Show Menu

IoT Reversing Field Manual Cheat Sheet by

Quick notes/intro for router debugging and rooting. Including tools, terms, and tactics.

Serial Protocols


UART is a serial protocol used for intere­cting with the system. May return a shell, and or access to the filesy­stem. Seperate from JTAG.

Enumerate Pinout [Multi­meter]
TX - Voltage fluctuates at boot1 from 0 to 3.3/5.5v
RX - Constant low value below VCC and above GND
GND - Voltage is constant 0, has 4 traces in a crosss shape2
VCC - Normally not used to if device already powered, should not fluctaute
1 Fluctu­ation is caused from the debug messages being sent.
2 Testing continuity of GND to other pins, shows other pins that may be grounded

Square outlined pin, normally is "pin 1"


Used for on-chi­p-d­ebu­gging, generally allows for access to a GNU Debugger (GDB) for the JTAG host. Pinout for hidden console may be found with JTAGen­um/­JTA­Gul­ator. Then access GDB with a Bus Pirate or Shikra USB-to­-Serial devices and debug applic­ations using OpenOCD software.

Accessing Serial Consoles

sudo dmesg | grep -iC 5 usb
sudo screen -L /dev/t­tyUSB0 115200

Altern­ati­vely, use the Arduino IDE serial console. Useful when input is off with the screen utility
In the screen command, 115200 is the baud rate of the serial commun­ica­tions

The baud rate can be determined using -

Hardware Physical Tools

Identifies JTAG & UART pinouts.
Identifies JTAG pinouts
Bus Pirate2
FT232RL - USB to Serial, Use SOIC8 Clip to dump firmwarez
FT232H(Q) - USB to Serial
RS-232 Generic Adapter4
USB to Serial
1 JTAGenum Setup Tutorial:
2 Bus Pirate Pinout Inform­ation
3 Shikra Pinout [UART] D0 - TX, D1 - RX
See also, Adafruit FT232H Breakout -
4 Male DB9: GND - Pin 5, TX - Pin 3, RX - Pin 2


No comments yet. Add yours below!

Add a Comment

Your Comment

Please enter your name.

    Please enter your email address

      Please enter your Comment.

          Related Cheat Sheets

          Closed-source Debugging with GDB Cheat Sheet
          Teenage Engineering Pocket Operators Cheat Sheet
          Semiconductor physics Cheat Sheet

          More Cheat Sheets by djf

          Enumeration Cheat Sheet