Skip to content
Skillpedia
PT
Security42k · #4768

hardware-security

Allows the agent to research hardware and embedded interface security. It discovers UART/JTAG and analyzes firmware.

What it does

This tool helps research the security of electronic device hardware. It can find hidden communication ports, analyze the startup process, and assist in extracting system information without damaging the device.

When to use it

  • ✓When you need to find communication ports on a device.
  • ✓When analyzing how a device boots and its security features.
  • ✓To attempt secure data extraction from a device.

Example of what to ask your AI

“I want to investigate the security of this device. Can you help me find its communication ports and see how it boots up?”

Want more? Open the sections below.

How to use

The easiest way: copy the message below and paste it into Claude, ChatGPT, Cursor or any AI. It reads the skill and follows the instructions.

Skill link

https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/hardware-security/SKILL.md

Ready-to-paste message

Use this skill to help me: https://github.com/zhaoxuya520/reverse-skill/blob/main/skills/hardware-security/SKILL.md Read the SKILL.md file at that link and follow its instructions for my task.
View on GitHub ↗Raw file
How it works

The tool looks for physical connections on the hardware, like diagnostic ports, and analyzes the data the device sends during startup. It can also help extract system copies for further analysis.

Installation

Easiest way: copy the skill link and paste it into Claude, ChatGPT or Cursor asking it to follow the instructions.

In the terminal (Claude Code, Codex, Cursor), in your project folder:

npx skills add zhaoxuya520/reverse-skill --skill hardware-security

Or download just the file:

curl -L https://raw.githubusercontent.com/zhaoxuya520/reverse-skill/main/skills/hardware-security/SKILL.md -o SKILL.md
Technical content (original SKILL.md)

Original text by the author, straight from GitHub.

Hardware / Embedded Interface Security

ACTION REQUIRED（读完后立刻执行）

  1. NOW: 确认物理接触授权与设备归属
  2. NOW: ESD/电源安全；默认只读探测
  3. NEXT: 联合 firmware-pentest 做镜像分析
  4. ACT: 外壳与调试接口识别 → consoles → 提取

适用场景

  • UART / JTAG / SWD 调试口发现
  • 启动日志、root shell、引导打断
  • 配合拆机提取 Flash
  • 安全启动/加密 Flash 的可行性评估（非破坏性优先）

工作流

□ 拆解授权设备；拍照标注测试点
□ 万用表找 GND/VCC/TX/RX；逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志；记录波特率
□ JTAG：枚举 IDCODE；评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra

工具链

工具 用途
USB-TTL / logic analyzer UART
J-Link / CMSIS-DAP 调试
bus pirate / flipper（实验室） 多协议
binwalk / flashrom 提取

参考

  • references/debug-interface-triage.md
  • ../firmware-pentest/ ../ot-ics/

路由上下文

上游: MASTER R34
MUST NOT: 未授权拆机/损坏他人设备

任务完成自检

  • 是否记录接口电平与引脚图？
  • 镜像是否哈希保全？
  • Checklist？
FAQ

Do I need permission to use this tool?

Yes, it's crucial to have explicit authorization to work with the hardware and ensure you have permission to access the device.

Can I damage the device?

The tool prioritizes non-damaging methods, but it's important to follow steps carefully and have authorization, as there are inherent risks.

What are UART, JTAG, and SWD?

These are types of connections used to communicate with internal components of electronic devices, often for diagnostics or debugging.

Details

Original description by the author

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

repo: zhaoxuya520/reverse-skill

Popularity

GitHub stars
42k
Ranking position
#4768
License
MIT
Updated
9/22/2026

Is this skill useful?

0

Sign in to vote.

Comments

  • …

More skills from this repository

Agents42k

competition-ad-certificate-abuse

Helps your agent analyze attacks on digital certificate systems. It investigates how certificates can be misused to gain access.

zhaoxuya520/reverse-skill

Agents42k

competition-agent-cloud

Helps your agent analyze security challenges in AI and cloud systems. It investigates how prompts, tools, and the cloud can be exploited.

zhaoxuya520/reverse-skill

Mobile apps42k

competition-android-hooking

Helps your agent investigate Android applications. It analyzes how apps work internally and how they might be modified or exploited.

zhaoxuya520/reverse-skill

Websites & UI (frontend)42k

competition-browser-persistence

Helps your agent analyze how websites store information in your browser. It investigates cookies and other data to understand how sessions work.

zhaoxuya520/reverse-skill

Similar skills

Security280k

django-security

Helps your agent implement security practices in Django applications. It focuses on authentication, authorization, and prevention against common attacks, ensuring more secure code.

affaan-m/ECC

Security280k

laravel-security

Helps your agent secure Laravel applications against threats. Implements security practices for authentication, authorization, and common attack prevention.

affaan-m/ECC

Security280k

module-regression

Helps your agent manage changes in large projects. Ensures code changes in one part don't break other parts.

affaan-m/ECC