Basilisk: Remote Code Execution by Laser Excitation of P–N Junctions Without...
summary
Demonstrates an external attacker using a raster‑scanned laser and linear actuators plus an Arduino to bias P–N junctions (LEDs and ESD diodes) and flip logic levels on a live I²C bus, turning observed opcodes into reachable instructions and achieving a proof‑of‑concept remote arbitrary code execution with careful timing and phase‑lock. Measurements map a 2Vt active contour, show active area ~125 µm on some chips, and find 900 nm invisible wavelength is most effective; mitigation requires hardware changes.
AI-written summary · about
chapters (7)
- 0:00Laser-induced code execution
- 2:59Attack on 4-bit CPU
- 7:38Automated laser scanning machine
- 10:07Mapping LED active area
- 11:55ESD protection testing
- 13:40Optimal laser wavelengths
- 14:22Acknowledgments
related talks
46mNakatomi Space: Lateral Movement as L1 Post-exploitation in OT
59mThe Less Hacked Path
40mWearable Botnets and Happy Hacked Drivers
39mBackdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers
44mSilicon Under Attack Physical Exploitation Of Modern Chips
44mICSCorsair: How I Will PWN Your ERP Through 4-20 mA Current Loop
24mSecurity through Transparency: Tales from the RP2350 Hacking Challenge
42m"Vulnerabilities from a grave. Forever dead or maybe alive..."