Hardware Hacking Expert - Level 2 - Module 1: UART Hacking
- Buy now
- Learn more
- Discussions
About Module 01 – UART Hacking

Syllabus Module 01 – UART Hacking - Module 01.pdf
Class 01 - Why Hack UART?

Class 01 - Why Hack UART?
Class 02 - Identify UART pins

Class 02 - Identify UART pins
Class 03 - Sniffing Log

Class 03 - Sniffing Log
Class 04 - Bypassing Simple Login

Class 04 - Bypassing Simple Login
CrackLoginHash.py
rockyou.txt
Class 05 - UART and the OT World

Class 05 - UART and the OT World
Class 06 - Connecting to OT Comm Line

Class 06 - Connecting to OT Comm Line
Class 07 - Identifying the right wires

Class 07 - Identifying the right wires
ModBusEmulator-Client.py
ModbusEmulator-Server.py
OT_Sniffer.py
Class 08 - From OT to UART

Class 08a - From OT to UART
Class 08b - RS485 to UART Adaptors DIY - part 1
Class 08c - RS485 to UART Adaptors DIY - part 2
Class 09 - Sniffing OT Network

Class 09 - Sniffing OT Network
Class 10 - Reversing OT traffic

Class 10a - Reversing OT traffic - part 1
Class 10b - Reversing OT traffic - part 2
Class 10c - Reversing OT traffic - part 3
OT-Parser.py
CRC-Brute.py
Class 11 - true MITM on OT

Class 11a - true MITM on OT - part 1
Class 11b - true MITM on OT - part 2
Class 11c - true MITM on OT - part 3
Class 11d - true MITM on OT - part 4
Class 11e - true MITM on OT - part 5
OT_MITM.py
ThhMITMxface_Schematics.pdf
MITM_Test.py
ThhWireBug_Rider.STL
ThhWireBug_PCB.STL
ThhWireBug_Schematics.pdf
ThhWireBug_House.STL
Class 12 - Fault Injection in UART Attacks

Class 12 - Fault Injection in UART Attacks
GlitcherTest.py
Class 13 - Bypassing Kill Switch Protection

Class 13 - Bypassing Kill Switch Protection - part 1
Class 13 - Bypassing Kill Switch Protection - part 2
BrutPassword.py
PasswordUARTmaster.elf
rockyou.txt
Class 14 - Bypassing Secure Boot

Class 14a1 - Bypassing Secure Boot - Intro 1
Class 14a2 - Bypassing Secure Boot - Intro 2
Class 14b - Bypassing Secure Boot by Fault Injection
Class 14c - Bypassing Secure Boot by Imposing Single User Login
Class 14d - Bypassing Secure Boot by Firmware Manipulations
JetsonUart0FullLog01.log
Class 15 - Firmware Extraction the UART way

Class 15a - Firmware Extraction the UART way - Intro
Class 15b - Firmware Extraction the UART way - Bootloader Backdoors
Class 15c - Firmware Extraction the UART way - Logfile Resurrection
hex2bin.py

Class 08 - From OT to UART

This class explains how OT protocols like RS485 and RS422 are built on UART concepts. Students learn how these differential signaling systems can be bridged back into UART, enabling attackers to exploit them with the same tools used on embedded devices. The instructor demonstrates how RS485/422 wiring maps to RX/TX-level UART, making exploitation possible once the correct adaptors are used. This bridges OT communication to the rest of the module, showing how UART-level exploitation applies universally.

Learning Objective
Understand how to translate OT communication into UART signals.

Training Outcomes

Recognize RS485/422 as UART-based.
Configure adaptors to bridge signals.
Distinguish between half- and full-duplex communication.

Hands-On Experience

Connect RS485/422 lines to adaptors.
Capture UART-level data from OT buses.
Interpret communication in terminal software.

3 Lessons