Skip to content
FPGA-based emulator to assist with guessing bootloader SD card filenames
Branch: master
Clone or download
Micah Elizabeth Scott
Latest commit 4ba9d1d Mar 31, 2017
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
flipsyfat Preserve byte addresses in non-block-aligned pre-SDHC operations Mar 30, 2017
victims
.gitignore
LICENSE Initial commit Feb 28, 2017
Makefile
README.md
setup.py Target-specific scaffolding for Papilio port Feb 28, 2017

README.md

Flipsyfat

This is a MiSoC-based system on chip which integrates a basic SD card emulation peripheral based on the Project Vault ORP.

The emulated SD card has its block reads backed by software, which may choose to return a different filename each time the file allocation table is scanned. The hardware peripheral can then generate configurable triggers precisely when specific blocks are returned.

By analyzing side-channel emanations in sync with these triggers, we can evaluate the progress of a firmware routine's filename matching code. By interacting with the SoC application to flip through filenames letter by letter, any names of interest to the firmware can be eventually determined.

The current target board is a Papilio Pro, but the design should be easily portable to any system that works with Migen.

You can’t perform that action at this time.