JTAG access?

berserko
Posts: 1
Joined: Wed Jan 07, 2015 11:53 am

JTAG access?

Postby berserko » Thu Jan 08, 2015 11:05 am

Has anyone looked at using the JTAG port yet? it looks like the CPU is supported by OpenOCD I'm sure there are a few bricked units out there the could benefit from a JTAG. I'm going to start looking at it in the next couple weeks just curious if anyone has looked that this attack vector yet?

CloneNum3
Site Admin
Posts: 107
Joined: Wed Jan 07, 2015 10:02 am

Re: JTAG access?

Postby CloneNum3 » Thu Jan 08, 2015 8:42 pm

Are you referring to the JTAG SPI Flash SSP3 ? I investigated it quite a bit and ended up with the idea of using a BlackCat SPI flash programmer (of which I actually have already) or seeing if the xbox 360 SPI programmer could be used for reading&writing the wink flash. I think it should work in theory but I am not sure how I would go about determining the pinout between the BlackCat and the Wink Flash JTAG. I believe the flash chip is a 128MB Spansion S34ML01G100TF100 which is pretty well documented. Someone more knowledgeable than me in nand flash programming could probable fill in some blanks and make this happen.

translucent1
Posts: 1
Joined: Wed Aug 26, 2015 12:40 am

Re: JTAG access?

Postby translucent1 » Wed Aug 26, 2015 12:46 am

I know this post is old, but I reverse engineered the CPU JTAG pinout:
http://jalderman.org/?p=318

I used this to dump a NAND image and root my hub.

CloneNum3
Site Admin
Posts: 107
Joined: Wed Jan 07, 2015 10:02 am

Re: JTAG access?

Postby CloneNum3 » Tue Oct 06, 2015 10:13 am

translucent1 wrote:I know this post is old, but I reverse engineered the CPU JTAG pinout:
http://jalderman.org/?p=318

I used this to dump a NAND image and root my hub.


translucent1,

Ok, you impressed me! That's pretty awesome work.

FYI, I made you a site moderator. I encourage you to update us with any further findings! I appreciate your post.

-CloneNum3


Return to “General / Other”

Who is online

Users browsing this forum: No registered users and 1 guest