/hardware-security

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

BOOST

zhaoxuya520@zhaoxuya520

GitHub

From plugin

reverse-skill

39k46 skills

Install

$ npx -y skills add zhaoxuya520/reverse-skill --skill hardware-security --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.
You can call itInvoke it directly when you want it.
Slash command/hardware-security

Context preview

The summary Claude sees to decide when to auto-load this skill.

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

SKILL.md

hardware-security.SKILL.md

name: hardware-security
description: Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

Hardware / Embedded Interface Security

ACTION REQUIRED（读完后立刻执行）

1. `NOW`: 确认**物理接触授权**与设备归属 2. `NOW`: ESD/电源安全；默认只读探测 3. `NEXT`: 联合 firmware-pentest 做镜像分析 4. `ACT`: 外壳与调试接口识别 → consoles → 提取

适用场景

UART / JTAG / SWD 调试口发现
启动日志、root shell、引导打断
配合拆机提取 Flash
安全启动/加密 Flash 的可行性评估（非破坏性优先）

工作流

□ 拆解授权设备；拍照标注测试点
□ 万用表找 GND/VCC/TX/RX；逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志；记录波特率
□ JTAG：枚举 IDCODE；评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra

工具链

| 工具 | 用途 | |------|------| | USB-TTL / logic analyzer | UART | | J-Link / CMSIS-DAP | 调试 | | bus pirate / flipper（实验室） | 多协议 | | binwalk / flashrom | 提取 |

参考

`references/debug-interface-triage.md`
`../firmware-pentest/` `../ot-ics/`

路由上下文

**上游**: MASTER R34 **MUST NOT**: 未授权拆机/损坏他人设备

任务完成自检

[ ] 是否记录接口电平与引脚图？
[ ] 镜像是否哈希保全？
[ ] Checklist？

Read it on GitHub ↗

Ships withreverse-skill

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

Get the whole plugin

Stats

JavaScript Node Bash PowerShell Java

+7 tags

C#GraphQL Linux Git GitHub Anthropic MCP

39,460

Stars

5,492

Forks

Active

Maintenance

PowerShell