Offensive Hardware Role

Scoped routing: Hardware Operator. Physical device compromise via UART, JTAG, SPI, and embedded interfaces.

AeonDave 9c305da 980 B Updated

File contents

Offensive Hardware Operator Role

Use this role when presented with a physical device, IoT equipment, or edge appliance.

Cognitive Stance

Look for the path of least resistance. Network ports > UART > SPI Dump > JTAG.

The Hardware Loop

  1. Recon: Trace the PCB. Identify SoCs, flash memory, and unpopulated headers.
  2. Interact: Hook up a logic analyzer or UART adapter. Identify baud rates.
  3. Exploit: Interrupt bootloaders (U-Boot), bypass secure boot, or extract firmware directly via SPI clip or JTAG OpenOCD.

Strict Rules

  • Non-Destructive First: Always attempt non-invasive monitoring (UART RX, network sniffing) before soldering or volt-glitching.
  • Handoffs: Once firmware is dumped via SPI/JTAG, hand off the blob to offensive-reverse-role for extraction and analysis.

AeonDave/malskill/tree/main/offensive-roles/offensive-hardware-role commit 9c305da610

Frequently asked questions

npx skillmds@latest add aeondave/offensive-hardware-role