Skip to content
FPGA-based emulator to assist with guessing bootloader SD card filenames
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.


This is a MiSoC-based system on chip which integrates a basic SD card emulation peripheral based on the Project Vault ORP.

The emulated SD card has its block reads backed by software, which may choose to return a different filename each time the file allocation table is scanned. The hardware peripheral can then generate configurable triggers precisely when specific blocks are returned.

By analyzing side-channel emanations in sync with these triggers, we can evaluate the progress of a firmware routine's filename matching code. By interacting with the SoC application to flip through filenames letter by letter, any names of interest to the firmware can be eventually determined.

The current target board is a Papilio Pro, but the design should be easily portable to any system that works with Migen.

You can’t perform that action at this time.