hardware-security

securityzhaoxuya520

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

Install

npx skills add https://github.com/zhaoxuya520/reverse-skill --skill hardware-security

SKILL.md

---name: hardware-securitydescription: Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.---

Hardware / Embedded Interface Security

ACTION REQUIRED（读完后立刻执行）

NOW: 确认物理接触授权与设备归属
NOW: ESD/电源安全；默认只读探测
NEXT: 联合 firmware-pentest 做镜像分析
ACT: 外壳与调试接口识别 → consoles → 提取

适用场景

UART / JTAG / SWD 调试口发现
启动日志、root shell、引导打断
配合拆机提取 Flash
安全启动/加密 Flash 的可行性评估（非破坏性优先）

工作流

□ 拆解授权设备；拍照标注测试点
□ 万用表找 GND/VCC/TX/RX；逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志；记录波特率
□ JTAG：枚举 IDCODE；评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra

工具链

工具	用途
USB-TTL / logic analyzer	UART
J-Link / CMSIS-DAP	调试
bus pirate / flipper（实验室）	多协议
binwalk / flashrom	提取

参考

references/debug-interface-triage.md
../firmware-pentest/ ../ot-ics/

路由上下文

上游: MASTER R34
MUST NOT: 未授权拆机/损坏他人设备

任务完成自检

是否记录接口电平与引脚图？
镜像是否哈希保全？
Checklist？

Related skills

azure-compliancemicrosoft606KRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.firebase-security-rules-auditorfirebase124KAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks. Use when auditing/reviewing rules, running red-team rule assessments, or scoring against auditor checklists. Don't use for Firebase CLI (login, deploy), Auth, Crashlytics, Remote Config, or database queries.browser-fingerprint-auditliarjsdev69KAudit a browser fingerprint for internal contradictions with the liarjs CLI - canvas, WebGL, WebGL2, WebGPU, audio, 220 fonts, WebRTC and timezone probes, scored against the TLS/HTTP/ASN view of the same request. Use when asked to run a browser fingerprint test, see what a fingerprint looks like, check canvas or WebGL fingerprint stability, compare a spoofed profile against a real browser, or find out whether a browser profile is self-consistent.cloudflare-onecloudflare66KDesign, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments. Use cloudflare-one-migrations for migration planning from other vendors.