The Tao of Hardware the Te of Implants
summary
Demonstrates concrete, reproducible implants: a blind JTAG escalation using a solderPeak/SVF payload that flips a getty flag to gain root (demoed with a working root shell), a DMA kernel patching attack via a USB-to-PCIe “slot screamer” that patches generic_permission to read /etc/shadow, a $3 Arduino+NRF wireless PLC implant that toggles relays by soldering to an I/O resistor and successfully beeps outputs remotely, a pogo‑pin hot‑plug JTAG expansion that overrides GPIO without firmware changes, and a planned USB‑C/display adapter DFU firmware hack for HID/slide‑advance tricks.
AI-written summary · about
chapters (8)
- 0:00Introduction to TAO
- 2:35Hardware implant basics
- 6:26JTAG privilege escalation
- 14:07DMA kernel patching
- 21:20PLC wireless control
- 28:58Malicious PLC expansion
- 33:41USB display adapter hacks
- 42:04Final takeaways
related talks
01h 46mTutorial: Introduction to Reverse Engineering
45mKeynote: How to Build Hardware Trojans
39mBackdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers
51mA Measured Response to a Grain of Rice
24mSecurity through Transparency: Tales from the RP2350 Hacking Challenge
24mIf They Can Touch It, They Own It: The Stories We Tell...
40mWearable Botnets and Happy Hacked Drivers
44mSilicon Under Attack Physical Exploitation Of Modern Chips