how to retrieve firmware from stm32f2xx series

[balu.2019@gmail.com]

Hi Team,
 
           Could you please let me know if there is any process to apply voltage glitch and get the firmware from stm32f2xx series.
           
           FYI, we have followed below link for stm32f1xx series and able to successfully retrieved the firmare. 
           https://www.eevblog.com/forum/reviews/jabe-ud-1200-vs-jabe-ud-1200-pro-vs-jbc-cd-2sqe-need-firmware-for-ud-1200/25/             

           Please let me know if there is any similar process for stm32f2xx.

           Much appreciate your help.

Thanks,
Balu.

[DavidAlfa]

Try:
https://github.com/CTXz/stm32f1-picopwner/

[balu.2019@gmail.com]

Hi David,

We have already tried and its working for F103 series, trying for F2xxx series.
any other process to apply glitch for  F2xxx series, please help

Regards

[darkspr1te]

There are two other attacks for stm i know off
DFU attack where you read back using DFU commands and a USB overflow, works with hardware DFU or software DFU based off STM implementation.
Vector table attack where you read flash then reset to a vector and read that byte.


there is a third attack but I dont think it works on the F2 series and thats the boot from ram attack.


darkspr1te

[balu.2019@gmail.com]

Hi darkspr1te,

Could you please share some details of the below attacks (DFU and vector table) for STM32F2xx series.

Thanks & Regards

[darkspr1te]

I did a sort of write up on both here ,

https://www.eevblog.com/forum/microcontrollers/dumping-stm32-protected-firmware/


darkspr1te