Happy Friday! Looking for weekend reading about hardware hacking?

JTAG: wrongbaud.github.io/posts/jtag-hdd/
SWD: wrongbaud.github.io/posts/stm-xbox…
I2C: wrongbaud.github.io/posts/Holiday-…
SPI: wrongbaud.github.io/posts/BasicFUN…
UART: wrongbaud.github.io/posts/router-t…

After 25 years, the original Xbox's last hidden ROM has finally been dumped: the CPU's microcode!

This has been a goal of mine for over 6 years, and I've worked on it off and on ever since.

Over the last couple of weeks, while building inventory and shipping orders, I've also ests 24/7. This poor Xbox has rebooted over 50,000 times in those two weeks alone.

And it finally paid off.

The dump covers the entire 4,096-line microcode address space. The ROM itself occupies 3,200 of those lines, roughly 12 KB of microcode.

I can't overstate how huge this feels. After all these years, I finally have it.

A full write-up is coming next year!

Backplane is now available in alpha!

Check it out here: backplaneworks.com

What's Backplane? The DEFAULT for agentic CAD.

📢Last call to sign up for our #BBOT training at @BSidesCHS, this Friday Nov 6. Free and hands-on, but you need to register to hold your seat and availability is running low. We hope to see you there!

zeffy.com/en-US/ticketin…

Just cleaned up the docs for the Abductor. 🔧

Adapter that lets CW312 targets run on the ChipWhisperer CW308 UFO.
UFO socket on one side. CW312 card-edge on the other.

github.com/therealdreg/ab…

Extending Scapy for Hardware Reverse Engineering (@voidstarsec)

voidstarsec.com/blog/scapy-spi…

#infosec

I finally found the recording of my talk: Glitching in 3D, low cost EMFI attacks here:

vimeo.com/926732305/9278…

Check it out if you want an intro to EMFI!

Frog put the keys in the HSM. "There" he said "now we cannot leak the private key". "But our servers can ask the box to sign with the key" said Toad.
"that is true" said Frog

I asked CLAUDE to categorize and organize all of my blog posts and conference talks over the last 8 years and it generated an awesome roadmap for people looking to learn more about hardware hacking - all backed by my original content and writing:

voidstarsec.com/roadmap/

I finally found the recording of my talk: Glitching in 3D, low cost EMFI attacks here:

vimeo.com/926732305/9278…

Check it out if you want an intro to EMFI!

New blog post!

Extending Scapy for Hardware Reverse Engineering

voidstarsec.com/blog/scapy-spi…

In this post we use Scapy to reconstruct a SPI flash image from a logic capture, with an introduction to QSPI!

If youre in the area check this out! Some of the sharpest folks ive met are behind this tool and Im sure attendees will learn a ton!

Ten days until our #BBOT training at @BSidesCHS on Nov 6. Free and hands-on, but you need to register to hold your seat. Link to register below 👇

zeffy.com/en-US/ticketin…

Extracting live instruction traces from and XBOX controller via hardware debugging

voidstarsec.com/blog/arm-traci…

Extracting live instruction traces from and XBOX controller via hardware debugging

voidstarsec.com/blog/arm-traci…

Lessons for all the new researchers:
1. Write your own posts. Everyone knows what slop looks like.
2. Don't buy a domain name for a bug. It's 2026.
3. Learn the difference between bugs and architecture risks
4. Get friends. They should tell you your bad ideas suck

EMFI adventure part 2: target characterization of a STM32H5 errno.fr/EM_Fault_Injec…

It's time to put my Adventures of Wallet Hacking series to bed, but not before one final chapter! Free livestream for all courtesy of @unicampoficial LICS Cybersecurity League. Announcement here: linkedin.com/feed/update/ur…

📠 Beginners Guide: How to Build a Hardware Hacking Lab

Blog: voidstarsec.com/hw-hacking-lab…

author: @wrongbaud

#infosec

Reminder: sign up for our #BBOT training at @BSidesCHS on November 6. Hands-on recon automation, free seats, but you need to register.

zeffy.com/en-US/ticketin…

While working on my low-cost SEM project, I fully reverse-engineered the software that runs Keyence VE-series SEMs and integrated it into my new control suite, fixing big OEM bugs and *doubling* the image resolution, as well as adding e-beam lithography, stereo-3D, stacking & EDX