NANDo-board
NANDo-board copied to clipboard
2nd Generation of Multipurpose FTDI-based board for Hardware Hacking and IoT Security Testing
NANDo-Board
A Multipurpose Breakout for the FT2232HL to easily conduct Hardware Security tests and Hack (I)IoT devices!
WHID's Trainings
The 𝙊𝙛𝙛𝙚𝙣𝙨𝙞𝙫𝙚 𝙃𝙖𝙧𝙙𝙬𝙖𝙧𝙚 𝙃𝙖𝙘𝙠𝙞𝙣𝙜 𝙏𝙧𝙖𝙞𝙣𝙞𝙣𝙜 is a Self-Paced training including Videos, a printed Workbook and a cool Hardware Hackit Kit. And... you get everything shipped home Worldwide! 🌍🔥😎
For more info... ➡ https://www.whid.ninja/store
Bill-of-Materials
Please check the BOM.txt for the components needed. Most likely (except the R470OHM 2010) you may have all you need already.
Of course, you still need to purchase a part the FT2232HL CJMCU (e.g. https://s.click.aliexpress.com/e/_DeK6Oor )
Tips:
- This breakout is designed for the FT2232HL CJMCU board (e.g. https://s.click.aliexpress.com/e/_DeK6Oor )
- Pull-up Resistor is 470Ohm.
- Screws to hold the PCB to the 3D-printed case are 2x6mm.
- BE SURE to mount the FT2232HL with the FTDI chipset FACING UP!!!
UART (Channel A)
Command to run the UART console feature:
Configure minicom/putty/whatever-terminal-you-are-used-to (e.g.
screen /dev/ttyUSB0 115200
screen -L /dev/ttyUSB0 115200
screen -L -Logfile UART.log /dev/ttyUSB0 115200
)
JTAG (Channel B)
Command to run the JTAG debugging feature:
sudo openocd -f NANDo-Board_JTAG_OpenOCD.cfg -f target_device.cfg
SWD (Channel B) (this works on openocd v.0.11 but NOT on v.0.10!!!)
Command to run the SWD debugging feature (remember to move the SWD Enable switch on the PCB before using this feature!):
cd openocd-v.0.11
./openocd -s /opt/openocd/share/openocd/scripts/ -f /home/FOO/Desktop/NANDo-Board/OpenOCD_Configs/NANDo-Board_SWD_OpenOCD.cfg -f target_device.cfg
SPI Dumping (Channel B)
Command to run the SPI dumping feature:
flashrom -p ft2232_spi:type=2232H,port=B -r firmware.bin
In case you need also to write a SPI flash... please do enable the WRITE PROTECT (WP) Jumper on the PCB (i.e. SPI WP Enable).
NAND Dumping
Dump Raw Image:
yand_cli.py -r -f nand_raw_dump_withOOB.bin
Remove OOB Data:
python Nand-dump-tool.py -i nand_raw_dump_withOOB.bin -o nand_raw_dump_cleaned.bin --page-size 2048 --oob-size 64 --layout separate
OR
python Nand-dump-tool.py -i nand_raw_dump_withOOB.bin --layout=guess -I <ID-CODE-HERE> -o nand_raw_dump_cleaned.bin
Logic Analyzer with Pulseview
The strip pins AD0-AD7 labeled "Pulseview FTDI-LA" can be used as low-frequency Logic Analyzer Channels with Pulseview/Sigrok tool. Here the configuration
Multipurpose Pin Headers/Sockets
On the lower part of NANDo-Board's PCB there are some pin headers/sockets that are not connected with the FT2232HL. They are there just in case you need to mess-up with many flying-wires and you want to keep all connections clean and in order like with an usual breadboard, but with screwdown terminal blocks & co.