WHIDBoard Pro
Auditing hardware and embedded devices has a well-earned reputation of being difficult because it is truly full-stack: it requires knowledge and tools across several disciplines: e lectronics, hardware, firmware and software. Often, hardware auditors are defeated not by the device they're testing, but by their own tools: a missing adaptor, inadequate power supplies, out-of-production devices, repetitive manual tasks prone to error, or the almost impossible task of maintaining an up-to-date and stable linux environment. ▰BUILT WITH EXPERTISETRUSTED BY PROFESSIONAL HACKERS▰ The WHIDBoard was born out of necessity by renouned hardware-hacker & educator Luca Bongiorni - as a real-world, all-in-one, reliable solution for offensive hardware pentesting. Its philosophy is to provide everything you need across the full-stack without getting in your way, or forcing you to change your habits work. Here's what it provides: PHYSICAL LAYER: INTERFACE DISCOVERY The WHIDBoard supports multiple onboard logic levels, pin enumeration for automated discovery of interfaces, and an 8-channel logic analyser. PROTOCOL LAYER: COMMUNICATION WHIDBoard is fully integrated into Tsurugi Linux, the leading distro for digital forensics. Every tool for every interface is available, and guaranteed to be stable. FIRMWARE LAYER: EXFIL & ANALYSIS The WHIDBoard provides all necessary tools for exfiltration and analysis: namp, wireshark, ghidra, ZAP Proxy, binwarl, unblob - and many more. SOFTWARE LAYER: EXPLOIT Whatever your goal: device hardening, credential exfiltration, low-level debugging, auditing or forensics, the WHIDBoard provides everything you need. Lab401 is proud to be the official manufacturer and exclusive distributor of the WHIDBoard Pro Kit. The kit includes the WHIDBoard itself, hand-picked accessories and a battle-ready road-case. It's made for the on-the-go hacker, and built to last. WHIDBOARD: HARDWARE HACKING MADE EASY The philosophy of the WHIDBoard is to abstract the difficult parts of hardware hacking - and allow you to to concentrate on hacking your target device. It removes the need to collect dozens of adaptors, gadgets and gizmos; you no longer need to spend hours trying to maintain your linux environment; your days of debugging your debugging tools are over. Check out real-world demonstrations of the WHIDBoard below; over 30 minutes, the tool's creator, Luca Bongiorni walks you through the device, how it works, and real-world examples of device hacking. DISCOVER THE WHIDBOARD It might look like a simple PCB, but the WHIDBoard is no less than 15-tools in one. Check out each feature below: 1. Pin Enumerator Pin Enumeration means that the WHIDBoard figures out what you've got plugged in. Connect suspicious pins, and the WHIDBoard does the rest. 2. Built-in level-shifters Onboard support for all standard power levels: 1.8V, 2.5V, 3.3V and VREF. No more external supplies, no more common ground problems. 3. Interface with everything Native support for UART, SPI, I2C, SWD and JTAG. All of the accessories, clips and cables that you need are included in the WHIDBoard Pro Kit. 1 2 3 4 5 6 4. Fully-supported OS + Tools The WHIDBoard's tools are fully integrated into TSURUGI Linux. Everything you need in an updated, stable environment. No more losing days fighting with package conflicts. 5. On-board Logic Analyser Perform real-time debugging and signal analysis. The on-board 8 channel analyser can be used simultaneously with the other tools for full-stack debugging. 6. Protective Tray Don't kill your hardware: The WHIDBoard comes with a field-case to protect against shorts and mishaps on the desk, and a rock-solid road-case for when you're on the move. DISCOVER THE WHIDBOARD WORKFLOW ADVANTAGE It's hard to emphasise how much the WHIDBoard removes complexity and frustration from the traditional hardware audit workflow. On the physical side, the unification of multiple tools, automatic protocol detection via the pin enumerator, debugging via logic analyser, onboard level-shifting and multi-interface connectors removes hours of setup, iteration and error-prone repetitive manual tasks. On the software side, WHIDBoard's integration into TSURUGI Linux means you've got a perfectly stable work environment that will always be up to date, have everything you need and never break. Want to see the difference between a WHIDBoard analysis and a traditional analysis? We performed identical audits using traditional tools and the WHIDBoard - and the results speak for themselves. The WHIDBoard was 4 times faster saving over 4 hours of real world time. Check out the results below. Optimised With WHIDBoard Physical Layer: PCB Inspection & Datasheet Analysis Inspect PCB PCB exposed and ready for analysis Sub-tasks Open device Expose main PCB Identify major components Key components identified Sub-tasks Find Processor, Microprocessors, Interface Controllers Find datasheets Datasheets located Analyse Datasheet Datasheet analysis complete Identify Interfaces Interfaces mapped Identify Pins Pin configuration documented Protocol Layer Connect to WHIDBoard WHIDBoard connected Sub-tasks Connect first interface to WHIDBoard Enumerator Set Level jumper Run Enumerator Tool Enumerator initialised Configure Settings Settings configured Turn on Target Device Device powered on Check for Confirmed Connection Connection status checked Modify Settings Settings adjusted Connection Established Protocol layer complete ✓ Firmware Layer Connect Device to Dedicated Interface Connector Device connected Run exfiltration software Exfiltration software running Extract Firmware Firmware extracted Sub-tasks Extract credentials Exfiltrate Software Software exfiltrated Sub-tasks Extract credentials Setup tunnels Tunnels configured Establish SSH / Root Root access established Software Layer Connect to Target Device Connected to target Deploy Solution Solution deployed Sub-tasks Patch New Firmware SSH Tunnel Finished Assessment complete ✓ Total Time ~1 hour 42 minutes Traditional Traditional Workflow Physical Layer: PCB Inspection & Datasheet Analysis Inspect PCB PCB exposed and ready for analysis Sub-tasks Open device Expose main PCB Identify major components Key components identified Sub-tasks Find Processor, Microprocessors, Interface Controllers Find datasheets Datasheets located Analyse Datasheet Datasheet analysis complete Identify Interfaces Interfaces mapped Identify Pins Pin configuration documented Protocol Layer Identify Required Power Level Power requirements determined Find / Setup Appropriate Power Supply Power supply configured Identify target protocols Protocols identified Connect adaptor for the test protocol Adaptor connected Connect device pins to adaptor protocol Pins connected Setup the adaptor environment Environment configured Run adaptor software Software executed Check result Result analysed Check wiring Wiring verified Change wiring position Wiring adjusted Repeat until exhausted or result found Iteration complete Connection Established Protocol layer complete ✓ Firmware Layer Connect Device to Dedicated Interface Connector Device connected Setup linux environment Linux environment ready Updated tools Tools updated Sanity check environment Environment verified Run exfiltration software Exfiltration software running Extract Firmware Firmware extracted Sub-tasks Extract credentials Exfiltrate Software Software exfiltrated Sub-tasks Extract credentials Setup tunnels Tunnels configured Establish SSH / Root Root access established Software Layer Connect to Target Device Connected to target Deploy Solution Solution deployed Sub-tasks Patch New Firmware SSH Tunnel Finished Assessment complete ✓ Total Time ~5 hours 43 minutes Time Saved with WHIDBoard ~4 hours 1 minute (70% faster) --> BACKED BY REAL-WORLD TRAINING & CERTIFICATION Unlike piecemeal or homespun solutions, WHIDBoard is a reliable, maintained solution, used by thousands of professionals. Every year, hundreds of people are trained and certified on the WHIDBoard architecture. If you're looking to become a Certified Hardware Hacker, or get hands-on training on hacking real-world hardware, training and certification is available via in-person courses and via online, self-paced curriculums. Lab401 is proud to be the official manufacturer and exclusive distributor of the WHIDBoard Pro Kit. The kit includes the WHIDBoard itself, hand-picked accessories and a battle-ready road-case. It's made for the on-the-go hacker, and built to last. What's included 1x WHIDBoard 1x Protective Case 2x SOIC/SOP8 Flash Clip/Board/Cable (Rev3 + Rev4) 1x SOP16 to DIP 8 Flash Clip/Board/Cable 1x SOP8 & SOP16 to DIP 8 Flash Clip/Board/Cable 1x SOP8/WSON8/QDFN8 Programming Socket 2x Universal IC Clamp + Wires (FtF,FtM) 1x Reinforced ABS Roadcase + Protective Foam Hardware Specifications Pin Enumerator: 24-channel (JTagulator Compatible) Logic Analyser: 8-channel, 24MHz Protocols: UART, SPI, I2C, JTAG, SWD Logic Levels: 1.8V, 2.5V, 3.3V, VREF Supported Protocols: UART, JTAG. SPI, I2C, SWD Connectivity:USB-C Software Specifications Official Distro: TSURUGI Linux Tools: flashrom, OpenOCD, SNANDer, UFPROG, Pulseview, Sigrock, fxload, propoloader, openspin.. Audit & Exfil tools: Nmap, Zenmap, wireshark, ghidra, ZAP Proxy, binwalk, unblob WHIDBoard Resources WHIDBoard Repository WHIDBoard README Tsurugi Linux OS Images WHIDBoard Training Resources Lab401 Academy: The 2024 Hacker's Cookbook: Exploiting IoT Cooking Appliances with WHIDBOARD & The Hidden Dangers of Buying'em Refurbished