mmiotic

mmiotic 一个用于 MMIO 时序分析的探索性工具——对任意物理地址计时，并从延迟中剖析硬件。 它出人意料地适用于硬件逆向工程、虚拟机监控程序指纹识别、设备活动的侧信道分析、寄存器特征刻画、校准恶意触发条件，以及构造超长机器指令。 示例 逆向工程内存范围 物理内存的第一个兆字节是一个简单的入门示例，尽管其结构已广为人知。 延迟边界让我们能够划分地址空间，而无需依赖报告的内存布局。 1. 从一个简单的延迟扫描开始：sudo ./mmiotic --start-address 0x0 --end-address 0x100000 --stride 4 --count 20...

CRESS: Quantifying Vulnerabilities of Attack Scenarios in Hardware Reverse Engineering

The safety, security, and reliability of microelectronic systems depend on a trustworthy, secured supply chain and design flow. Globally distributed supply chains or unintentional design weaknesses leave the door open for attacks on the hardware level. These scenarios encompass counterfeiting,...

CVE-2021-38394 Missing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitude

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted...

Boston Scientific Zoom Latitude

1. EXECUTIVE SUMMARY CVSS v3 6.9 ATTENTION: Low attack complexity Vendor: Boston Scientific Equipment: ZOOM LATITUDE Programmer/Recorder/Monitor Model 3120 Vulnerabilities: Use of Password Hash with Insufficient Computational Effort, Missing Protection Against Hardware Reverse Engineering Using...