September 2024
Intermediate to advanced
408 pages
7h 29m
English
Let’s take a look at an exploit of mine from Goodspeed (2011), in which the Freescale MC13224 is unlocked by grounding out one of its pins during reset. This requires a custom PCB and a bit of hot air soldering, but it’s very reliable and does not involve any fancy software.
The MC13224 is a system-in-package (SiP) offering a 32-bit TDMI ARM7 CPU, with an 802.15.4 (Zigbee) radio. It has 128kB of SPI flash, 96kB of RAM, and 80kB of ROM implementing the 15.4 MAC functions. This was the chip used in the Defcon 18 Ninja Badge, Wozniak and Creighton (2010). Its selling point is that a 50Ω trace antenna tuned for 2.4GHz is all that you need to add as an antenna chain, with everything else but the crystals included ...
Read now
Unlock full access