Skip to content

yogsec/Hardware-Hacking-Tools

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

16 Commits
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

πŸ”§ Hardware Hacking Tools

Hardware Hacking Tools

Hardware Hacking Tools! πŸš€ lists various tools used in hardware hacking, categorized by attack methods. Whether you're a security researcher, penetration tester, or just curious about hardware security, this repo is for you! πŸ”πŸ’»

WhatsApp Channel Telegram Channel LinkedIn WhatsApp Channel Lichess Email Telegram Channel

Firmware Analysis & Extraction πŸ–₯️

πŸ› οΈ JTAG/SWD Debugging

  • JTAGulator – Identifies JTAG pinouts on embedded devices.
  • OpenOCD – Open-source debugging and programming tool for embedded devices.
  • UrJTAG – Universal JTAG library supporting multiple devices.
  • Segger J-Link – A commercial JTAG/SWD debugger with high-speed debugging.
  • Xilinx Platform Cable USB II – Used for debugging and programming Xilinx devices.
  • STM32 ST-Link – Debugging and flashing STM32 microcontrollers.
  • Black Magic Probe – Open-source JTAG debugger supporting SWD.

πŸ”Œ UART/SPI/I2C Debugging

πŸ“₯ Firmware Dumping

  • CH341A Programmer – Reads and writes SPI flash chips.
  • Flashrom – Open-source tool for reading, writing, and erasing firmware.
  • Dediprog SF100 – High-speed SPI Flash programmer.
  • Shikra – Debug and communicate with UART, JTAG, and SPI devices.
  • RT809H – Universal programmer for dumping firmware from EEPROMs.
  • Teensy – Custom DIY method for SPI flash dumping.

πŸ“‚ Reverse Engineering Firmware

  • Ghidra – NSA’s open-source reverse engineering framework.
  • IDA Pro – Industry-standard tool for disassembling firmware binaries.
  • Binwalk – Extracts and analyzes firmware images.
  • Firmware-Mod-Kit – Extracts and modifies firmware.
  • Unblob – Extracts and analyzes binary blobs.
  • GDB (GNU Debugger) – Debugging firmware in real-time.
  • Radare2 – Open-source framework for binary analysis.
  • Capstone – Disassembly framework for analyzing instruction sets.
  • Angr – Python-based binary analysis tool.
  • Cutter – GUI-based alternative to Radare2 for reverse engineering.

πŸ”¨ Physical Attacks Toolkit

πŸ› οΈ Side-Channel Attacks & Fault Injection

  • ChipWhisperer – Open-source side-channel analysis and fault injection tool.
  • ChipSHOUTER – Advanced electromagnetic fault injection (EMFI) tool.
  • GlitchKit – Tool for voltage glitching on embedded devices.
  • Raspberry Pi Pico + PicoEMP – DIY EM fault injection tool.
  • OpenQASM – Side-channel vulnerability analysis tool for quantum computing.
  • Riscure Inspector – Commercial side-channel analysis tool.

πŸ”₯ Voltage & Clock Glitching

πŸ”© Hardware Debugging & Tampering

  • JTAGulator – Finds JTAG pinouts for debugging.
  • Shikra – Works with JTAG, UART, and SPI.
  • Bus Pirate – Multi-protocol debugging interface.
  • GoodFET – Open-source JTAG debugging tool.
  • OpenOCD – Open-source JTAG/SWD debugging tool.
  • Black Magic Probe – Open-source debugging tool.

πŸ΄β€β˜ οΈ Chip Decapping & Microprobing

πŸ“‘ RFID/NFC Cloning & Attacks

  • Proxmark3 – RFID/NFC cloning and hacking device.
  • ChameleonMini – Open-source NFC emulation tool.
  • Flipper Zero – Multi-tool for RFID, NFC, and other hardware hacking.
  • MFCUK – Cracks Mifare Classic RFID cards.
  • MFOC – Dumps and cracks Mifare Classic keys.

🧲 Electromagnetic Attacks & TEMPEST


Wireless & Radio Hacking Tools

πŸ“‘ Wi-Fi Hacking Tools

  • Aircrack-ng – Suite for Wi-Fi penetration testing.
  • Wifite – Automated Wi-Fi cracking tool.
  • Fern Wi-Fi Cracker – GUI tool for Wi-Fi auditing.
  • Reaver – WPS attack tool.
  • PixieWPS – Offline WPS attack tool.
  • Bettercap – Powerful network attack tool, including Wi-Fi attacks.
  • MDK3 – Wi-Fi testing and deauthentication tool.
  • Kismet – Wireless network detection and monitoring.
  • Wigle.net – Database for mapping Wi-Fi networks.

πŸ“Ά Bluetooth & BLE Hacking

  • Blue Hydra – Bluetooth device scanner.
  • Bluesniff – Bluetooth packet sniffer.
  • BtleJack – Bluetooth Low Energy hijacking tool.
  • BLE CTF – Bluetooth attack training tool.
  • Bleah – Bluetooth hacking framework.
  • BlueRanger – Detect Bluetooth device distances.
  • Ubertooth One – Open-source Bluetooth monitoring tool.

πŸ“» Software-Defined Radio (SDR) Hacking

  • GNU Radio – Signal processing toolkit for SDR.
  • HackRF One – Software-defined radio device for hacking.
  • RTL-SDR – Cheap USB SDR receiver.
  • SDR# (SDRSharp) – Popular SDR software.
  • GQRX – Open-source SDR software.
  • BladeRF – USB 3.0 SDR device for signal analysis.
  • Red Pitaya – SDR and signal processing platform.
  • OsmoSDR – Open-source SDR framework.
  • RFExplorer – Portable RF spectrum analyzer.
  • GR-GSM – GSM signal analysis tool.

πŸ“‘ RFID/NFC Hacking

  • Proxmark3 – RFID/NFC research tool.
  • ChameleonMini – RFID emulator and cloning device.
  • Flipper Zero – Multi-tool for wireless attacks, RFID cloning, and more.
  • MFCUK – Tool for MIFARE Classic card attacks.
  • MFOC – MIFARE Classic offline cracking tool.
  • NFC Tools – Mobile app for NFC analysis.
  • RFIDler – Software-defined RFID tool.
  • Libnfc – Library for NFC communication.
  • ICopy-X – RFID cloning and hacking device.

πŸ“ž GSM & Mobile Network Hacking

  • OsmocomBB – Open-source GSM baseband software.
  • OpenBTS – Build your own GSM network.
  • IMSI Catcher – Detect IMSI catchers and rogue cell towers.
  • Stingray Detector – Mobile IMSI catcher detection.
  • SIMtrace – Intercept SIM card communication.

πŸ”¬ Chip-Level Attack Tools

πŸ΄β€β˜ οΈ 1. Chip Decapping & Microscopy

⚑ 2. Fault Injection & Glitching

  • ChipWhisperer – Side-channel analysis and fault injection tool.
  • ChipSHOUTER – Electromagnetic fault injection (EMFI).
  • GlitchKit – Glitching framework for embedded systems.
  • VoltageGlitcher – Fault injection via voltage control.
  • SPIDriver – SPI communication and glitching.

πŸ”‘ 3. Power Analysis & Side-Channel Attacks

πŸ›‘ 4. Secure Chip Extraction & Key Recovery

πŸ“₯ 5. Firmware & ROM Dumping


πŸ”Œ USB & Peripheral Attack Tools

πŸ΄β€β˜ οΈ 1. USB Exploitation & HID Attacks

πŸ’Ύ 2. USB Data Extraction & Exfiltration

  • USBHarpoon – Data exfiltration via USB.
  • USaBUSe – Automated USB data theft.
  • USBExfil – Auto-copy data from plugged-in devices.

🎭 3. USB Impersonation & Spoofing

  • P4wnP1 A.L.O.A. – USB attack framework (HID, WiFi, storage).
  • USBProxy – Man-in-the-Middle (MitM) for USB devices.
  • USBDriveBy – USB device emulation for bypassing security.
  • BadUSB – Create malicious USB payloads.

πŸ“‘ 4. USB Network Attacks

πŸ”₯ 5. USB Firmware & Debugging Exploits

  • USBKill – Automatically disable a system when a USB device is removed.
  • USBlyzer – USB protocol analyzer for debugging.
  • USBGuard – Policy-based USB protection.
  • FaceDancer – USB attack framework for fuzzing & reversing.
  • GreatFET One – USB debugging and analysis tool.

πŸ›  Hardware Modification & Implantation

πŸ΄β€β˜ οΈ 1. Hardware Backdoor Implants

  • NSA COTTONMOUTH – USB implant for covert data exfiltration.
  • NSA IRONCHEF – Malicious BIOS/firmware modification for persistence.
  • NSA DEITYBOUNCE – BIOS-level malware for remote access.
  • BadUSB – USB firmware modification for keystroke injection.
  • USBNinja – Wireless USB payload injector for remote attacks.
  • OMG Cable – Malicious USB cable for payload execution.

πŸŽ› 2. BIOS & Firmware Modification

  • Flashrom – Reads, writes, erases, and verifies BIOS firmware.
  • UEFI Tool – Analyzes and modifies UEFI firmware.
  • CH341A Programmer – USB flash programmer for BIOS modifications.
  • Bus Pirate – SPI/I2C interface for firmware modifications.
  • Dediprog SF100 – SPI flash programmer for BIOS recovery.
  • Intel ME Cleaner – Disables Intel Management Engine.

πŸ”Œ 3. Hardware Keyloggers & Data Interceptors

πŸ”© 4. Covert Implants & Surveillance Devices

  • PwnPlug – Covert network implant disguised as a power adapter.
  • Pwnagotchi – AI-driven WiFi hacking device.
  • HackRF One – Wireless SDR for sniffing and modifying radio signals.
  • Flipper Zero – Multi-functional hacking device for RFID/NFC access.
  • NSA RAGEMASTER – Covert RF implant that transmits monitor data remotely.
  • WiFi Pineapple – Wireless network penetration testing device.

⚑ 5. Peripheral Device Hijacking

  • USB Rubber Ducky – Keystroke injection tool disguised as a USB drive.
  • MalDuino – Open-source BadUSB keystroke injection tool.
  • ESPloitV2 – ESP8266-based WiFi HID attack device.
  • MouseJack – Exploits vulnerabilities in wireless mice.
  • AirDrive Forensic Keylogger – Wireless keylogger with real-time keystroke transmission.

πŸ”¬ 6. Chip-Level Hardware Trojans

  • ChipWhisperer – Power analysis and fault injection tool.
  • ChipSHOUTER – Electromagnetic fault injection for security bypassing.
  • JTAGulator – Identifies JTAG interfaces on unknown chips.
  • GlitchKit – Firmware glitching and fault injection framework.
  • X-Ray Chip Inspection – Scans chips for hidden implants and modifications.

⚑ Power & Battery Attack Tools

πŸ”‹ 1. Power Analysis & Side-Channel Attacks

⚑ 2. Voltage Fault Injection & Glitching

  • ChipSHOUTER – Electromagnetic fault injection (EMFI).
  • VoltageGlitcher – Injects voltage glitches to bypass security.
  • GlitchKit – Framework for hardware glitching.
  • SPIDriver – SPI-based power glitching tool.
  • EMFI Kit – Voltage and electromagnetic fault injection toolkit.

πŸ”Œ 3. Power Consumption & Tampering Attacks

πŸ”₯ 4. Battery-Based Attacks


πŸ΄β€β˜ οΈ Supply Chain Attack Tools

πŸ”© 1. Hardware Supply Chain Attacks

πŸ”— 2. Firmware & BIOS Manipulation

🎭 3. Software Supply Chain Attacks

πŸ— 4. Hardware Implantation

πŸ›‘ 5. Detection & Prevention

  • SigMF – Spectrum analysis to detect implants.
  • Osquery – Querying firmware for anomalies.
  • YARA Rules – Malware detection in software supply chains.
  • Binwalk – Firmware backdoor analysis.
  • Firmware Integrity Checker – Comparing firmware to clean versions.