Patch spi

[zaphoxx]

updated the spi sniffer capability

• added handling of WAIT states
• added handling of #bytes transmitted (instead of reading only 1byte from MISO)
• added gpios to handle dipswitch input for sniffer mode selection
• added some blinkyblink on the onboard led when sniffing starts and when key has been found
• update the pio spi file to flush the isr when select line is low on raising clock edge to avoid bit offsets
• moved the countdown (5 sec) after the logo shows and made the countdown (sleep) visual
• dipswitch position 0 --> spi bios sniffing; dipswitch position 1 --> lpc sniffing
• added the gerberfile(s) from my pcb for reference
• vmk header check is updated

i think thats it. let me know if you have any questions or suggestions.

[nezza]

I finally got an SPI machine - so I will try to test this :)

[Cybercop-Training]

@zaphoxx Thanks for creating this upgrade project 👍 Would it be possible to share your KiCad files from the modified SPI sniffer aswell?

The reason why I ask this is because I was able to export a CPL (component placement list) file from the original KiCad files that were provided by stacksmashing. I couldn't find a way to extract such a CPL file only from the gerber files that you did provide on your github.

Together with the gerber files, the CPL file and a little BOM list I was able to use the soldering service from the company pcb way to create the original pico TPM sniffer. Maybe it's possible to create a similar project with yours aswell?

[zaphoxx]

Hi, thanks for your praise and sorry for the very late response. Unfortunately there is no BOM available as I did that online with the easyEDA tool on the fly and just used some available footprints that would suit my needs. I ordered the parts seperately and soldered it myself (i didnt need the pogo pins, so i left them out on my board). From what i can see the footprints used where for

Name Designator Footprint KH-2.54PH180-1X6P-L11.5 H1 HDR-TH_6P-P2.54-V-M-1 DIP switchEI-04 SW1 SW-TH_DIPSWITCHEI-04 Button-SMD-4x4x1.5 SW2,SW3 SW-SMD_4P-L5.2-W5.2-P3.70-LS6.5 PICO U1 COMM-SMD_L51.0-W21.0-P2.54_SC0916 X9555WV-2X04-6TV01 U2 IDC-TH_8P-P2.54_XKB_X9555WV-2X04-PTV01

Hope that helps Best

[Cybercop-Training]

@zaphoxx Now it was me who didn't recognize your response :-) Thanks for sharing the footprints. If possible are you able to share a picture (front and back) how your sniffer with soldered components looks like? Would it be possible for you to create a export from your easyEDA project? I think it's file --> export --> easyEDA... Output will be a json file. Maybe I can try to import the file in easyEDA then to check if it's possible to create a soldering project from there...

Thanks in advance and best regards Cybercop

[zaphoxx]

Hi, I added images and exports to /hardware folder in the following repo https://github.com/zaphoxx/pico-tpmsniffer-spi . you can also find all information here https://oshwlab.com/zaphoxx/pico-tpmsniffer-shield hope that helps Best

[zaphoxx]

I finally got an SPI machine - so I will try to test this :)

Hi, just curious if you got a chance to test it out yet and if you had any problems with it? Best

[Cybercop-Training]

@zaphoxx Finally I was able to create a soldering project with the help of your files directly with jlcpcb.com. I did not solder the pogopins, because I couldn't find a match in their database.

Now I have to search for a test device and I'll be happy to test. Were you able to connect the SOIC8 SOP8 test clip directly from the sniffer to the SPI Chip on a Lenovo T460 device?

Result of the jlcpcb soldering project looks like this: