by zhaoxuya520cab634bd855fNo license40K starsListed Oct 9, 2026Updated Oct 9, 2026Repository updated 2 weeks ago
Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
Guides authorized hardware and embedded interface security research: UART/JTAG discovery, debug pad triage and firmware extraction support.
NOW: 确认物理接触授权与设备归属NOW: ESD/电源安全；默认只读探测NEXT: 联合 firmware-pentest 做镜像分析ACT: 外壳与调试接口识别 → consoles → 提取references/debug-interface-triage.md../firmware-pentest/ ../ot-ics/上游: MASTER R34
MUST NOT: 未授权拆机/损坏他人设备
Source:zhaoxuya520/reverse-skillinskills/hardware-securityat commitcab634b
License: No license
Content belongs to its original authors. SourceWeft indexes it from a public repository.
zhaoxuya520
Guides authorized Android and iOS app reverse engineering and security testing, from static analysis to runtime instrumentation.
zhaoxuya520
Guides reverse engineering of JavaScript-based custom DSL/VM interpreters, opcode dispatchers and risk-control engines.
zhaoxuya520
Guides authorized Active Directory and Windows identity attack research, from enumeration to Kerberos, AD CS and relay paths.
zhaoxuya520
Guides authorized security testing of desktop thick clients across local storage, IPC, traffic, and update channels.
zhaoxuya520
Guides authorized OSINT and cyber threat intelligence work, enriching IOCs and campaigns from public sources with corroboration and evidence handoff.
zhaoxuya520
Guides blue-team threat hunting and detection engineering with hypotheses, SIEM queries, Sigma/YARA rules and validation.
anthropics
Applies a firm's KYC/AML rules grid to a parsed onboarding record, scoring risk and routing outcomes.
anthropics
Tracks compliance requirements, audit readiness, and evidence for frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS.
Guides implementation of OAuth 2.0 DPoP (RFC 9449) sender-constrained refresh tokens for Google's OAuth platform.
Guides SOC analysts through triaging Google SecOps security alerts, from investigation to closure or escalation.
Guides SOC analysts through deep security incident and entity investigations in Google SecOps using UDM queries and timelines.
Guides proactive threat hunting in Google SecOps using UDM queries, IoC lookback, prevalence and outlier analysis.
□ 拆解授权设备；拍照标注测试点□ 万用表找 GND/VCC/TX/RX；逻辑电平 1.8/3.3/5V□ USB-TTL 只读日志；记录波特率□ JTAG：枚举 IDCODE；评估是否锁定□ 提取镜像 → 交接 firmware-pentest / ghidra