikra – Works with JTAG, UART, and SPI.
  • Bus Pirate – Multi-protocol debugging interface.
  • GoodFET – Open-source JTAG debugging tool.
  • OpenOCD – Open-source JTAG/SWD debugging tool.
  • Black Magic Probe – Open-source debugging tool.

πŸ΄β€β˜ οΈ Chip Decapping & Microprobing

πŸ“‘ RFID/NFC Cloning & Attacks

  • Proxmark3 – RFID/NFC cloning and hacking device.
  • ChameleonMini – Open-source NFC emulation tool.
  • Flipper Zero – Multi-tool for RFID, NFC, and other hardware hacking.
  • MFCUK – Cracks Mifare Classic RFID cards.
  • MFOC – Dumps and cracks Mifare Classic keys.

🧲 Electromagnetic Attacks & TEMPEST


Wireless & Radio Hacking Tools

πŸ“‘ Wi-Fi Hacking Tools

  • Aircrack-ng – Suite for Wi-Fi penetration testing.
  • Wifite – Automated Wi-Fi cracking tool.
  • Fern Wi-Fi Cracker – GUI tool for Wi-Fi auditing.
  • Reaver – WPS attack tool.
  • PixieWPS – Offline WPS attack tool.
  • Bettercap – Powerful network attack tool, including Wi-Fi attacks.
  • MDK3 – Wi-Fi testing and deauthentication tool.
  • Kismet – Wireless network detection and monitoring.
  • Wigle.net – Database for mapping Wi-Fi networks.

πŸ“Ά Bluetooth & BLE Hacking

  • Blue Hydra – Bluetooth device scanner.
  • Bluesniff – Bluetooth packet sniffer.
  • BtleJack – Bluetooth Low Energy hijacking tool.
  • BLE CTF – Bluetooth attack training tool.
  • Bleah – Bluetooth hacking framework.
  • BlueRanger – Detect Bluetooth device distances.
  • Ubertooth One – Open-source Bluetooth monitoring tool.

πŸ“» Software-Defined Radio (SDR) Hacking

  • GNU Radio – Signal processing toolkit for SDR.
  • HackRF One – Software-defined radio device for hacking.
  • RTL-SDR – Cheap USB SDR receiver.
  • SDR# (SDRSharp) – Popular SDR software.
  • GQRX – Open-source SDR software.
  • BladeRF – USB 3.0 SDR device for signal analysis.
  • Red Pitaya – SDR and signal processing platform.
  • OsmoSDR – Open-source SDR framework.
  • RFExplorer – Portable RF spectrum analyzer.
  • GR-GSM – GSM signal analysis tool.

πŸ“‘ RFID/NFC Hacking

  • Proxmark3 – RFID/NFC research tool.
  • ChameleonMini – RFID emulator and cloning device.
  • Flipper Zero – Multi-tool for wireless attacks, RFID cloning, and more.
  • MFCUK – Tool for MIFARE Classic card attacks.
  • MFOC – MIFARE Classic offline cracking tool.
  • NFC Tools – Mobile app for NFC analysis.
  • RFIDler – Software-defined RFID tool.
  • Libnfc – Library for NFC communication.
  • ICopy-X – RFID cloning and hacking device.

πŸ“ž GSM & Mobile Network Hacking

  • OsmocomBB – Open-source GSM baseband software.
  • OpenBTS – Build your own GSM network.
  • IMSI Catcher – Detect IMSI catchers and rogue cell towers.
  • Stingray Detector – Mobile IMSI catcher detection.
  • SIMtrace – Intercept SIM card communication.

πŸ”¬ Chip-Level Attack Tools

πŸ΄β€β˜ οΈ 1. Chip Decapping & Microscopy

⚑ 2. Fault Injection & Glitching

  • ChipWhisperer – Side-channel analysis and fault injection tool.
  • ChipSHOUTER – Electromagnetic fault injection (EMFI).
  • GlitchKit – Glitching framework for embedded systems.
  • VoltageGlitcher – Fault injection via voltage control.
  • SPIDriver – SPI communication and glitching.

πŸ”‘ 3. Power Analysis & Side-Channel Attacks

πŸ›‘ 4. Secure Chip Extraction & Key Recovery

πŸ“₯ 5. Firmware & ROM Dumping


πŸ”Œ USB & Peripheral Attack Tools

πŸ΄β€β˜ οΈ 1. USB Exploitation & HID Attacks

πŸ’Ύ 2. USB Data Extraction & Exfiltration

  • USBHarpoon – Data exfiltration via USB.
  • USaBUSe – Automated USB data theft.
  • USBExfil – Auto-copy data from plugged-in devices.

🎭 3. USB Impersonation & Spoofing

  • P4wnP1 A.L.O.A. – USB attack framework (HID, WiFi, storage).
  • USBProxy – Man-in-the-Middle (MitM) for USB devices.
  • USBDriveBy – USB device emulation for bypassing security.
  • BadUSB – Create malicious USB payloads.

πŸ“‘ 4. USB Network Attacks

πŸ”₯ 5. USB Firmware & Debugging Exploits

  • USBKill – Automatically disable a system when a USB device is removed.
  • USBlyzer – USB protocol analyzer for debugging.
  • USBGuard – Policy-based USB protection.
  • FaceDancer – USB attack framework for fuzzing & reversing.
  • GreatFET One – USB debugging and analysis tool.

πŸ›  Hardware Modification & Implantation

πŸ΄β€β˜ οΈ 1. Hardware Backdoor Implants

  • NSA COTTONMOUTH – USB implant for covert data exfiltration.
  • NSA IRONCHEF – Malicious BIOS/firmware modification for persistence.
  • NSA DEITYBOUNCE – BIOS-level malware for remote access.
  • BadUSB – USB firmware modification for keystroke injection.
  • USBNinja – Wireless USB payload injector for remote attacks.
  • OMG Cable – Malicious USB cable for payload execution.

πŸŽ› 2. BIOS & Firmware Modification

  • Flashrom – Reads, writes, erases, and verifies BIOS firmware.
  • UEFI Tool – Analyzes and modifies UEFI firmware.
  • CH341A Programmer – USB flash programmer for BIOS modifications.
  • Bus Pirate – SPI/I2C interface for firmware modifications.
  • Dediprog SF100 – SPI flash programmer for BIOS recovery.
  • Intel ME Cleaner – Disables Intel Management Engine.

πŸ”Œ 3. Hardware Keyloggers & Data Interceptors

πŸ”© 4. Covert Implants & Surveillance Devices

  • PwnPlug – Covert network implant disguised as a power adapter.
  • Pwnagotchi – AI-driven WiFi hacking device.
  • HackRF One – Wireless SDR for sniffing and modifying radio signals.
  • Flipper Zero – Multi-functional hacking device for RFID/NFC access.
  • NSA RAGEMASTER – Covert RF implant that transmits monitor data remotely.
  • WiFi Pineapple – Wireless network penetration testing device.

⚑ 5. Peripheral Device Hijacking

  • USB Rubber Ducky – Keystroke injection tool disguised as a USB drive.
  • MalDuino – Open-source BadUSB keystroke injection tool.
  • ESPloitV2 – ESP8266-based WiFi HID attack device.
  • MouseJack – Exploits vulnerabilities in wireless mice.
  • AirDrive Forensic Keylogger – Wireless keylogger with real-time keystroke transmission.

πŸ”¬ 6. Chip-Level Hardware Trojans

  • ChipWhisperer – Power analysis and fault injection tool.
  • ChipSHOUTER – Electromagnetic fault injection for security bypassing.
  • JTAGulator – Identifies JTAG interfaces on unknown chips.
  • GlitchKit – Firmware glitching and fault injection framework.
  • X-Ray Chip Inspection – Scans chips for hidden implants and modifications.

⚑ Power & Battery Attack Tools

πŸ”‹ 1. Power Analysis & Side-Channel Attacks

⚑ 2. Voltage Fault Injection & Glitching

  • ChipSHOUTER – Electromagnetic fault injection (EMFI).
  • VoltageGlitcher – Injects voltage glitches to bypass security.
  • GlitchKit – Framework for hardware glitching.
  • SPIDriver – SPI-based power glitching tool.
  • EMFI Kit – Voltage and electromagnetic fault injection toolkit.

πŸ”Œ 3. Power Consumption & Tampering Attacks

πŸ”₯ 4. Battery-Based Attacks


πŸ΄β€β˜ οΈ Supply Chain Attack Tools

πŸ”© 1. Hardware Supply Chain Attacks

πŸ”— 2. Firmware & BIOS Manipulation

🎭 3. Software Supply Chain Attacks

πŸ— 4. Hardware Implantation

πŸ›‘ 5. Detection & Prevention

  • SigMF – Spectrum analysis to detect implants.
  • Osquery – Querying firmware for anomalies.
  • YARA Rules – Malware detection in software supply chains.
  • Binwalk – Firmware backdoor analysis.
  • Firmware Integrity Checker – Comparing firmware to clean versions.