Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
Pro scans all 2 files and shows the line behind each finding
Scanned 9/23/2026
npx -y skills add coco-research/coco --skill hardware-security --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Hardware Security?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/coco-research-hardware-security)More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.
---
name: hardware-security
description: Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
user-invocable: true
---
# Hardware / Embedded Interface Security
## 适用场景
- UART / JTAG / SWD 调试口发现
- 启动日志、root shell、引导打断
- 配合拆机提取 Flash
- 安全启动/加密 Flash 的可行性评估(非破坏性优先)
## 工作流
```text
□ 拆解授权设备;拍照标注测试点
□ 万用表找 GND/VCC/TX/RX;逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志;记录波特率
□ JTAG:枚举 IDCODE;评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra
```
## 工具链
| 工具 | 用途 |
|------|------|
| USB-TTL / logic analyzer | UART |
| J-Link / CMSIS-DAP | 调试 |
| bus pirate / flipper(实验室) | 多协议 |
| binwalk / flashrom | 提取 |
## 参考
- `references/debug-interface-triage.md`
- `../firmware-pentest/` `../ot-ics/`
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!