Backdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers
summary
Demonstrates three concrete backdoor methods for microcontrollers: overwrite the reset-entry hex to run injected opcodes at boot, hijack interrupt vectors to exfiltrate incoming data, and forge the tiny stack to build a stack ROP chain that redirects execution. Uses vendor tools and workflow: dump/modify hex with MPLAB IDE, program via PICkit3, fix per-line checksums and relocated call targets. Live demos include LED proof-of-concept, relaying hoverboard Bluetooth traffic to USB, and a PIC18 ECU change that keeps petrol and CNG injectors firing. Also covers code-protection bits (CP/Configuration) and a planned automation tool.
AI-written summary · about
chapters (6)
- 0:00black hat USA 2019
- 6:54MICROCONTROLLERS PROGRAMMING
- 9:00PROGRAM MEMORY DUMP
- 12:44PAYLOAD INJECTION: AT THE ENTRY POINT
- 32:54STACK PAYLOAD INJECTION: CONTROLLING PROGRAM FLOW_
- 36:40PROGRAM MEMORY PROTECTIONS
related talks
29mBackdooring of Real Time Automotive OS Devices
01h 46mTutorial: Introduction to Reverse Engineering
40mD2T1 - Backdooring & Remotely Controlling Cars
43mThe Tao of Hardware the Te of Implants
33mEmbedded Device Exploitation 101: An Introduction to Firmware Hacking
40mWearable Botnets and Happy Hacked Drivers
01h 00mHacking and Securing C++
29mFrom an URGENT/11 Vulnerability to a Full Take-Down of a Factory, Using a Single Packet