Skip to content
cccskills
FreePublished on GitHub

hardware-security

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

The English summary is being prepared. Showing the original description.

dhicoc/dsh-reverse-skill302 stars(GitHub 302 + cccskills 0)

Run score Not tested

See how to install

Files included (2)

  • SKILL.md1.5 KB
  • references/debug-interface-triage.md217 B

SKILL.md (original)

Review the instructions the agent will receive before you install.

Hardware / Embedded Interface Security

ACTION REQUIRED(读完后立刻执行)

  1. NOW: 确认物理接触授权与设备归属
  2. NOW: ESD/电源安全;默认只读探测
  3. NEXT: 联合 firmware-pentest 做镜像分析
  4. ACT: 外壳与调试接口识别 → consoles → 提取

适用场景

  • UART / JTAG / SWD 调试口发现
  • 启动日志、root shell、引导打断
  • 配合拆机提取 Flash
  • 安全启动/加密 Flash 的可行性评估(非破坏性优先)

工作流

□ 拆解授权设备;拍照标注测试点
□ 万用表找 GND/VCC/TX/RX;逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志;记录波特率
□ JTAG:枚举 IDCODE;评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra

工具链

工具用途
USB-TTL / logic analyzerUART
J-Link / CMSIS-DAP调试
bus pirate / flipper(实验室)多协议
binwalk / flashrom提取

参考

  • references/debug-interface-triage.md
  • ../firmware-pentest/ ../ot-ics/

路由上下文

上游: MASTER R34
MUST NOT: 未授权拆机/损坏他人设备

任务完成自检

  • 是否记录接口电平与引脚图?
  • 镜像是否哈希保全?
  • Checklist?

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization, rate-limit, and CI/CD testing.

The English summary is being prepared. Showing the original description.

dhicoc/dsh-reverse-skill302Updated Oct 8, 2026

在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook,以及按需切换到 so/native 分析。优先使用本机已安装的 jadx、apktool、frida、adb、ida-reverse、radare2。

The English summary is being prepared. Showing the original description.

dhicoc/dsh-reverse-skill302Updated Oct 8, 2026

Use for authorized multi-stage attack-path planning and orchestration when a task spans reconnaissance, initial access, privilege escalation, lateral movement, or impact assessment. Route single-stage tasks directly to their specialist skill.

The English summary is being prepared. Showing the original description.

dhicoc/dsh-reverse-skill302Updated Oct 8, 2026

跨版本符号迁移与二进制差分。当你有旧版本的符号/逆向结果,需要快速迁移到新版本时使用。 适用场景:内核缺 PDB 用旧版符号推导、程序更新后批量迁移函数名、应用更新后快速定位新偏移。 核心方法:用 LLM 做结构化差异比对,程序化输入输出,成本极低(200 函数 ~1 元)。 触发关键词:符号迁移、bindiff、跨版本、PDB 缺失、函数偏移迁移、symbol migration、binary diff、版本对比。

The English summary is being prepared. Showing the original description.

dhicoc/dsh-reverse-skill302Updated Oct 8, 2026

Use for authorized binary analysis in Binary Ninja, including HLIL/MLIL/LLIL inspection, strings/imports/exports, cross-references, types, patch review, Python API automation, and optional Binary Ninja MCP or localhost HTTP integration.

The English summary is being prepared. Showing the original description.

dhicoc/dsh-reverse-skill302Updated Oct 8, 2026

统一自动化入口。覆盖浏览器自动化(Playwright)和 Windows 桌面应用自动化(OpenReverse)。 浏览器场景:打开网页、点击、填表、爬取、截图、自动化登录、渗透页面交互。 桌面场景:操作 IDA/x64dbg 等 GUI 工具、Windows UI Automation、视觉驱动交互、桌面应用网络抓包。 触发关键词:浏览器自动化、桌面自动化、打开网页、填表、爬取、截图、自动化登录、Playwright、agent-browser、headless、OpenReverse、UIA、CUA、桌面操作、Windows 自动化。

The English summary is being prepared. Showing the original description.

dhicoc/dsh-reverse-skill302Updated Oct 8, 2026

See all skills by dhicoc

Report a problem with this skill