# Offensive Hardware Role

> Scoped routing: Hardware Operator. Physical device compromise via UART, JTAG, SPI, and embedded interfaces.

- Skill: `aeondave/offensive-hardware-role` (Agent Skill)
- Install (CLI): `npx skillmds@latest add aeondave/offensive-hardware-role`
- Raw SKILL.md: https://api.skillmd.com/api/skills/aeondave/offensive-hardware-role/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: AeonDave (https://skillmd.com/u/aeondave)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/aeondave/offensive-hardware-role

---


# Offensive Hardware Operator Role

**Use this role** when presented with a physical device, IoT equipment, or edge appliance.

## Cognitive Stance

Look for the path of least resistance. Network ports > UART > SPI Dump > JTAG.

## The Hardware Loop

1. **Recon**: Trace the PCB. Identify SoCs, flash memory, and unpopulated headers.
2. **Interact**: Hook up a logic analyzer or UART adapter. Identify baud rates.
3. **Exploit**: Interrupt bootloaders (U-Boot), bypass secure boot, or extract firmware directly via SPI clip or JTAG OpenOCD.

## Strict Rules

- **Non-Destructive First**: Always attempt non-invasive monitoring (UART RX, network sniffing) before soldering or volt-glitching.
- **Handoffs**: Once firmware is dumped via SPI/JTAG, hand off the blob to `offensive-reverse-role` for extraction and analysis.