IoT Village - Getting Started
CC Attribution 3.0 Unported:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Heiland, Deral
This learning session will focus on the subject of building an IoT hardware hacking lab. During this learning session various tools and technologies will be shown and discussed that are needed for physical disassembly, soldering, debugging, and analyzing. Covering the basic entry level to the more advanced lab equipment needed and used. After each learning objective we will have Q&A sessions.
 in the lab, and we're going to be covering everything from kind of the basic level to the advanced level. When this thing's all with, I'm going to be jumping on IoT Village Discord, where you'll be able to ask me more questions. I also, everything we're going to talk about is show today. I actually have a price list. It's kind of an Amazon type price list showing a lot of, well, not just Amazon, but various places that you can buy this stuff. That'll give you an idea. Of course, if you shop around, you'll be able to get some of this stuff cheaper. So let's go ahead and talk about what our agenda is today. So we've broken this up into a number of categories. Disassembly and assembly of hardware tools for taking things apart. Soldering, desoldering, equipment, a magnification, which may come in handy if you have that perfect eyesight, more power to you. But for some of us that may not have great eyesight or getting a little older, magnification plays a big role into how we can actually see things and do soldering at surface mount level type technology. We're going to be looking at monitoring devices and technology, debugging tools. And then I'm going to cover probably one of the most important ones. It's the odds and ends, the pieces in the parts that make your life way much easier in a lab. And awfully, the pieces and parts build within your lab as you kind of work through the various aspects of testing things. You go, hey, if I bought this little item here, this header, this plug, this switch, it would make my life easier. So you start building up a good ensemble of those types of techs. We're going to be talking about those at the end also, which I think is very important. But let's go ahead and jump out over to a screen and let's go ahead and get a camera going in here and see how this works. Oh, that's kind of interesting. I control. There we go. That's much better. So let me get out of the way of the camera so you all can see me. So, again, this is kind of my lab and we wanted to start off with looking at tools to take things apart to start with a screwdriver set. These things are critical. And I would recommend I had a previous screwdriver set. I can get it apart that did not have a box for it. And one of the things I found out is they're literally laying all over the place because I never had one good place to put them. Or they ended up in a bag somewhere in all this joint. So get something you can pop them in and out and it holds them real well. This has straight slots, Phillips. The other thing you want to consider is star tips. There's a number of small devices when you go to take them apart will have the star pattern tips. So you want to take that into consideration as a big component when you're doing this. And then you can get you can get some other small tool kits. This is one I had sitting in my thing over here. And I didn't even know I had it. So it's a good breakout with some basic sockets. Needle nose, some of these different heads, stars, Phillips straight slots, a little bigger size than the small ones that may come in handy. And then also when you start thinking about it kind of wrenches and different things like this, a set of cutters is always good. So you want to have a good assortment of these. And every once in a while I have a tendency to lose these things so I end up buying more sets of them over time. Also, something to consider is a pair of good cutters. Now, I've had wire cutters before small ones like this, but I like these because the tips are way much thicker. These things are actually great and they come in handy for not only cutting wire, but here's an example of a bracelet type thing, a tracker that was hermetically sealed. This came in really handy for cutting through some of the plastic. It's very durable. I've used this for removing shielding that are over components where I need to get access to shielding. So having something can cut through metal and plastic and durable and the tip on this doesn't ship up. So having something like that is pretty critical. The other thing you want to consider is spudges. So what's a spudge? So this one I've managed to lose half the stuff that's in it, but this one has little fiberglass spudges. These are pry tools that you can use for prying things open. These are all fiberglass. Several of them are kind of mangled because they've been beat up pretty heavy. I also have some small metal thin spudges in here and some ones that look like kind of the tip of guitar picks. Those come in handy for popping them in plastic cases and I also bought a kit and this one's been really handy. That is basically metal ones. So you have to be careful with these because they get like seriously hurt you if you're not careful or do some damage to the equipment. But these come in really handy for opening certain cases, removing certain plugs or connectors or things like that. So having a good set of spudges is pretty good. Most of these are fairly inexpensive, $8, $9, $10. You can often get a set of these. I've seen some much bigger, nicer sets that run in the $20, $30 range. But always a good have a set of these. It'll make it very important when you're actually opening stuff up. Now the ultimate tool, what happens when you end up with a case where you can't easily clip it open, you can't easily spudge it open. There's no screws in it. It is like a stick. I've had cases that were actually eighth inch to three eighth inch thick casing that were waterproof. What do you do? So in those cases, what I'd like to do is a good old fashioned Dremel tool. Now you can get these in various prices. This one's probably the last one I got, which is recently new. My last one was cheaper. I think I paid like $35 for like a decade ago. I finally burnt it up and had to go out and buy another one. And since I obviously make more money now, I would have had and bought a better Dremel tool. So if you were actually at the RSA event when we were working in the IoT Village, we had a lot of light bulb type tech that we were playing with. And this is what I used to cut those good old fashioned light bulbs apart that contained the IoT based technology in those. So that's kind of the general hardware type stuff. The next thing we want to get to, and this is the price list, that we want to get to before we jump into some of the other stuff. Before we jump into some other area or start asking questions, I want to talk about some of the soldering type tools or equipment. So there's a number of solutions you can do from a soldering perspective. You can buy soldering irons in all kinds of different prices. Years ago, I used to have like three or four soldering irons. So they were all fixed heat levels or fixed wattage. I think I had one, it was 25. I had one, it was 45. I had one, it was like 75. And I think I had one with clear up to 100. Those worked for me back then. But as you know, technology advanced, you start getting in surface mount devices, it becomes inherently more difficult to use those. They're a little more cumbersome. So I always recommend actually picking one up that is kind of variable heat. So you can change the heat on it. And if I don't smash everything in this lab in the process. This is one you often will see a lot of people have and I've used this as a HACO. And I've used this one for several years, like two or three years. It's variable heat. It worked for most point. And you can get a lot of tips for it. But as I got more, more advanced and more into more detailed type work, my biggest problem with this was heat recovery. So when I went with really fine tips and I was sorting on something that was a ground. The problem I had was this device could not keep the heat level up and would make things harder. And so when you can't keep the heat, the heat recovery is terrible or not really good on a device. It caused you to spend more time on the device, more time on the chip, more time on the leg. And it leads to damage of the components. You can easily end up pulling leads and stuff like that. And keep the actual time on device down. I actually cranked the heat of this thing all the way up high as it would go. And that made it possible for me to work really quick. That kind of works for me. Other people will do other things when they're dealing with this. But then I finally decided I wanted to move on. And I think these are right around 100 bucks. Great product in my opinion for entry level starter. And it works pretty good. Now there are other vendors that produce soldering equipment. And one of the ones I went with, see if you can move some stuff out of the way here, I went with a Weller. So the Weller unit, hopefully you can see it is setting back here. I think this is a WX01 or WX02. It actually has two soldering irons on it. When I purchased it, it came with a single soldering iron. This does, I think, want to say 65, 75 watts somewhere around there. It's pretty good. Works great. This thing is capable of pushing out 150 watts of power. So you can run two irons. I turned around and actually purchased a microiron. So you can see this tip is really fine. I probably can't even see it on the tip of my finger. It's pretty small. This is actually brilliant. Works really good. The difference is this is a very expensive unit. I think the retail on this was like $1,200. You can get it on sale and shop around. You can probably get it down around 800 or less. So that's kind of where we want to think about soldering gear. You want to be able to have some good soldering gear that'll actually do what you want to do. You want to be able to deal with surface mount devices, small components, large components, neat, good heat recovery. A good starting unit is the HECO. You can also get smaller range wellers. That'll work pretty good. So I would shop around and ask other people that have different equipment, what they use. You'll find out a lot of people use the HECO. But you'll find a lot of people are fans of weller or some of the other products. So I definitely encourage you when you get ready to go out there, if that works for you, HECO works for you, get it, use it. I used it for like two and a half years and I loved it. Had no problems other than the heat recovery issue. So where do we go from there? So the next area I want to talk about, now let's go ahead and start off with asking some questions. So Jonathan, are there any questions out there? Yes. So it looks like right off the bat here. We've been talking a lot about like sharp tools and hot ends on the solder iron, things like that. One question that came up was what kind of safety equipment do you keep on hand with your lab? And do they include things such as maybe like goggles, first aid kit, fire extinguisher? So I don't have a first aid kit. Well, I do have a first aid kit. It's my wife. She knows how to use 911. Hopefully she won't have to do that. But for safety equipment, there's some other things to think about. Obviously, when you're soldering, you don't want to have breathe all of the nasty smoke. That's a health and safety issue. So I would recommend a fan. So here's actually a fan that you can purchase that happens to be on a articulated arm. So this works pretty good. The other thing I have in my actual lab, it's not within the picture range. But let me see if I can pull it off here is a is a good old fashioned fire extinguisher. So and I also have safety goggles and safety gear associated with that. So I would definitely recommend that if you set up a lab where you're going to be using hot equipment, inshore equipment or whatever the case may be, you want to be able to put out any fires that may actually show up. Luckily, I've never had to actually use this fire extinguisher. And speaking on that same thing, it becomes in handy when you start thinking about soldering to gear, this particular sorting gear here, if you go away from it after a period of time, it shuts off, which is nice. The HECO does not. So are there any other questions or you want to move on from here? Let me see here, taking a look at the list. I think we're okay to move on. Okay, good. So let's go ahead and jump into the next thing. And that is kind of magnification. So what kind of gear is available for actually magnifying or looking at things? I have a number of things that I use. One of them happens to be these goggles. So they have adjustable eyepieces on them. You can turn a light on. This is good for close up looking. So you have to hold the item up close. So you can't really do any soldering with that, but that comes in handy for quick examination of devices. One of the other things I have in here, I haven't used it in a while, but I used to use it quite a bit. And that is a pin camera. This is a USB pin camera that I can shine into things. It goes into smaller places, works pretty good. I also have a, actually a borescope, an endoscope that can actually be put through small holes and you can actually see stuff. That one's kind of packed away right now. The other equipment that I have is, and you may have seen this, if you've been to the IOT village where Rapid 7 is working. This is a device that comes in pretty handy. Small bench camera with a screen. You can actually magnify it, has variable settings on it. You can focus it. You can also hook a USB up to it and feed it into a TV. In this particular case, I went ahead and actually covered this with rubber. The purpose of the rubber in this case is to protect it. So I can actually put energized equipment on here and look at it also. So some of the other equipment I have is, this is another USB microscope and there's so many on the market. You know, which one's better than another one? Gosh, you know, that was kind of a hard one. You can spend anywhere from 20 or 30 bucks up to $300 or $400 for one of these. I've seen these that would go clear to $5,000 X, which was absolutely amazing. You could actually see the runs on a silicon chip with it. So it was kind of amazing. But that's, again, a very high end. So, but when we get into something bigger, something you want to solder under, this is the more expensive solution right here, which is a microscope. This is great microscope that I have this one does everything from 3x I believe all the way up to 90x has ability mounted camera on it. It's variable focal length. And you can actually slide it in and out, which makes it really handy for this type of work for magnification and and I do a lot of surface mount device work underneath this. I've used this for reball and BGA's and stuff like that. But this is an expensive unit and they vary in price based on whether you go up to the higher caliber. This, like I said, this is 90x. It's about a $600 unit. But if we kind of kind of move away from that and go, what can somebody who's entry level or right above entry level looking for a good scope, here's one I use for a number of years. And I loved it. So this here is also an amp scope. This one will do 10 to 20 X power. It is a fixed focal length. This device cost about $185. It is a brilliant piece of equipment. I have several these that I use in various training that I've done in the past. And I would recommend if you're looking for a scope and you don't have the big money, look at something like that. Look at amp scopes and look at what they have to offer from a price point. And I think this model here was 185 and it worked like a champ. Again, I use it for a number of years. But then I kind of got greedy and wanted something that's like super ass cool. So I would have had and bought this for work in my lab. So what else can we dig into here? I think some of the most important thing we want to talk about in the area of soldering is to look at some of the other components that you may need for action soldering. And when you get into soldering, it's kind of critical. You want to be able to, you want to have typical solder. So go ahead and switch out the screen so we can actually dig into some of this stuff a little closer, then we'll pop back to the other screen. Because we can actually show this stuff a little better here. So here from the solder standpoint, there's a number of different brands out there. This particular brand is six one half dozen another. But I would get the small stuff this one here happens to be the point three millimeters. I use lead solder. I hate lead free solder. Some people may like it. I think it's horrible to work with. So I think this works much better in every case that I've ever worked with. And you also want to get solder wick solder wick comes in really handy for removing and cleaning solder off the board. But when you're thinking about actually removing solder, and you want to dig in and remove surface mount devices, the ultimate solution for moving surface mount devices in my opinion, easily is this product right here. If you have not used this chip quick surface mount the Maurice removal kit, you're missing out. This will make life much easier. It comes with a flux. So you put the flux on it and then it comes this looks like solder. This is not solder. It's way more brittle. It's a low temperature metal. And what it'll do is it'll absorb the solder and it'll keep the temperature down low. So let's say you're actually trying to move a T sop 48 which is a 48 pin typical memory chip that is soldered down with 48 pens. It's kind of hard to keep 48 pins melted. But with this stuff, once you put it on there, you can easily spread it across each one of the leads, gump it on there pretty good, and it'll stay melted and you can lift the chip completely off the device. It's a true life saver. So let's kind of move on. Any questions? Do we have any questions from the audience? Jonathan, any questions from the audience? Looks like the question list is empty here. One quick thing that did come up. You mentioned earlier, you're going to provide a parts list but one high level question. Most of the parts that you've just mentioned now, such as like the chip quick and solder, you generally purchased that going through maybe like spark fun or maybe through Amazon. Again, knowing that you're going to provide the parts list just a high level question. Yeah, typically when I buy this stuff, I'm, I'll be honest with you, everyone, I'm kind of lazy. I'm an Amazon kind of guy. I can usually turn stuff around and a lot of times Amazon has stuff available quicker. So if Amazon has it available within 24 hours to 48 hours, I'm going to pay that little extra and have that sent to me quickly. But yet, you know, you can go off and buy this stuff from a number of vendors, a number of organizations that sell these type of products, hacker groups, hacker organizations, technology organizations, Ali Express, for a lot of the stuff you're going to see today, you can easily just order it and have it straight ships from China. But again, I have a tendency to be a little lazy and when I want it, I like want it now. I don't want to wait a week for it. Because if I think I need it, I need it now. And that's usually how I go with Amazon. So you'll see a lot of the links on here going off to Amazon or Weller or some of the other places for equipment manufacturers and buying it that way. Okay, so let's kind of, it's kind of move on here. So the next area we want to look at is monitoring equipment. So thinking about monitoring equipment, you know, how do we how do we gain access to circuit boards? And how do we start looking at data? One of the first things is kind of that USB to serial component. And, and I think a lot of people online are probably familiar with these. These are reasonably inexpensive. It's a bus pirate. And this will give you give you that level of access to be able to look at start looking at devices. And the other things, I'm not a big fan of this. I have a tendency to like using this in a different way. There's other software you can actually install on these and actually turn these into debuggers for at mail chips. So if you need to debug or a read date off an at mail chip, you can easily take these and put I think it's SDK 500 v2 software on it. And I showed this last year at at the it village was hands on exercises that actually did that we're using reprogrammed bus pirates. So that's pretty good. The other thing, and I'm a fan of these I have a whole box of these sitting around here. And here's the little chikra. The chikra has a lot of capabilities. And here's kind of the little data sheet. It comes with it. So we have we have the you are we have J tag and you can use open OCD that and you can use SPI for actually reading, reading memory off chips. And this device comes in really handy. I typically use this for you are. And, like I said, I actually love this device quite a bit. And then there's other other things you can do. There's other FTDI devices that can be used. Here's just a couple I have in my lab that I purchased for other purposes and reasons. And then there's another one I have. And this one I bought not too long ago, I guess it's probably about three or four months ago. And this one actually has for you are built into it. So it is a USB, it has four yards and you can switch in between three volts and five volts. So you can either hook them up here or hook them up into the actual projects. This is nice you plug it in and for you are functions show up. This makes it much more easier for hooking into multiple connection points on an actual device for doing you are testing our analysis. People have seen the work that I did on the internship communication. I like to use one of these works out pretty good for capturing multiple you are it's for analysis is data as it flows through a system. And also, let's go ahead and move on to logic analyzers. So I want to point out that Jonathan is actually going to be speaking tomorrow evening. Is it tomorrow evening or tomorrow morning, Jonathan. Yep, tomorrow evening. And he's doing, he's going to do a talk on using logic or logic analyzers. So, there's a lot of different logic and you know, by I think Jonathan has has one of these he's actually going to show you as another one. These are cheap this is like 12 bucks. It does like 242425 megahertz. Another one that I have. This one is a sale. This is their four, four channel one. It's no longer being manufactured. But say they had a whole stinking warehouse full of them. And they're selling these these are more pricey they're 100 bucks but it's a sale high quality. Now what I use is I do have a sale. I have the eight channel, the eight channel. I think this is like $600. This is the, I think it's 100 megahertz eight channel. This one's the actual pro works great for everything I'm doing in the lab and if you're not doing it for a job and you're just a hacker or whatever in your education and your learning, you can actually get an edu kind of version of this which will save you a significant amount of money when it comes to logic analyzers. So, also, some of the things you may you may want to consider earlier you may have seen theoscope and that was in the back of my room. I have an old scope. I use it sometimes for basically signal chasing. But other than that I don't use it that much for most of the tech that I have. But when it when you want one it's nice to have one and they come into a number of price ranges. So, you know, you can get one from, you know, typical ones you can run off your desktop or laptop with a small plug in board, all the way to high end digital built in logic analysis type of stuff in the thousands of dollars. And one I have was a textronics I'm a big fan of textronics since I came from the military. And I think mine was like five or $600 and I believe it was a 15 megahertz box and it works pretty good. So, moving from there. Another area as a hacker that you want to get into is often the RF stuff. You want to start digging into RF. So, one of the big RF areas is often Bluetooth low energy. So, these are the go to Bluetooth dongles. These are CSR 85 10s. These are the ones that will work with pretty much any, any of the Bluetooth developed software out there they have the right chip sets in them. And these only go up to I believe 4.2 version. I don't think they'll support five. I don't think I have anything here actually it supports five right now it's something I need to add to my lab myself. So that's one of them. Another thing is the Nordic. The Nordic makes a dongle that you can use with nrf connect their desktop product. And this happens to be it I think I paid $25 or $35 for this. So, I would recommend having one of these for Bluetooth this has a lot of cool capabilities. And there's a number of development boards and testing boards that are available out there that give you the ability to take what you're doing with Bluetooth to almost any level you want. Another device I have that actually like it's pretty good this is a who long this is about a $100 I think it was this device. I've had it for a couple years. So hopefully they'll come out with a newer version of sports five. But this gives you the ability to and it has to be run on a Windows box gives you the ability to capture Bluetooth. So it'll actually see the the announcements coming out on Bluetooth, and it will actually let you pick one of the devices out of the list of Bluetooth low energy devices. And as soon as it and once you pick it out it will start to output all that stuff to wire shark directly. And then once it'll actually capture the pairing process, and the entire authenticated process. Basically, I don't want to say man in the middle but capturing all of the data and outputting it correctly to wire shark for analysis. I don't want to be one of the best ones out there in our F. There was a used to be an RF sniffer, I think was sniffer that was available. That would run on a desktop. This thing's like way better. This actually has all three BLE channels so it picks up all the data doesn't miss that much data so it makes it a lot much better. I would recommend that. And of course, if you get into some other stuff, having the uber tooth one is probably good. I haven't used this in a while. I heard people complaining that it's really updates on the software follow up work on the software arena hasn't been done, which is kind of sad because I think was a very brilliant, capable tool but hopefully they'll continue supporting that and we'll see some new capabilities in the future. So that's a reference to that. Moving from that, typically, I don't have a ton of things. I think here we have a yardstick, which is under under the gigahertz range, capturing. And then, of course, and I know I have land around here somewhere, which I have no idea where it's laying at. I'm like terrible my lab. I have a hacker RF that may come in handy for some people that really want to do the work dealing with RF communication. So I'd recommend buying what you can afford, you know, finding an area that fascinates you on the hardware hacking area. And to spend as much in that area that you can afford for the best tools. I would recommend shopping around. Some of these tools here may have newer versions. There may be better released products out there. This is constantly a changing field. What I bought a few years ago doesn't necessarily meet the needs now in a lot of cases. I can find myself as I'm doing new projects and new testing that I have to go out and actually buy new equipment and new hardware. It seems to be an unending process. It's kind of like being married in a homeowner. You're always looking for an excuse to buy new tools for around the house. It's the same way as a hardware hacker. You're never going to be content until you have all the all the tools ever made on the face of the earth. But shop wisely and I think you could do pretty good gathering up the needed stuff being able to do the work. So there's one other area before we take a quick break and actually look at or has some questions. Another tool. Let's not forget critical tools. I don't think I'm using a multimeter. Literally I don't think there's ever on any engagement or any testing or any device I tore apart where I was hacking on where I didn't use a multimeter. These are cheap. You don't need an expensive one. Mostly I use this on the continuity field for actually tracing out runs on boards and stuff like that comes in very handy. So I'm just going to go ahead and cover checking voltages prior to hooking stuff up to make sure that I'm matching the voltages correctly because that can really screw things up if you get it wrong. Also moving from there. Let's go ahead and quickly cover the area dealing with debuggers. Matter of fact, let's kind of stop right there. And before we get into chip readers and debuggers and see if there are any questions. Open. Oh good. Yeah, it looks like a couple of couple popped up here. So yeah, I guess the first question we have here is, this is with regards to the physical non RF signal quality that we're speaking of earlier. So you'd mentioned the oscilloscope. And also, I know that you've mentioned that you aren't really going to in depth with it these days because you don't really need it. So I'm curious, or excuse me, the questions asking, I am curious, would your answer to that be the salee does okay for that sort of thing. And would you recommend a salee over an oscilloscope. The answer that is yes. I think my go to is with salee logic analyzer 100% now for almost everything I'm doing almost everything I'm looking at is digital salees come out with the. I'm not sure what was the name of it. I'm losing my mind here. Just second. Oh yeah, their logic logic tool, which is what interacts with the salee. They came out with logic to and the cool thing with logic to it basically, it basically gives so much more features to the actual salee. And one of the features is kind of continued streaming instead of capturing just capturing data, like you often often will do. This will actually let you loop that capture so it continues to run. I've seen myself taking a logic analyzer and using it like a probe, looking for ongoing signals timing signals and stuff like that clock signals that are ongoing burst traffic, because I can easily stop on something and as this thing continues to run see burst traffic. And finally, it gives me a way to do some digital signal tracing maybe it's not the, the most effective way but I think it's the most cost effective way. So definitely would recommend if you're going to spend the money by yourself a good logic analyzer that besides the multi meter or is the item that I inevitably use on every engagement and every testing that I do. So any questions or is that it. That's it. All right, so let's go ahead and let's jump into chip readers. So, hey, you happen to have a device and has a flash memory chip, and you want to be able to get the date off that flash memory chip. So let's do it with. So there's a lot of inexpensive solutions out there. This one here is an actual TL 866 plus. This comes with a slew of sockets that go in for this is like a T sub socket and they get eight pin or 16 pin sockets and then eight pin sockets list goes on and on there's like 30 20 or 30 sockets you actually get with the socket that I purchased. That is actually a, oh gosh, there you go. It's a WSAN WSAN eight sockets. So you drop it in. These are a little more pricey, but the the TL 866 is not that expensive. I think I paid 130 bucks for the one that I have here. Although when you buy this, and it comes with this particular this particular socket this T sop 48 socket. This will not work for all T sop 48 which is typically Nan flash chips. So you need to go out and buy this one to go with it. And you can get these off Ali express or maybe some other sources. And this is the get it right there and oh eight socket. And typically, typically this is the socket that's used on the chips that have literally a larger memory start getting in it. You know, 128 Meg 256 Meg chips and higher. You're actually going to go over to this socket here. That seems to be the case. So that's one of them that I have. Like I said, I have several chip readers. I can't remember the number of this covers. I think it's like seven or 8000 different chips that are actually supported by this. So does it cover every chip that I encounter the answer to that is no. Does it cover a large number of them. Yes, it does. I mean, it probably covers two thirds of them that I come across. One of the other chip readers I have is these are T 809 H. So the RTA 09 H here it is here similar little bigger physical construction. This one comes in handy. You cannot use you can use these sockets so all of the inline sockets that came out of the TL 866 that are straight pinned the pin wiring and don't contain any kind of circuitry. You can use them on this. But if it happens to be the T sop 48 those actually had circuitry built into them. So you have to buy a socket that'll actually work on it. And this is a straight pen for pin one. So I use this one typically as a backup. There's times that the TL 8 TL 866 doesn't work or doesn't have what I'm looking for. So I jump over to this one. It works pretty darn good. Also this one you can get various sockets for here happens to be a socket for it. This was like a $40 socket. This is a BGA. This is a 63 ball BGA. Nan flash memory socket. I think I played 45 and had that shipped over from Ali Express from China. The crazy thing is I ordered it right when this whole covert thing hit this fan. So, so it took like two months to get to me versus the typical 30 days that I often have up wait or shorter time period. So that's one of the readers. So some of the other readers I have in my arsenal here is dealing with embedded multi chip packages and embedded multi, embedded multi, multi meeting controllers. So these you actually find a lot when you deal with in bed at systems and especially some consumer grade IOT. These are actually for reading BJs. This is an embedded. It's a multi media chip for 153 ball BGA. So you open it up. You drop the chip in there. Plug it in. It's USB three plug it into your computer. Hit this button here and that chip will mount up just like a file system. It'll mount up just like an SD card will mount up and it'll actually mount the entire file systems on the device most of the time. And from there you can quickly recover the data. Sometimes you can alter the data. One of the exercises I did I actually use that to pull the data and then use one of these in all data and then did it back to the actual chip and then reball the BGA put it back on the device to gain root level access. So these are great and they come in a number of different sizes. So that's known as a embedded multi chip package type thing. Again, you'll find these in a lot of devices. That means it contains both RAM and flash memory in the actual chip. But these ones are kind of pricey like $135. There is a cheaper version. This is pretty much the same thing but it's done up just like an SD card. So, and then you just plug it in like an SD card into your computer and it'll mount the chip up just like a file system. Now these ones are a little cheaper. I think they're well under $100 like 90 bucks or something like that. Also, if you need to deal with embedded multi chip package are embedded. So, I would recommend multi media chips. I would recommend doing a little googling on that because this example here people have actually built these. So there's ways to build these. Of course, you may have to dead bug the chip, which means you're going to need a good, a good microscope because you end up soldering to the pads of the chip on the underside. There's only like five connections or four connections that have to be made on the chip and you can literally actually read it. So there's a lot of documentation out there. So you can take the hacker mode and save yourself a lot of money. But again, it'll take a lot more time. So, any questions there on chip readers. And again, most of these chip readers were $120 to $140 right around there. One question that came up with regard to the chip readers here that I'm seeing is I miss a little bit of a backfill I do apologize. One question that came up earlier is it is it actually worth picking up an old bench top logic analyzer off eBay, or going with with some of the newer USB tools. Cost is a limiting factor for this individual. You know, I don't know enough about any of the bench top logic analyzer tech that you're talking about. I haven't worked with any of those. I typically most of the stuff I did with is the USB stuff. I mean, if you're looking for logic analyzer just to give it a try. I'll be honest with you, a lot of these when you start getting into these smaller ones 24 mega earth. I have not used this. So obviously it's $12 from a logic analyzer standpoint. This gives you an entry point just to get familiar. And I think the logic programs put out by say, they will actually work on these. And there's a couple other ones and Jonathan's going to talk about this in more detail tomorrow. So I definitely swing by his presentation. I would start off if money's limited. I mean, can you come up with $12 give one of these things to try. I bet you nine times out of 10 on most standard consumer grade IOT. This is going to be fine. I've only run into issues when I'm dealing with commercial level devices where a megahertz rating like this would not have worked. So, just an example. That makes sense. And another backfill question here. Asher says such a great lab Darryl one question. What do you use for on chip debugging other than the sheet drive. Oh, on chip debugging. Yeah, we're actually get into that next. If you want to do on chip debugging, or pulling firmware, all the chips and all that type of stuff. That's the next section that we're going to dive into. Okay, perfect. And I think we'll put a pin on that question because it sounds like it'll be answered next question here reads. What are these readers used for? What are you reading off these chips? Sorry, noob. Thank you. Oh, there's nothing wrong with that man. I mean, we were all learning at one time. Five years ago, I couldn't have told you any of this stuff at all. So, so, so what we're doing is, is these chips I'm talking about are flash memory chips. This is where the embedded devices holds its operating system. It's also where it holds configuration settings and data associated with the functionality that device. So if you want to be able to pull off the firmware for some kind of offline analysis, you want to do some offline debugging with with Ida Pro or something like that, then you need to be able to extract the firmware. So to be able to extract the firmware, you need to gain some level of access. Chip readers come in handy for doing what I consider off board reading. So you de-solder the chip, remove it from the board, drop it into the reader, dump all of the memory out of that chip, and then you solder the chip back on the board. I have a tendency, since I'm fairly good at soldering and de-soldering and stuff like that, that I will often do that. I will literally just pull the chip versus trying to do it in circuit because I found it's sometimes much easier. In some cases, not always, but in a number of cases. The only time it's more difficult is when you're dealing with like a ball grid or a chip, a PGA chip, where the pins are underneath. So when you remove it, the complexity of putting it back on is fairly complex. So hopefully that answers that question. Make sense. And one final question here. Yeah. Zero. It's asking about the flipper zero. Individuals asking, what are your thoughts on the upcoming flipper zero? Is it a great asset or a gimmick Kickstarter problems apply? Flipper zero. I don't think I've seen that. Have you seen that? Have you looked at it? Yeah, it looks super interesting, actually. I'm additionally not familiar with it. Looks super slick. Looks like you can do a lot of hardware analysis with it. I think it looks kind of cool. It's very powerful for sub one gigahertz. From what I'm seeing there, it looks somewhat similar to the yardstick with maybe a few additional features, but it looks pretty slick in my opinion. Yeah, like I mentioned, there is always new tech being developed. So often I don't dig into those unless it happens to be on my table or something I need to work on. And then I go out looking and I try to look for the right tool, the right solution, the one that's going to help me do the job the easiest and the quickest. So hey, great. Thanks for bringing that up. I'll have to look at that once we get offline here. Yeah, and Darryl, we actually had the inventor of the flipper zero present our event back in May. So anyone who's listening, you know, we should check that video out as he goes through all the features and so the story of why he built it. Outstanding Sam. Thank you very much. We'll check that out. So kind of moving on from there. So I want to get into some debugging. There was some area I did miss earlier, and we may jump on it at the end if we have time, but we'll start with debuggers. The first thing I want to look at is not necessarily a debugger but pretty darn close to it. This is fairly pricey about 150 to $170 to j tagulator. I have not used this in a while. So if you don't ask me why I guess I had need to figure out where the J tag connections are in a while. But if you're in a bind and you need to figure out if there's any exposed J tag connectors on a chip that you can identify. This is the tool for doing it. You just plug all these in here you hit reset go. You have some software you can run on this thing. You can use the ability to go through all the same. All of the testing sequences for all the different wiring combinations that you could possibly generate by plugging this thing in and checks for various J tag connections. I don't use it for you are typically that's easy enough to spot with a logic analyzer fairly quickly, but yet a good tool to have in your arsenal. If you're doing a lot of especially if you're doing a lot of debugging devices where you can't identify whether a J tags available. They also added some features to this that will actually go through and do I O testing. So it'll do a series of test information feed and restruct and capture based on identifying the various I O is on a processor. So that's also a great feature. So when it gets into logic or not logic analyzers but debuggers, how can I interact with the chip? How can I interact with the processor? And there's and some of them may be hey how can I pull firmware out of a processor that actually has flash in the processor, which seems to be the thing I often do. I have a whole slew of debuggers I got dozens and probably a dozen of them laying around here somewhere for various things. But there's one that I have that's like go to at least mainly for arm processors. And that's a J link J link Seeger J link is a great product. This is a commercial version. These are kind of pricey based on the speed and the capabilities of the hardware. So the price goes up and up. I think this one was like $600 can easily go upwards of 1000 or more for the solution. But there is hope. If you're interested in the Seeger J link and you are basically a student or somebody learning, you can buy the edu version. When I first started learning and wasn't using it for commercial use, I purchased that it was like $70 has all the similar capabilities. It's its speed of data reads probably not as fast, but it's pretty good. Another thing I do is a habit of mine is I always tape the pin out for all of the pins on some of these devices, because I rarely throw a 20 pin plug in there and use it. I often use single plugs because often we use this for not only for standard J tag, but I use it for sir wire sir wire debug or CJ tag. This will do CJ offset also, which is a subset of J tag that is also like sir wire debug. But so, so if you're like me and you can't memorize all these pins on everything actually doing a print out and stick them in the back is a nice little feature that I use to help speed me along. But again, it's a great product. And for mainly arm processors, I go to on this. But then also I will use various debuggers for different process. So if you TTI TI chips, the CC debugger I can't remember what this was $20 $30 it wasn't that much. It happened to be a case where I was dealing with some TI chips and I'm like, I just buy the thing, put it in my lab I have it. Another one which we demoed last year. And that was dealing with the XDS XDS 110 which is another TI debugger. I really didn't want. And I wanted to expose people to the XDS 110 from a debugging standpoint but I didn't want to buy the full blown one. This is like 110 $120. But it turns out that they made the small development kit type thing for a sensor tag. And the one you buy for that is basically a stripped down model. There's no case, there's some features turned off, but it works the same way. This was like $15 versus $100 and it worked pretty good. And I kind of got this idea, because I bought, I was doing some research on a TI chipset and I for a vendor. And so I bought the development kit and development kit had an XDS built into the chip on the development kit, which got me interested in doing this and that's why I kind of shared that stuff last year and I want people to do the hands on. Now I have a number of debuggers around here but you know a debugger is what it is. It's a debugger. Typically what I do is when I encounter a chip set. The first thing I do is I go out and go okay. If I was a developer on this product line for this chip set. How would I do it. What product would I use. What does a vendor recommend for interacting with their hardware. Their chips and then I go out and check it out. Do they have guidelines for using a J link, then I use a J link. Do they have a specialized debugger like pick processors do which is basically in circle serial programming. It's basically SPI. If that's the case then get those so I have I have several of those laying around here. The pick kits is what they're called. So I try to find out what the developer community uses for a particular product. And if I can afford it and it's inexpensive I buy that or I buy the next. Alter level alternate to actually use and that's typically the approach that I use. I found out if I'm trying to deal with the chip set and I'm using somebody else's debugger. It has a tendency to not always do what I expected to do. It doesn't always give me the information that I get from the development community on the product, or from the vendor on the product. And it adds a level of complication. And I'm able to find way more resources. If I use what the development community uses on that product. But the reality that's not always feasible. There's been a number of times where I've gone hey here's a chip. You go out and you try to find out what the development community is using for and find out it costs $10,000. And you can only buy it from the vendor in cases like that then hey if it's an arm is an arm if it's something else. You know, go go all the way down and use, use one of these and then use open OCD if you have to whatever it takes. But I tend to see have to dive into what the actual person producing uses. I want to move on real quick because we're running a little behind and I want to get this next phase, because I know the. Well, matter of fact, never mind we can do that getting questions. But looks like one question cropped up here. Josh asks, do you happen to have any books, videos or any learning material that you recommend to start learning IOT hacking. Oh gosh. That's kind of a hard one. I've, I'm not a, I'm not a big book person. To be honest, what I typically do is I'm definitely a Google and YouTube kind of guy. And everything that I've wanted to learn, you know, an example, I wanted to learn how to re solder a T sop 48 pen chip back onto a circuit board I'm like, Dan this is going to be hard I can't go solder each pin. So I went on went on YouTube and looked it up and go how do I do this and there's like three or four videos out there and then I watched those videos. And I said, well, I'm going to do it in the same way. If I want to learn how to use you are it I go check out some of the videos on finding you are and looking for you are same way with logic analyzers. And it's a typically the approach that I do and I still do that to this day. I'm working in an engagement or testing a product. And I go, hmm, how do I interact with this. I haven't done this before, because, you know, even though I've been this in four years, I constantly encounter things that I haven't encountered before. I first I go out and find out who else has done this has it been done before has anything similar to it been done before. And that's kind of my approach. If you're trying to, and I know there's a lot of learning kits out there. I'd also recommend, gosh, where is that? I would recommend looking at some inexpensive products just to play around with. And I'm going to throw some pictures up here. And like these, these right here, Vix me 300 millimeter router type things. That's one of these things out here. Well, that's one thing about my lab. It's like a ton of gear. So this one actually uses it's a little router device. So we have these chips on here. So it has a lot of things you can interact with. There's ethernet. There's usb. It actually has you are. So you are it's actually marked on here if you look there's it says TX and RX and then I found the ground. This runs open WRT. It actually has a flash memory chip right here. So here's a chance to figure out how to get the memory out of the device. Here's a chance to play with this in this case here. ROOT doesn't have a password on it. So in that case there you really soon as you get the console it's going to be root level access but you can change that and then try to get around it. This device is like 20 bucks. And I would recommend getting something like this and starting out by just going hey this is a meta tech chip. What does that mean? This is a ram chip. Find the data sheets. This is a flash memory chip. Find the data sheets. Read those data sheets and kind of learn and play around and experiment. And if you screw it up, throw it in the trash can and go spend another 20 bucks. Hopefully that answered the question. Okay, here's another one but I don't think the GL Mango is even available anymore but it's the same product just relabeled different. Another question cropped up here was, I think it's kind of an extension of that question. Do you have any go to YouTube channels. Do you follow anyone on social media? Oh gosh. Yeah, from social media I am a Twitter guy. So you can find me on Twitter. My handles percent P E R C ENT underscore X. Yeah, please follow me. If you're one it tweets a lot of political stuff. There's nothing wrong with that. I just not a big fan of that just to be aware of it. I want to see mostly technical stuff. So if you're doing technical stuff out there. That's kind of cool. I'll probably follow you back. But yeah, that's one thing I do. I do not follow any YouTube channels. I'm usually all over the map whatever I'm working on at that time. And I need to learn something specific then I go out and search and I never look at one single example if there's a dozen examples out there. I'll usually look at three or four of them and get three or four different few points on how to approach something or how somebody's done that. And then experiment with my own ways and own methods and try to build from that. We've also at rabbit seven I put out a number of blogs. So if you use my name, Daryl Highland and search for a rapid seven blogs. I think we put out a whole series last year actually pulling firmware from microcontrollers like four of them covering four different type of microcontrollers. For different software packages for different debug type devices. So, every once in a while, I'll do that type of stuff too. Okay, so I want to move on to odds and ends. This is kind of a big one. So, when you're doing work on devices it comes down to often needing a lot of strange stuff. Now the first one is wire. I don't know how good the video is out there but this is 40 gauge wire. And to be absolutely correct about this, I hate this shit. But this stuff comes in handy for soldering into microscopic small circuits for tapping into them. So, currently I'm working on a project right now where I have to tap into an Intel i3 processor. I'm trying to. And the only way to do it is the pads are like point three millimeters. So I am actually using this under a microscope and soldering it up. And at the end of this thing here I'll show you what I attach it to when I'm done, which will be a lifesaver. So that comes in handy. If I'm doing something else is bigger from a wire standpoint, I use this wire wrap wire. I don't even a VT corporation. And I found this it comes in all of these distance strands. This is covered with a really fine plastic coating. That 40 gauge wire earlier was covered with lacquer, real thing code of lacquer. Keep it from short now. This stuff will melt that's on the outside of this. But when you're looking for like 30 gauge wire, you need to find wire wrap. If you buy standard 30 gauge wire, the actual insulation going around the wire will be thicker than the wire itself and will get in the way when trying to solder to small circuit pads to tap into it. The other thing is, you know, when you open up a device you start thinking about headers you need to attach headers. And this become a nightmare over the years or at least early on when I first started, because I was seeing all kinds of stuff. I went out and tried to get samples of both 2.54 millimeter headers. So this can be plugged into the board and soldered in and then you just plug into it for the places there are headers. What if there happens to be dual header. So then I bought some dual headers to have those I have boxes of these things laying around. So on top of that what happens if it's a surface mount header for 2.5 more millimeter. So if you look at this it actually has see how the bottom is sticking out there. It's actually gall winged. So there you go. And then we do the same thing for 1.27 millimeters single, single row. Double row. And these are the most common and trust me there's people that produce other headers that you want to kill them when you get them because these things won't fit in a gall wing one. So yeah I went out and kind of purchased all of this stuff. Over time I didn't do it in one day. It's like hey I need headers there 1.27 I need gall wing headers and then went out and bought them. The other thing that is a lifesaver. And that is glue. And it comes in really handy because when you're attaching small wires to a board, and you snag the wire you pull the wire you could easily rip the pad clear off the board, which will happen to you anyways but this will help prevent it. This glue here works like a champ. So here is. Here's some 30 gauge wire that I've attached to this device here. And you can see. Hold on a second I'm looking for a poker here. So right here you can see this is glue. So I put a dab of glue on there and it holds the wires and it prevents me from tearing the pads out from this circuitry. It works like a champ. If you need to move the glue, it peels right off takes a little force but it'll peel off clean off the circuit board is actually brilliant. For what you need to do. Some of the other things that we're going to need you're going to need wire. So these are jump wires you can get these male to male female to female and they just peel off. So I have bundles of these and when I'm done using one, I throw it away because if you keep plugging it in plugging it in plugging it in after by the end of the day it'll start weakening to the point where it will give you problems you keep trying to use it. There's nothing worse than losing three or four hours trying to figure out why something is working find out your plug is just four out so I usually get bundles of these. And then you'll find them scattered all over the floor because I just throw them on the floor when I'm done. I'd also recommend breakout boards, quick breakout boards are for quick for doing various projects and stuff like that. And that's kind of a sweet. And then let me see. Oh, gosh, here's here's some stuff I bought on a project a while back. I ran into a project where I need us bees. So, literally without and bought usb breakouts. So you can buy these little kits for like five, six bucks. Okay, and it gives you the ability to do usb breakouts, so that you can solder up connections on these things and be able to tap into various usb's kind of the reason why I needed that it turned out that the device. That I pulled apart. That was an industrial device and it had as a solid state drive in it the solid state drive wasn't a a a t a it was basically usb. And it was kind of a weird wire out wire out structure. So from here I was able to jump it out the way I wanted it to to fit usb properly. And was able to use that to tap into the actual device and effectively be able to read the data off of it pretty effectively. So that worked pretty good. Here's some. These are a little expensive but they've come in handy a few times these are micrograbbers. And they go, I can use them on a logic analyzer or some other kind of testing equipment I have a set of these that I've put together. I think these were like 20 bucks a piece but they have a point five millimeter pitch comes in handy for small stuff. And then the big item, I think this is really critical. This is a test board. I built these. And I would recommend building test boards to meet your particular needs in the projects you're working on. It'll come in to be very vital to actually be able to do it. So if we look at this from this test board we have two sides of this. So we can take the wire and we can hook into here. These are screw terminals. So you can screw the wire in here and instantly you have two headers to put test equipment on. This one over here is similar. This one has jumpers in the middle. This one's isolated with a switch. And these are isolated with jumpers. So once you attach the jumpers or throw the switch, you get connections all the way across. So if it's turned on, then I basically get four headers I can tap into. This also makes it possible and where I've done interchip communication testing where I actually come off the circuit board here. I route through here and I go back to the circuit board and then I cut the runs on the circuit board making all the traffic flow through this and it gives me the ability to turn on and off the flow on a circuit board for analysis and ability to hook multiple pieces of test equipment up for analysis. And again, I built these. Get these boards. You can see where they're broke right here so that they require a switch or a jumper to do them. And these come in extremely handy. I've built four or five different ones, but having these screw terminals are a lifesaver for connecting up things. So I'd recommend building some of your own jigs and test equipment. Any questions? It looks like a high level question kind of cropped up here. This was with regard earlier to when you're speaking towards like the FTDI devices. The question is, what software do you use in order to start talking to these devices and again this is with regard when you're talking about the chicro those types of hardware devices. So if you're using the chicro, if you're using JTAG, then you're obviously going to use like OpenOCD is probably one of the best ones that you're actually going to use is OpenOCD for it. When it comes to UART, there are so many console programs out there. It's literally kind of hard to say which one is the best one. I have a tendency to use, gosh, cool term, and I use it on my Mac. If you're on a Linux system, I would just use screen for interacting with a USB UART connector as an example. For the logic analyzers, the manufacturers produce software called Logic, say like does. There's the older version and there's Logic 2, which is pretty good. So for standard UARTs, again, there's tons of programs out there. Find the one that works best for you. And or if you're on a Linux box, just use screen. Screen has the ability to interact with TTY USB 0, TTY USB 2, 1, ever how many UARTs you have connected up and also set the associated bald rate right within screen. When you get into logic analyzers, like J-Link, J-Link produces its own, not logic analyzer, I'm sorry, debuggers. J-Link produces its own software, same way with CCD bug. Also, individual manufacturers of certain chips will produce their own software to interact with their chips over J-Link. Nordic is one of them. Nordic produces software to connect to their NRF 51-52 series chips. They can get it as a command line or you can get it as with a user interface type thing and it actually will leverage the J-Link. So a lot of the manufacturers will also produce custom software to interact with their chip using no standard logic analyzers or debuggers that are available out there. Any other questions? That is it. All right.
 in the lab, and we're going to be covering everything from kind of the basic level to the advanced level.  When this thing's all with, I'm going to be jumping on IoT Village Discord, where you'll be able to ask me more questions.  I also, everything we're going to talk about is show today. I actually have a price list.  It's kind of an Amazon type price list showing a lot of, well, not just Amazon, but various places that you can buy this stuff.  That'll give you an idea. Of course, if you shop around, you'll be able to get some of this stuff cheaper.  So let's go ahead and talk about what our agenda is today.  So we've broken this up into a number of categories. Disassembly and assembly of hardware tools for taking things apart.  Soldering, desoldering, equipment, a magnification, which may come in handy if you have that perfect eyesight, more power to you.  But for some of us that may not have great eyesight or getting a little older, magnification plays a big role into  how we can actually see things and do soldering at surface mount level type technology.  We're going to be looking at monitoring devices and technology, debugging tools.  And then I'm going to cover probably one of the most important ones. It's the odds and ends, the pieces in the parts that make your life way much easier in a lab.  And awfully, the pieces and parts build within your lab as you kind of work through the various aspects of testing things.  You go, hey, if I bought this little item here, this header, this plug, this switch, it would make my life easier.  So you start building up a good ensemble of those types of techs.  We're going to be talking about those at the end also, which I think is very important.  But let's go ahead and jump out over to a screen and let's go ahead and get a camera going in here and see how this works.  Oh, that's kind of interesting.  I control. There we go. That's much better.  So let me get out of the way of the camera so you all can see me. So,  again, this is kind of my lab and we wanted to start off with looking at tools to take things apart to start with a screwdriver set.  These things are critical.  And I would recommend I had a previous screwdriver set.  I can get it apart that did not have a box for it. And one of the things I found out is they're literally laying all over the place because I never had one good place to put them.  Or they ended up in a bag somewhere in all this joint.  So get something you can pop them in and out and it holds them real well.  This has straight slots, Phillips.  The other thing you want to consider is star tips.  There's a number of small devices when you go to take them apart will have the star pattern tips.  So you want to take that into consideration as a big component when you're doing this.  And then you can get you can get some other small tool kits. This is one I had sitting in my thing over here.  And I didn't even know I had it. So it's a good breakout with some basic sockets.  Needle nose, some of these different heads, stars, Phillips straight slots, a little bigger size than the small ones that may come in handy.  And then also when you start thinking about it kind of wrenches and different things like this, a set of cutters is always good.  So you want to have a good assortment of these.  And every once in a while I have a tendency to lose these things so I end up buying more sets of them over time.  Also, something to consider is a pair of good cutters.  Now, I've had wire cutters before small ones like this, but I like these because the tips are way much thicker.  These things are actually great and they come in handy for not only cutting wire, but here's an example of a bracelet type thing, a tracker that was hermetically sealed.  This came in really handy for cutting through some of the plastic.  It's very durable. I've used this for removing shielding that are over components where I need to get access to shielding.  So having something can cut through metal and plastic and durable and the tip on this doesn't ship up.  So having something like that is pretty critical.  The other thing you want to consider is spudges.  So what's a spudge?  So this one I've managed to lose half the stuff that's in it, but this one has little fiberglass spudges.  These are pry tools that you can use for prying things open.  These are all fiberglass. Several of them are kind of mangled because they've been beat up pretty heavy.  I also have some small metal thin spudges in here and some ones that look like kind of the tip of guitar picks.  Those come in handy for popping them in plastic cases and I also bought a kit and this one's been really handy.  That is basically metal ones.  So you have to be careful with these because they get like seriously hurt you if you're not careful or do some damage to the equipment.  But these come in really handy for opening certain cases, removing certain plugs or connectors or things like that.  So having a good set of spudges is pretty good.  Most of these are fairly inexpensive, $8, $9, $10.  You can often get a set of these. I've seen some much bigger, nicer sets that run in the $20, $30 range.  But always a good have a set of these. It'll make it very important when you're actually opening stuff up.  Now the ultimate tool, what happens when you end up with a case where you can't easily clip it open, you can't easily spudge it open.  There's no screws in it. It is like a stick.  I've had cases that were actually eighth inch to three eighth inch thick casing that were waterproof.  What do you do? So in those cases, what I'd like to do is a good old fashioned Dremel tool.  Now you can get these in various prices. This one's probably the last one I got, which is recently new.  My last one was cheaper. I think I paid like $35 for like a decade ago.  I finally burnt it up and had to go out and buy another one. And since I obviously make more money now, I would have had and bought a better Dremel tool.  So if you were actually at the RSA event when we were working in the IoT Village, we had a lot of light bulb type tech that we were playing with.  And this is what I used to cut those good old fashioned light bulbs apart that contained the IoT based technology in those.  So that's kind of the general hardware type stuff. The next thing we want to get to, and this is the price list, that we want to get to before we jump into some of the other stuff.  Before we jump into some other area or start asking questions, I want to talk about some of the soldering type tools or equipment.  So there's a number of solutions you can do from a soldering perspective.  You can buy soldering irons in all kinds of different prices.  Years ago, I used to have like three or four soldering irons.  So they were all fixed heat levels or fixed wattage. I think I had one, it was 25. I had one, it was 45. I had one, it was like 75.  And I think I had one with clear up to 100.  Those worked for me back then. But as you know, technology advanced, you start getting in surface mount devices, it becomes inherently more difficult to use those.  They're a little more cumbersome. So I always recommend actually picking one up that is kind of variable heat.  So you can change the heat on it. And if I don't smash everything in this lab in the process.  This is one you often will see a lot of people have and I've used this as a HACO.  And I've used this one for several years, like two or three years.  It's variable heat. It worked for most point. And you can get a lot of tips for it.  But as I got more, more advanced and more into more detailed type work, my biggest problem with this was heat recovery.  So when I went with really fine tips and I was sorting on something that was a ground.  The problem I had was this device could not keep the heat level up and would make things harder.  And so when you can't keep the heat, the heat recovery is terrible or not really good on a device.  It caused you to spend more time on the device, more time on the chip, more time on the leg.  And it leads to damage of the components. You can easily end up pulling leads and stuff like that.  And keep the actual time on device down. I actually cranked the heat of this thing all the way up high as it would go.  And that made it possible for me to work really quick. That kind of works for me.  Other people will do other things when they're dealing with this.  But then I finally decided I wanted to move on. And I think these are right around 100 bucks.  Great product in my opinion for entry level starter. And it works pretty good.  Now there are other vendors that produce soldering equipment.  And one of the ones I went with, see if you can move some stuff out of the way here, I went with a Weller.  So the Weller unit, hopefully you can see it is setting back here. I think this is a WX01 or WX02.  It actually has two soldering irons on it. When I purchased it, it came with a single soldering iron.  This does, I think, want to say 65, 75 watts somewhere around there. It's pretty good. Works great.  This thing is capable of pushing out 150 watts of power. So you can run two irons.  I turned around and actually purchased a microiron. So you can see this tip is really fine.  I probably can't even see it on the tip of my finger. It's pretty small.  This is actually brilliant. Works really good.  The difference is this is a very expensive unit. I think the retail on this was like $1,200.  You can get it on sale and shop around. You can probably get it down around 800 or less.  So that's kind of where we want to think about soldering gear.  You want to be able to have some good soldering gear that'll actually do what you want to do.  You want to be able to deal with surface mount devices, small components, large components, neat, good heat recovery.  A good starting unit is the HECO. You can also get smaller range wellers. That'll work pretty good.  So I would shop around and ask other people that have different equipment, what they use.  You'll find out a lot of people use the HECO.  But you'll find a lot of people are fans of weller or some of the other products.  So I definitely encourage you when you get ready to go out there, if that works for you, HECO works for you, get it, use it.  I used it for like two and a half years and I loved it. Had no problems other than the heat recovery issue.  So where do we go from there?  So the next area I want to talk about, now let's go ahead and start off with asking some questions.  So Jonathan, are there any questions out there?  Yes. So it looks like right off the bat here.  We've been talking a lot about like sharp tools and hot ends on the solder iron, things like that.  One question that came up was what kind of safety equipment do you keep on hand with your lab?  And do they include things such as maybe like goggles, first aid kit, fire extinguisher?  So I don't have a first aid kit. Well, I do have a first aid kit. It's my wife.  She knows how to use 911. Hopefully she won't have to do that.  But for safety equipment, there's some other things to think about.  Obviously, when you're soldering, you don't want to have breathe all of the nasty smoke.  That's a health and safety issue.  So I would recommend a fan. So here's actually a fan that you can purchase that happens to be on a articulated arm.  So this works pretty good. The other thing I have in my actual lab, it's not within the picture range.  But let me see if I can pull it off here is a is a good old fashioned fire extinguisher.  So and I also have safety goggles and safety gear associated with that.  So I would definitely recommend that if you set up a lab where you're going to be using hot equipment,  inshore equipment or whatever the case may be, you want to be able to put out any fires that may actually show up.  Luckily, I've never had to actually use this fire extinguisher.  And speaking on that same thing, it becomes in handy when you start thinking about  soldering to gear, this particular sorting gear here, if you go away from it after a period of time, it shuts off, which is nice.  The HECO does not. So are there any other questions or you want to move on from here?  Let me see here, taking a look at the list. I think we're okay to move on.  Okay, good. So let's go ahead and jump into the next thing. And that is kind of magnification.  So what kind of gear is available for actually magnifying or looking at things?  I have a number of things that I use. One of them happens to be these goggles.  So they have adjustable eyepieces on them. You can turn a light on. This is good for close up looking.  So you have to hold the item up close. So you can't really do any soldering with that, but that comes in handy for quick examination of devices.  One of the other things I have in here, I haven't used it in a while, but I used to use it quite a bit.  And that is a pin camera. This is a USB pin camera that I can shine into things. It goes into smaller places, works pretty good.  I also have a, actually a borescope, an endoscope that can actually be put through small holes and you can actually see stuff.  That one's kind of packed away right now. The other equipment that I have is, and you may have seen this, if you've been to the IOT village where Rapid 7 is working.  This is a device that comes in pretty handy.  Small bench camera with a screen. You can actually magnify it, has variable settings on it. You can focus it.  You can also hook a USB up to it and feed it into a TV. In this particular case, I went ahead and actually covered this with rubber.  The purpose of the rubber in this case is to protect it. So I can actually put energized equipment on here and look at it also.  So some of the other equipment I have is, this is another USB microscope and there's so many on the market.  You know, which one's better than another one? Gosh, you know, that was kind of a hard one. You can spend anywhere from 20 or 30 bucks up to $300 or $400 for one of these.  I've seen these that would go clear to $5,000 X, which was absolutely amazing. You could actually see the runs on a silicon chip with it.  So it was kind of amazing. But that's, again, a very high end.  So, but when we get into something bigger, something you want to solder under, this is the more expensive solution right here, which is a microscope.  This is great microscope that I have this one does everything from 3x I believe all the way up to 90x has ability mounted camera on it.  It's variable focal length.  And you can actually slide it in and out, which makes it really handy for this type of work for magnification and and I do a lot of surface mount device work underneath this.  I've used this for reball and BGA's and stuff like that. But this is an expensive unit and they vary in price based on whether you go up to the higher caliber.  This, like I said, this is 90x. It's about a $600 unit.  But if we kind of kind of move away from that and go, what can somebody who's entry level or right above entry level looking for a good scope, here's one I use for a number of years.  And I loved it. So this here is also an amp scope.  This one will do 10 to 20 X power.  It is a fixed focal length. This device cost about $185. It is a brilliant piece of equipment.  I have several these that I use in various training that I've done in the past.  And I would recommend if you're looking for a scope and you don't have the big money, look at something like that. Look at amp scopes and look at what they have to offer from a price point.  And I think this model here was 185 and it worked like a champ. Again, I use it for a number of years.  But then I kind of got greedy and wanted something that's like super ass cool. So I would have had and bought this for work in my lab.  So what else can we dig into here? I think some of the most important thing we want to talk about in the area of soldering is to look at some of the other components that you may need for action soldering.  And when you get into soldering, it's kind of critical. You want to be able to, you want to have typical solder.  So go ahead and switch out the screen so we can actually dig into some of this stuff a little closer, then we'll pop back to the other screen.  Because we can actually show this stuff a little better here.  So here from the solder standpoint, there's a number of different brands out there. This particular brand is six one half dozen another.  But I would get the small stuff this one here happens to be the point three millimeters.  I use lead solder. I hate lead free solder. Some people may like it. I think it's horrible to work with.  So I think this works much better in every case that I've ever worked with. And you also want to get solder wick solder wick comes in really handy for removing and cleaning solder off the board.  But when you're thinking about actually removing solder, and you want to dig in and remove surface mount devices, the ultimate solution for moving surface mount devices in my opinion, easily is this product right here.  If you have not used this chip quick surface mount the Maurice removal kit, you're missing out. This will make life much easier.  It comes with a flux. So you put the flux on it and then it comes this looks like solder. This is not solder. It's way more brittle.  It's a low temperature metal. And what it'll do is it'll absorb the solder and it'll keep the temperature down low.  So let's say you're actually trying to move a T sop 48 which is a 48 pin typical memory chip that is soldered down with 48 pens.  It's kind of hard to keep 48 pins melted. But with this stuff, once you put it on there, you can easily spread it across each one of the leads, gump it on there pretty good, and it'll stay melted and you can lift the chip completely off the device.  It's a true life saver. So let's kind of move on. Any questions? Do we have any questions from the audience?  Jonathan, any questions from the audience?  Looks like the question list is empty here. One quick thing that did come up. You mentioned earlier, you're going to provide a parts list but one high level question.  Most of the parts that you've just mentioned now, such as like the chip quick and solder, you generally purchased that going through maybe like spark fun or maybe through Amazon.  Again, knowing that you're going to provide the parts list just a high level question.  Yeah, typically when I buy this stuff, I'm, I'll be honest with you, everyone, I'm kind of lazy. I'm an Amazon kind of guy. I can usually turn stuff around and a lot of times Amazon has stuff available quicker.  So if Amazon has it available within 24 hours to 48 hours, I'm going to pay that little extra and have that sent to me quickly. But yet, you know, you can go off and buy this stuff from a number of vendors, a number of organizations that sell these type of products,  hacker groups, hacker organizations, technology organizations, Ali Express, for a lot of the stuff you're going to see today, you can easily just order it and have it straight ships from China.  But again, I have a tendency to be a little lazy and when I want it, I like want it now. I don't want to wait a week for it.  Because if I think I need it, I need it now. And that's usually how I go with Amazon. So you'll see a lot of the links on here going off to Amazon or Weller or some of the other places for equipment manufacturers and buying it that way.  Okay, so let's kind of, it's kind of move on here. So the next area we want to look at is monitoring equipment.  So thinking about monitoring equipment, you know, how do we how do we gain access to circuit boards? And how do we start looking at data? One of the first things is kind of that USB to serial component.  And, and I think a lot of people online are probably familiar with these. These are reasonably inexpensive. It's a bus pirate.  And this will give you give you that level of access to be able to look at start looking at devices.  And the other things, I'm not a big fan of this. I have a tendency to like using this in a different way.  There's other software you can actually install on these and actually turn these into debuggers for at mail chips. So if you need to debug or a read date off an at mail chip, you can easily take these and put I think it's SDK 500 v2 software on it.  And I showed this last year at at the it village was hands on exercises that actually did that we're using reprogrammed bus pirates. So that's pretty good.  The other thing, and I'm a fan of these I have a whole box of these sitting around here.  And here's the little chikra. The chikra has a lot of capabilities. And here's kind of the little data sheet. It comes with it. So we have we have the you are we have J tag and you can use open OCD that and you can use SPI for actually reading,  reading memory off chips.  And this device comes in really handy. I typically use this for you are.  And, like I said, I actually love this device quite a bit. And then there's other other things you can do. There's other FTDI devices that can be used. Here's just a couple I have in my lab that I purchased for other purposes and reasons.  And then there's another one I have.  And this one I bought not too long ago, I guess it's probably about three or four months ago. And this one actually has for you are built into it.  So it is a USB, it has four yards and you can switch in between three volts and five volts. So you can either hook them up here or hook them up into the actual projects.  This is nice you plug it in and for you are functions show up. This makes it much more easier for hooking into multiple connection points on an actual device for doing you are testing our analysis.  People have seen the work that I did on the internship communication. I like to use one of these works out pretty good for capturing multiple you are it's for analysis is data as it flows through a system.  And also, let's go ahead and move on to logic analyzers. So I want to point out that Jonathan is actually going to be speaking tomorrow evening.  Is it tomorrow evening or tomorrow morning, Jonathan.  Yep, tomorrow evening.  And he's doing, he's going to do a talk on using logic or logic analyzers.  So, there's a lot of different logic and you know, by I think Jonathan has has one of these he's actually going to show you as another one.  These are cheap this is like 12 bucks. It does like 242425 megahertz.  Another one that I have. This one is a sale. This is their four, four channel one.  It's no longer being manufactured. But say they had a whole stinking warehouse full of them.  And they're selling these these are more pricey they're 100 bucks but it's a sale high quality.  Now what I use is I do have a sale. I have the eight channel, the eight channel.  I think this is like $600. This is the, I think it's 100 megahertz eight channel. This one's the actual pro works great for everything I'm doing in the lab and if you're not doing it for  a job and you're just a hacker or whatever in your education and your learning, you can actually get an edu kind of version of this which will save you a significant amount of money when it comes to logic analyzers.  So, also, some of the things you may you may want to consider earlier you may have seen theoscope and that was in the back of my room. I have an old scope. I use it sometimes for basically signal chasing.  But other than that I don't use it that much for most of the tech that I have. But when it when you want one it's nice to have one and they come into a number of price ranges.  So, you know, you can get one from, you know, typical ones you can run off your desktop or laptop with a small plug in board, all the way to high end digital built in logic analysis type of stuff in the thousands of dollars.  And one I have was a textronics I'm a big fan of textronics since I came from the military. And I think mine was like five or $600 and I believe it was a 15 megahertz box and it works pretty good. So, moving from there.  Another area as a hacker that you want to get into is often the RF stuff. You want to start digging into RF. So, one of the big RF areas is often Bluetooth low energy.  So, these are the go to Bluetooth dongles. These are CSR 85 10s. These are the ones that will work with pretty much any, any of the Bluetooth developed software out there they have the right chip sets in them.  And these only go up to I believe 4.2 version. I don't think they'll support five. I don't think I have anything here actually it supports five right now it's something I need to add to my lab myself.  So that's one of them. Another thing is the Nordic. The Nordic makes a dongle that you can use with nrf connect their desktop product.  And this happens to be it I think I paid $25 or $35 for this. So, I would recommend having one of these for Bluetooth this has a lot of cool capabilities.  And there's a number of development boards and testing boards that are available out there that give you the ability to take what you're doing with Bluetooth to almost any level you want.  Another device I have that actually like it's pretty good this is a who long this is about a $100 I think it was this device.  I've had it for a couple years. So hopefully they'll come out with a newer version of sports five.  But this gives you the ability to and it has to be run on a Windows box gives you the ability to capture Bluetooth. So it'll actually see the the announcements coming out on Bluetooth, and it will actually let you pick one of the devices out of the list of Bluetooth low energy devices.  And as soon as it and once you pick it out it will start to output all that stuff to wire shark directly. And then once it'll actually capture the pairing process, and the entire authenticated process.  Basically, I don't want to say man in the middle but capturing all of the data and outputting it correctly to wire shark for analysis.  I don't want to be one of the best ones out there in our F. There was a used to be an RF sniffer, I think was sniffer that was available.  That would run on a desktop. This thing's like way better. This actually has all three BLE channels so it picks up all the data doesn't miss that much data so it makes it a lot much better.  I would recommend that. And of course, if you get into some other stuff, having the uber tooth one is probably good. I haven't used this in a while.  I heard people complaining that it's really updates on the software follow up work on the software arena hasn't been done, which is kind of sad because I think was a very brilliant, capable tool but hopefully they'll continue supporting that and we'll see some new capabilities  in the future. So that's a reference to that. Moving from that, typically, I don't have a ton of things. I think here we have a yardstick, which is under under the gigahertz range, capturing.  And then, of course, and I know I have land around here somewhere, which I have no idea where it's laying at. I'm like terrible my lab.  I have a hacker RF that may come in handy for some people that really want to do the work dealing with RF communication.  So I'd recommend buying what you can afford, you know, finding an area that fascinates you on the hardware hacking area.  And to spend as much in that area that you can afford for the best tools. I would recommend shopping around. Some of these tools here may have newer versions.  There may be better released products out there. This is constantly a changing field. What I bought a few years ago doesn't necessarily meet the needs now in a lot of cases.  I can find myself as I'm doing new projects and new testing that I have to go out and actually buy new equipment and new hardware. It seems to be an unending process.  It's kind of like being married in a homeowner. You're always looking for an excuse to buy new tools for around the house.  It's the same way as a hardware hacker. You're never going to be content until you have all the all the tools ever made on the face of the earth.  But shop wisely and I think you could do pretty good gathering up the needed stuff being able to do the work.  So there's one other area before we take a quick break and actually look at or has some questions. Another tool. Let's not forget critical tools.  I don't think I'm using a multimeter. Literally I don't think there's ever on any engagement or any testing or any device I tore apart where I was hacking on where I didn't use a multimeter.  These are cheap. You don't need an expensive one. Mostly I use this on the continuity field for actually tracing out runs on boards and stuff like that comes in very handy.  So I'm just going to go ahead and cover checking voltages prior to hooking stuff up to make sure that I'm matching the voltages correctly because that can really screw things up if you get it wrong.  Also moving from there. Let's go ahead and quickly cover the area dealing with debuggers.  Matter of fact, let's kind of stop right there. And before we get into chip readers and debuggers and see if there are any questions.  Open. Oh good.  Yeah, it looks like a couple of couple popped up here.  So yeah, I guess the first question we have here is, this is with regards to the physical non RF signal quality that we're speaking of earlier.  So you'd mentioned the oscilloscope.  And also, I know that you've mentioned that you aren't really going to in depth with it these days because you don't really need it.  So I'm curious, or excuse me, the questions asking, I am curious, would your answer to that be the salee does okay for that sort of thing. And would you recommend a salee over an oscilloscope.  The answer that is yes. I think my go to is with salee logic analyzer 100% now for almost everything I'm doing almost everything I'm looking at is digital salees come out with the.  I'm not sure what was the name of it. I'm losing my mind here. Just second. Oh yeah, their logic logic tool, which is what interacts with the salee. They came out with logic to and the cool thing with logic to it basically, it basically gives so much more features to the actual  salee. And one of the features is kind of continued streaming instead of capturing just capturing data, like you often often will do. This will actually let you loop that capture so it continues to run.  I've seen myself taking a logic analyzer and using it like a probe, looking for ongoing signals timing signals and stuff like that clock signals that are ongoing burst traffic, because I can easily stop on something and as this thing continues to run see burst traffic.  And finally, it gives me a way to do some digital signal tracing maybe it's not the, the most effective way but I think it's the most cost effective way. So definitely would recommend if you're going to spend the money by yourself a good logic analyzer that besides the  multi meter or is the item that I inevitably use on every engagement and every testing that I do.  So any questions or is that it. That's it.  All right, so let's go ahead and let's jump into chip readers. So, hey, you happen to have a device and has a flash memory chip, and you want to be able to get the date off that flash memory chip.  So let's do it with. So there's a lot of inexpensive solutions out there. This one here is an actual TL 866 plus.  This comes with a slew of sockets that go in for this is like a T sub socket and they get eight pin or 16 pin sockets and then eight pin sockets list goes on and on there's like 30 20 or 30  sockets you actually get with the socket that I purchased. That is actually a, oh gosh, there you go. It's a WSAN WSAN eight sockets. So you drop it in. These are a little more pricey, but the the TL 866 is not that expensive.  I think I paid 130 bucks for the one that I have here.  Although when you buy this, and it comes with this particular this particular socket this T sop 48 socket. This will not work for all T sop 48 which is typically Nan flash chips.  So you need to go out and buy this one to go with it. And you can get these off Ali express or maybe some other sources. And this is the get it right there and oh eight socket.  And typically, typically this is the socket that's used on the chips that have literally a larger memory start getting in it. You know, 128 Meg 256 Meg chips and higher.  You're actually going to go over to this socket here. That seems to be the case.  So that's one of them that I have. Like I said, I have several chip readers. I can't remember the number of this covers. I think it's like seven or 8000 different chips that are actually supported by this.  So does it cover every chip that I encounter the answer to that is no. Does it cover a large number of them. Yes, it does. I mean, it probably covers two thirds of them that I come across.  One of the other chip readers I have is these are T 809 H.  So the RTA 09 H here it is here similar little bigger physical construction.  This one comes in handy. You cannot use you can use these sockets so all of the inline sockets that came out of the TL 866 that are straight pinned the pin wiring and don't contain any kind of circuitry.  You can use them on this. But if it happens to be the T sop 48 those actually had circuitry built into them. So you have to buy a socket that'll actually work on it.  And this is a straight pen for pin one.  So I use this one typically as a backup. There's times that the TL 8 TL 866 doesn't work or doesn't have what I'm looking for. So I jump over to this one. It works pretty darn good.  Also this one you can get various sockets for here happens to be a socket for it. This was like a $40 socket. This is a BGA. This is a 63 ball BGA.  Nan flash memory socket. I think I played 45 and had that shipped over from Ali Express from China.  The crazy thing is I ordered it right when this whole covert thing hit this fan.  So, so it took like two months to get to me versus the typical 30 days that I often have up wait or shorter time period.  So that's one of the readers. So some of the other readers I have in my arsenal here is dealing with embedded multi chip packages and embedded multi, embedded multi, multi meeting controllers.  So these you actually find a lot when you deal with in bed at systems and especially some consumer grade IOT.  These are actually for reading BJs. This is an embedded.  It's a multi media chip for 153 ball BGA. So you open it up. You drop the chip in there. Plug it in. It's USB three plug it into your computer.  Hit this button here and that chip will mount up just like a file system. It'll mount up just like an SD card will mount up and it'll actually mount the entire file systems on the device most of the time.  And from there you can quickly recover the data. Sometimes you can alter the data.  One of the exercises I did I actually use that to pull the data and then use one of these in all data and then did it back to the actual chip and then reball the BGA put it back on the device to gain root level access.  So these are great and they come in a number of different sizes. So that's known as a embedded multi chip package type thing. Again, you'll find these in a lot of devices.  That means it contains both RAM and flash memory in the actual chip.  But these ones are kind of pricey like $135. There is a cheaper version. This is pretty much the same thing but it's done up just like an SD card.  So, and then you just plug it in like an SD card into your computer and it'll mount the chip up just like a file system.  Now these ones are a little cheaper. I think they're well under $100 like 90 bucks or something like that.  Also, if you need to deal with embedded multi chip package are embedded.  So, I would recommend multi media chips. I would recommend doing a little googling on that because this example here people have actually built these.  So there's ways to build these. Of course, you may have to dead bug the chip, which means you're going to need a good, a good microscope because you end up soldering to the pads of the chip on the underside.  There's only like five connections or four connections that have to be made on the chip and you can literally actually read it. So there's a lot of documentation out there.  So you can take the hacker mode and save yourself a lot of money. But again, it'll take a lot more time.  So, any questions there on chip readers. And again, most of these chip readers were $120 to $140 right around there.  One question that came up with regard to the chip readers here that I'm seeing is I miss a little bit of a backfill I do apologize. One question that came up earlier is it is it actually worth picking up an old bench top logic analyzer off eBay, or going with with some of the newer  USB tools.  Cost is a limiting factor for this individual.  You know, I don't know enough about any of the bench top logic analyzer tech that you're talking about. I haven't worked with any of those.  I typically most of the stuff I did with is the USB stuff. I mean, if you're looking for logic analyzer just to give it a try.  I'll be honest with you, a lot of these when you start getting into these smaller ones 24 mega earth. I have not used this.  So obviously it's $12 from a logic analyzer standpoint. This gives you an entry point just to get familiar. And I think the logic programs put out by say, they will actually work on these.  And there's a couple other ones and Jonathan's going to talk about this in more detail tomorrow. So I definitely swing by his presentation.  I would start off if money's limited. I mean, can you come up with $12 give one of these things to try. I bet you nine times out of 10 on most standard consumer grade IOT. This is going to be fine.  I've only run into issues when I'm dealing with commercial level devices where a megahertz rating like this would not have worked.  So, just an example.  That makes sense. And another backfill question here. Asher says such a great lab Darryl one question. What do you use for on chip debugging other than the sheet drive.  Oh, on chip debugging. Yeah, we're actually get into that next.  If you want to do on chip debugging, or pulling firmware, all the chips and all that type of stuff. That's the next section that we're going to dive into.  Okay, perfect. And I think we'll put a pin on that question because it sounds like it'll be answered next question here reads.  What are these readers used for? What are you reading off these chips? Sorry, noob. Thank you.  Oh, there's nothing wrong with that man. I mean, we were all learning at one time.  Five years ago, I couldn't have told you any of this stuff at all. So, so, so what we're doing is, is these chips I'm talking about are flash memory chips.  This is where the embedded devices holds its operating system. It's also where it holds configuration settings and data associated with the functionality that device.  So if you want to be able to pull off the firmware for some kind of offline analysis, you want to do some offline debugging with with Ida Pro or something like that, then you need to be able to extract the firmware.  So to be able to extract the firmware, you need to gain some level of access. Chip readers come in handy for doing what I consider off board reading.  So you de-solder the chip, remove it from the board, drop it into the reader, dump all of the memory out of that chip, and then you solder the chip back on the board.  I have a tendency, since I'm fairly good at soldering and de-soldering and stuff like that, that I will often do that. I will literally just pull the chip versus trying to do it in circuit because I found it's sometimes much easier.  In some cases, not always, but in a number of cases. The only time it's more difficult is when you're dealing with like a ball grid or a chip, a PGA chip, where the pins are underneath.  So when you remove it, the complexity of putting it back on is fairly complex. So hopefully that answers that question.  Make sense. And one final question here. Yeah.  Zero. It's asking about the flipper zero. Individuals asking, what are your thoughts on the upcoming flipper zero? Is it a great asset or a gimmick Kickstarter problems apply?  Flipper zero. I don't think I've seen that. Have you seen that? Have you looked at it?  Yeah, it looks super interesting, actually. I'm additionally not familiar with it. Looks super slick. Looks like you can do a lot of hardware analysis with it.  I think it looks kind of cool. It's very powerful for sub one gigahertz. From what I'm seeing there, it looks somewhat similar to the yardstick with maybe a few additional features, but it looks pretty slick in my opinion.  Yeah, like I mentioned, there is always new tech being developed. So often I don't dig into those unless it happens to be on my table or something I need to work on.  And then I go out looking and I try to look for the right tool, the right solution, the one that's going to help me do the job the easiest and the quickest.  So hey, great. Thanks for bringing that up. I'll have to look at that once we get offline here.  Yeah, and Darryl, we actually had the inventor of the flipper zero present our event back in May. So anyone who's listening, you know, we should check that video out as he goes through all the features and so the story of why he built it.  Outstanding Sam. Thank you very much. We'll check that out.  So kind of moving on from there. So I want to get into some debugging.  There was some area I did miss earlier, and we may jump on it at the end if we have time, but we'll start with debuggers.  The first thing I want to look at is not necessarily a debugger but pretty darn close to it.  This is fairly pricey about 150 to $170 to j tagulator.  I have not used this in a while.  So if you don't ask me why I guess I had need to figure out where the J tag connections are in a while. But if you're in a bind and you need to figure out if there's any exposed J tag connectors on a chip that you can identify.  This is the tool for doing it. You just plug all these in here you hit reset go. You have some software you can run on this thing.  You can use the ability to go through all the same.  All of the testing sequences for all the different wiring combinations that you could possibly generate by plugging this thing in and checks for various J tag connections.  I don't use it for you are typically that's easy enough to spot with a logic analyzer fairly quickly, but yet a good tool to have in your arsenal.  If you're doing a lot of especially if you're doing a lot of debugging devices where you can't identify whether a J tags available.  They also added some features to this that will actually go through and do I O testing. So it'll do a series of test information feed and restruct and capture based on identifying the various I O is on a processor.  So that's also a great feature.  So when it gets into logic or not logic analyzers but debuggers, how can I interact with the chip? How can I interact with the processor?  And there's and some of them may be hey how can I pull firmware out of a processor that actually has flash in the processor, which seems to be the thing I often do.  I have a whole slew of debuggers I got dozens and probably a dozen of them laying around here somewhere for various things.  But there's one that I have that's like go to at least mainly for arm processors. And that's a J link J link Seeger J link is a great product.  This is a commercial version. These are kind of pricey based on the speed and the capabilities of the hardware.  So the price goes up and up. I think this one was like $600 can easily go upwards of 1000 or more for the solution.  But there is hope. If you're interested in the Seeger J link and you are basically a student or somebody learning, you can buy the edu version.  When I first started learning and wasn't using it for commercial use, I purchased that it was like $70 has all the similar capabilities. It's its speed of data reads probably not as fast, but it's pretty good.  Another thing I do is a habit of mine is I always tape the pin out for all of the pins on some of these devices, because I rarely throw a 20 pin plug in there and use it.  I often use single plugs because often we use this for not only for standard J tag, but I use it for sir wire sir wire debug or CJ tag. This will do CJ offset also, which is a subset of J tag that is also like sir wire debug.  But so, so if you're like me and you can't memorize all these pins on everything actually doing a print out and stick them in the back is a nice little feature that I use to help speed me along.  But again, it's a great product.  And for mainly arm processors, I go to on this. But then also I will use various debuggers for different process. So if you TTI TI chips, the CC debugger I can't remember what this was $20 $30 it wasn't that much.  It happened to be a case where I was dealing with some TI chips and I'm like, I just buy the thing, put it in my lab I have it. Another one which we demoed last year. And that was dealing with the XDS XDS 110 which is another TI debugger.  I really didn't want. And I wanted to expose people to the XDS 110 from a debugging standpoint but I didn't want to buy the full blown one. This is like 110 $120.  But it turns out that they made the small development kit type thing for a sensor tag. And the one you buy for that is basically a stripped down model. There's no case, there's some features turned off, but it works the same way.  This was like $15 versus $100 and it worked pretty good. And I kind of got this idea, because I bought, I was doing some research on a TI chipset and I for a vendor. And so I bought the development kit and development kit had an XDS built into the chip on the development kit, which got me interested in doing this and that's why I kind of shared that stuff last year and  I want people to do the hands on. Now I have a number of debuggers around here but you know a debugger is what it is. It's a debugger. Typically what I do is when I encounter a chip set.  The first thing I do is I go out and go okay. If I was a developer on this product line for this chip set. How would I do it. What product would I use. What does a vendor recommend for interacting with their hardware.  Their chips and then I go out and check it out. Do they have guidelines for using a J link, then I use a J link. Do they have a specialized debugger like pick processors do which is basically in circle serial programming.  It's basically SPI.  If that's the case then get those so I have I have several of those laying around here. The pick kits is what they're called.  So I try to find out what the developer community uses for a particular product. And if I can afford it and it's inexpensive I buy that or I buy the next.  Alter level alternate to actually use and that's typically the approach that I use. I found out if I'm trying to deal with the chip set and I'm using somebody else's debugger.  It has a tendency to not always do what I expected to do. It doesn't always give me the information that I get from the development community on the product, or from the vendor on the product.  And it adds a level of complication. And I'm able to find way more resources. If I use what the development community uses on that product.  But the reality that's not always feasible. There's been a number of times where I've gone hey here's a chip. You go out and you try to find out what the development community is using for and find out it costs $10,000.  And you can only buy it from the vendor in cases like that then hey if it's an arm is an arm if it's something else.  You know, go go all the way down and use, use one of these and then use open OCD if you have to whatever it takes. But I tend to see have to dive into what the actual person producing uses.  I want to move on real quick because we're running a little behind and I want to get this next phase, because I know the.  Well, matter of fact, never mind we can do that getting questions.  But looks like one question cropped up here.  Josh asks, do you happen to have any books, videos or any learning material that you recommend to start learning IOT hacking.  Oh gosh.  That's kind of a hard one.  I've, I'm not a, I'm not a big book person. To be honest, what I typically do is I'm definitely a Google and YouTube kind of guy.  And everything that I've wanted to learn, you know, an example, I wanted to learn how to re solder a T sop 48 pen chip back onto a circuit board I'm like, Dan this is going to be hard I can't go solder each pin.  So I went on went on YouTube and looked it up and go how do I do this and there's like three or four videos out there and then I watched those videos.  And I said, well, I'm going to do it in the same way. If I want to learn how to use you are it I go check out some of the videos on finding you are and looking for you are same way with logic analyzers.  And it's a typically the approach that I do and I still do that to this day.  I'm working in an engagement or testing a product. And I go, hmm, how do I interact with this. I haven't done this before, because, you know, even though I've been this in four years, I constantly encounter things that I haven't encountered before.  I first I go out and find out who else has done this has it been done before has anything similar to it been done before.  And that's kind of my approach. If you're trying to, and I know there's a lot of learning kits out there.  I'd also recommend, gosh, where is that?  I would recommend looking at some inexpensive products just to play around with. And I'm going to throw some pictures up here.  And like these, these right here, Vix me 300 millimeter router type things. That's one of these things out here.  Well, that's one thing about my lab. It's like a ton of gear. So this one actually uses it's a little router device. So we have these chips on here.  So it has a lot of things you can interact with. There's ethernet.  There's usb.  It actually has you are.  So you are it's actually marked on here if you look there's it says TX and RX and then I found the ground.  This runs open WRT.  It actually has a flash memory chip right here. So here's a chance to figure out how to get the memory out of the device.  Here's a chance to play with this in this case here.  ROOT doesn't have a password on it. So in that case there you really soon as you get the console it's going to be root level access but you can change that and then try to get around it.  This device is like 20 bucks.  And I would recommend getting something like this and starting out by just going hey this is a meta tech chip.  What does that mean?  This is a ram chip. Find the data sheets. This is a flash memory chip. Find the data sheets.  Read those data sheets and kind of learn and play around and experiment.  And if you screw it up, throw it in the trash can and go spend another 20 bucks.  Hopefully that answered the question. Okay, here's another one but I don't think the GL Mango is even available anymore but it's the same product just relabeled different.  Another question cropped up here was, I think it's kind of an extension of that question. Do you have any go to YouTube channels. Do you follow anyone on social media?  Oh gosh. Yeah, from social media I am a Twitter guy. So you can find me on Twitter. My handles percent P E R C ENT underscore X.  Yeah, please follow me.  If you're one it tweets a lot of political stuff. There's nothing wrong with that. I just not a big fan of that just to be aware of it.  I want to see mostly technical stuff. So if you're doing technical stuff out there.  That's kind of cool. I'll probably follow you back. But yeah, that's one thing I do. I do not follow any YouTube channels.  I'm usually all over the map whatever I'm working on at that time.  And I need to learn something specific then I go out and search and I never look at one single example if there's a dozen examples out there. I'll usually look at three or four of them and get three or four different few points on how to approach something or how somebody's done that.  And then experiment with my own ways and own methods and try to build from that.  We've also at rabbit seven I put out a number of blogs.  So if you use my name, Daryl Highland and search for a rapid seven blogs.  I think we put out a whole series last year actually pulling firmware from microcontrollers like four of them covering four different type of microcontrollers.  For different software packages for different debug type devices.  So, every once in a while, I'll do that type of stuff too.  Okay, so I want to move on to odds and ends. This is kind of a big one.  So, when you're doing work on devices it comes down to often needing a lot of strange stuff.  Now the first one is wire.  I don't know how good the video is out there but this is 40 gauge wire.  And to be absolutely correct about this, I hate this shit.  But this stuff comes in handy for soldering into microscopic small circuits for tapping into them.  So, currently I'm working on a project right now where I have to tap into an Intel i3 processor.  I'm trying to.  And the only way to do it is the pads are like point three millimeters. So I am actually using this under a microscope and soldering it up.  And at the end of this thing here I'll show you what I attach it to when I'm done, which will be a lifesaver.  So that comes in handy. If I'm doing something else is bigger from a wire standpoint, I use this wire wrap wire.  I don't even a VT corporation. And I found this it comes in all of these distance strands. This is covered with a really fine plastic coating.  That 40 gauge wire earlier was covered with lacquer, real thing code of lacquer. Keep it from short now.  This stuff will melt that's on the outside of this.  But when you're looking for like 30 gauge wire, you need to find wire wrap.  If you buy standard 30 gauge wire, the actual insulation going around the wire will be thicker than the wire itself and will get in the way when trying to solder to small circuit pads to tap into it.  The other thing is, you know, when you open up a device you start thinking about headers you need to attach headers.  And this become a nightmare over the years or at least early on when I first started, because I was seeing all kinds of stuff.  I went out and tried to get samples of both 2.54 millimeter headers.  So this can be plugged into the board and soldered in and then you just plug into it for the places there are headers.  What if there happens to be dual header. So then I bought some dual headers to have those I have boxes of these things laying around.  So on top of that what happens if it's a surface mount header for 2.5 more millimeter.  So if you look at this it actually has see how the bottom is sticking out there.  It's actually gall winged. So there you go. And then we do the same thing for 1.27 millimeters single, single row.  Double row. And these are the most common and trust me there's people that produce other headers that you want to kill them when you get them because these things won't fit in a gall wing one.  So yeah I went out and kind of purchased all of this stuff.  Over time I didn't do it in one day. It's like hey I need headers there 1.27 I need gall wing headers and then went out and bought them.  The other thing that is a lifesaver.  And that is glue.  And it comes in really handy because when you're attaching small wires to a board, and you snag the wire you pull the wire you could easily rip the pad clear off the board, which will happen to you anyways but this will help prevent it.  This glue here works like a champ. So here is.  Here's some 30 gauge wire that I've attached to this device here.  And you can see.  Hold on a second I'm looking for a poker here.  So right here you can see this is glue.  So I put a dab of glue on there and it holds the wires and it prevents me from tearing the pads out from this circuitry.  It works like a champ. If you need to move the glue, it peels right off takes a little force but it'll peel off clean off the circuit board is actually brilliant.  For what you need to do.  Some of the other things that we're going to need you're going to need wire.  So these are jump wires you can get these male to male female to female and they just peel off.  So I have bundles of these and when I'm done using one, I throw it away because if you keep plugging it in plugging it in plugging it in after by the end of the day it'll start weakening to the point where it will give you problems you keep trying to use it.  There's nothing worse than losing three or four hours trying to figure out why something is working find out your plug is just four out so I usually get bundles of these.  And then you'll find them scattered all over the floor because I just throw them on the floor when I'm done.  I'd also recommend breakout boards, quick breakout boards are for quick for doing various projects and stuff like that. And that's kind of a sweet.  And then let me see.  Oh, gosh, here's here's some stuff I bought on a project a while back. I ran into a project where I need us bees.  So, literally without and bought usb breakouts. So you can buy these little kits for like five, six bucks.  Okay, and it gives you the ability to do usb breakouts, so that you can solder up connections on these things and be able to tap into various usb's kind of the reason why I needed that it turned out that the device.  That I pulled apart. That was an industrial device and it had as a solid state drive in it the solid state drive wasn't a a a t a it was basically usb.  And it was kind of a weird wire out wire out structure. So from here I was able to jump it out the way I wanted it to to fit usb properly.  And was able to use that to tap into the actual device and effectively be able to read the data off of it pretty effectively. So that worked pretty good.  Here's some.  These are a little expensive but they've come in handy a few times these are micrograbbers.  And they go, I can use them on a logic analyzer or some other kind of testing equipment I have a set of these that I've put together.  I think these were like 20 bucks a piece but they have a point five millimeter pitch comes in handy for small stuff.  And then the big item, I think this is really critical.  This is a test board. I built these.  And I would recommend building test boards to meet your particular needs in the projects you're working on.  It'll come in to be very vital to actually be able to do it. So if we look at this from this test board we have two sides of this.  So we can take the wire and we can hook into here. These are screw terminals.  So you can screw the wire in here and instantly you have two headers to put test equipment on.  This one over here is similar. This one has jumpers in the middle. This one's isolated with a switch.  And these are isolated with jumpers. So once you attach the jumpers or throw the switch, you get connections all the way across.  So if it's turned on, then I basically get four headers I can tap into.  This also makes it possible and where I've done interchip communication testing where I actually come off the circuit board here.  I route through here and I go back to the circuit board and then I cut the runs on the circuit board making all the traffic flow through this and it gives me the ability to turn on and off the flow on a circuit board for analysis and ability to hook multiple pieces of test equipment up for analysis.  And again, I built these. Get these boards. You can see where they're broke right here so that they require a switch or a jumper to do them.  And these come in extremely handy. I've built four or five different ones, but having these screw terminals are a lifesaver for connecting up things.  So I'd recommend building some of your own jigs and test equipment.  Any questions?  It looks like a high level question kind of cropped up here. This was with regard earlier to when you're speaking towards like the FTDI devices.  The question is, what software do you use in order to start talking to these devices and again this is with regard when you're talking about the chicro those types of hardware devices.  So if you're using the chicro, if you're using JTAG, then you're obviously going to use like OpenOCD is probably one of the best ones that you're actually going to use is OpenOCD for it.  When it comes to UART, there are so many console programs out there.  It's literally kind of hard to say which one is the best one. I have a tendency to use, gosh, cool term, and I use it on my Mac.  If you're on a Linux system, I would just use screen for interacting with a USB UART connector as an example.  For the logic analyzers, the manufacturers produce software called Logic, say like does. There's the older version and there's Logic 2, which is pretty good.  So for standard UARTs, again, there's tons of programs out there. Find the one that works best for you.  And or if you're on a Linux box, just use screen. Screen has the ability to interact with TTY USB 0, TTY USB 2, 1, ever how many UARTs you have connected up and also set the associated bald rate right within screen.  When you get into logic analyzers, like J-Link, J-Link produces its own, not logic analyzer, I'm sorry, debuggers. J-Link produces its own software, same way with CCD bug.  Also, individual manufacturers of certain chips will produce their own software to interact with their chips over J-Link. Nordic is one of them.  Nordic produces software to connect to their NRF 51-52 series chips. They can get it as a command line or you can get it as with a user interface type thing and it actually will leverage the J-Link.  So a lot of the manufacturers will also produce custom software to interact with their chip using no standard logic analyzers or debuggers that are available out there.  Any other questions?  That is it.  All right.
DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_0_2591.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_2592_2711.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_2712_2771.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_2772_10691.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_10692_19199.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_19200_27107.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_27108_27359.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_27360_27407.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_27408_27899.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_27900_28055.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_28056_28247.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_28248_28823.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_28824_34307.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_34308_35663.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_35664_37115.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_37116_38975.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_38976_39659.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_39660_43235.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_43236_43295.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_43296_43475.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_43476_44411.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_44412_44483.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_44484_44615.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_44616_45623.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_45624_45731.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_45732_45911.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_45912_45971.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_45972_46283.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_46284_46859.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_46860_48767.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_48768_49787.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_49788_56579.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_56580_57947.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_57948_58559.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_58560_59303.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_59304_60215.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_60216_60455.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_60456_61751.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_61752_62015.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_62016_62075.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_62076_62495.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_62496_62807.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_62808_63575.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_63576_63719.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_63720_74027.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_74028_78827.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_78828_78875.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_78876_79715.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_79716_79895.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_79896_80231.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_80232_80531.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_80532_81755.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_81756_85187.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_85188_88583.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_88584_89219.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_89220_90479.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_90480_90623.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_90624_94379.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_94380_94451.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_94452_94583.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_94584_95567.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_95568_95699.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_95700_95891.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_95892_96203.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_96204_96479.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_96480_98687.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_98688_99215.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_99216_100799.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_100800_101063.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_101064_101699.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_101700_101927.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_101928_102815.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_102816_103103.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_103104_105779.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_105780_106583.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_106584_107087.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_107088_107255.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_107256_107759.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_107760_110639.png DEF_CON_Safe_Mode_IoT_Village-Deral_Heiland_-_GettingStartedBuildinganIoTHardwareHackingLab_110640_110691.png