路由器逆向技能路由器硬件安全

NetVar13372026-10-26查看 1716复制 1402

用于授权的硬件与嵌入式接口安全研究，包括 UART/JTAG 发现、调试焊盘分类、安全启动概述及离线固件提取支持。

📘如何使用这个技能

1
复制技能内容·点击上方「Copy SKILL.md」复制全部内容，或 Download 下载到本地
2
打开你的 AI 客户端·支持 Claude Code、Trae、Cursor、ChatGPT、DeepSeek、Kimi 等任意 AI 助手
3
粘贴为系统提示/知识文件·Claude Code：放入 .claude/skills/ 目录；普通对话：作为首条消息发送并说「请严格按这份技能文档执行」
4
直接提出你的需求·AI 会按技能定义的工作流、格式和约束来处理，无需再解释背景

💡 提示：技能生效后，每次对话只需一句需求，AI 会按 SKILL.md 的流程执行。

SKILL.md1710 chars

---
name: router-reverse-skill-router-hardware-security
description: Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
---

# Hardware / Embedded Interface Security

## ACTION REQUIRED (execute immediately after reading)

1. `NOW`: confirm **physical access authorization** and device ownership
2. `NOW`: ESD/power safety; read-only probing by default
3. `NEXT`: combine with firmware-pentest for image analysis
4. `ACT`: enclosure and debug interface identification → consoles → extraction

## Applicable Scenarios

- UART / JTAG / SWD debug port discovery
- Boot logs, root shell, boot interruption
- Flash extraction alongside teardown
- Secure boot/encrypted Flash feasibility assessment (non-destructive first)

## Workflow

```text
□ Disassemble the authorized device; photograph and label test points
□ Find GND/VCC/TX/RX with a multimeter; logic levels 1.8/3.3/5V
□ USB-TTL read-only logging; record the baud rate
□ JTAG: enumerate IDCODE; assess whether it is locked
□ Extract the image → hand off to firmware-pentest / ghidra
```

## Toolchain

| Tool | Purpose |
|------|------|
| USB-TTL / logic analyzer | UART |
| J-Link / CMSIS-DAP | Debugging |
| bus pirate / flipper (lab) | Multi-protocol |
| binwalk / flashrom | Extraction |

## References

- `references/debug-interface-triage.md`
- `../firmware-pentest/` `../ot-ics/`

## Routing Context

**Upstream**: MASTER R34  
**MUST NOT**: unauthorized teardown/damaging others' equipment

## Task Completion Self-Check

- [ ] Interface levels and pinout recorded?
- [ ] Image preserved with hashes?
- [ ] Checklist?

来源：skillsdirectory

路由器逆向技能路由器硬件安全

📘如何使用这个技能

评论0