Author Topic: Help me dump STM32F103VCT6  (Read 1269 times)

0 Members and 1 Guest are viewing this topic.

Offline andyB2022Topic starter

  • Regular Contributor
  • *
  • Posts: 103
  • Country: ro
Help me dump STM32F103VCT6
« on: June 02, 2023, 02:07:27 pm »
Anyone out here that can help me dump the flash out of a STM32F103VCT6 with RDP Level 1?
I can pay you.
 

Offline barshatriplee

  • Regular Contributor
  • *
  • !
  • Posts: 130
  • Country: bd
Re: Help me dump STM32F103VCT6
« Reply #1 on: June 05, 2023, 07:30:56 am »
I don't think it will be legal to do so....
 

Offline radiolistener

  • Super Contributor
  • ***
  • Posts: 3342
  • Country: ua
Re: Help me dump STM32F103VCT6
« Reply #2 on: June 05, 2023, 09:36:35 am »
I think it will be legal if you didn't signed agreement that you will not try to read it, and you didn't stolen device.

But this is not a trivial task. If you want to get memory dump, you're needs to find people who has access to electron microscope. As I know it is possible to reverse protected memory content by using layer-by-layer etching and analysis of charges in each cell of the memory block. But such a task may require several instances of chips with the same content, because it's complicated process and the chip can be easily damaged.

And as I know some chips with extended security may have some measures which make memory content extraction problematic, for example it can have self damage fixtures which triggering when someone trying layer-by-layer etching. Some of security chip can have even internal power source and intrusion detectors which triggers self erase procedure.


Another way is to use current consumption and electormagnetic field detectors in order to analyze what kind of operation happens inside chip to restore code sequence, but this is much more complicated and difficult way. It will be much more cheaper and easy to hire new developers and design a new firmware than reverse existing one in such way.

In any way such memory dump extraction will cost you much more than to pay software engineers to develop a new firmware.  :)
« Last Edit: June 05, 2023, 09:47:41 am by radiolistener »
 

Online wraper

  • Supporter
  • ****
  • Posts: 16833
  • Country: lv
Re: Help me dump STM32F103VCT6
« Reply #3 on: June 05, 2023, 09:50:12 am »
STM32F103 firmware protection can be bypassed by power glitching. So it's not like you necessarily need  advanced equipment.
 

Offline andyB2022Topic starter

  • Regular Contributor
  • *
  • Posts: 103
  • Country: ro
Re: Help me dump STM32F103VCT6
« Reply #4 on: June 05, 2023, 05:12:22 pm »
STM32F103 firmware protection can be bypassed by power glitching. So it's not like you necessarily need  advanced equipment.

Yeah I have seen guys on youtube and GitHub doing it but I dont' have enough konw-how to do it.
 

Online wraper

  • Supporter
  • ****
  • Posts: 16833
  • Country: lv
Re: Help me dump STM32F103VCT6
« Reply #5 on: June 05, 2023, 06:19:29 pm »
In any way such memory dump extraction will cost you much more than to pay software engineers to develop a new firmware.  :)
I've seen numbers like $500-2000 for MCUs like these. Unless firmware is very simple, good luck hiring a software engineer for that.
 

Offline radiolistener

  • Super Contributor
  • ***
  • Posts: 3342
  • Country: ua
Re: Help me dump STM32F103VCT6
« Reply #6 on: June 07, 2023, 01:05:21 am »
STM32F103 firmware protection can be bypassed by power glitching. So it's not like you necessarily need  advanced equipment.

hm, this is very interesting. Does STM32F103RCT6 vulnerable for this? Where I can read about it more details?

It will be nice to get original firmware dump from Chinese device, play with it with custom firwmare and then restore original one back to avoid bricked device :)
« Last Edit: June 07, 2023, 01:13:46 am by radiolistener »
 

Online Psi

  • Super Contributor
  • ***
  • Posts: 9925
  • Country: nz
Re: Help me dump STM32F103VCT6
« Reply #7 on: June 07, 2023, 01:24:41 am »
It will be nice to get original firmware dump from Chinese device, play with it with custom firwmare and then restore original one back to avoid bricked device :)

Removing current MCU and soldering in new blank one seems like a much easier way to achieve that.
Greek letter 'Psi' (not Pounds per Square Inch)
 

Offline mosafet

  • Contributor
  • Posts: 31
  • Country: 00
Re: Help me dump STM32F103VCT6
« Reply #8 on: June 07, 2023, 03:30:42 am »
The F1 series is vulnerable to many different types of attacks.

https://www.eevblog.com/forum/microcontrollers/dumping-stm32-protected-firmware/

You can also probe for vulnerabilities in the firmware itself if it uses any type of external input.
 

Offline andyB2022Topic starter

  • Regular Contributor
  • *
  • Posts: 103
  • Country: ro
Re: Help me dump STM32F103VCT6
« Reply #9 on: June 07, 2023, 08:07:19 am »
You can also probe for vulnerabilities in the firmware itself if it uses any type of external input.

Have you ever done it?
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf