README.md

Arduino NANO (or UNO) Glitching

Here we'll glitch (do an Electromagnetic Fault Injection, EMFI) against Arduino boards as they did in Riscure Hardware CTF 2016, Fiesta. Please see all theory from this excelent NewAE Tech site.

Preparations

Requirements:

• 1x Arduino Nano or 1x Arduino UNO, we'll be focusing in Arduino Nano here
• 1x UART capable board (BusPirate, HydraBus, any USB-UART converter)
• breadboard + some jumper cables to make life easier (optional)

Installation steps:

1. Assemble PicoEMP device as instructed in NewAE Tech site and flash it using stock firmware

2. Setup Arduino IDE, read here

3. Flash glitch-loop-working.ino application into Arduino Nano

4. Hook Arduino Nano UART TX into computers UART RX

5. Open UART in screen, e.g. screen /dev/ttyUSBx 9600

6. Start glitching as shown below. According some personal research, the "hotspot's" are shown in pictures:

7. Once successful, one should see something like this in terminal:

...
...
Loop 1, counter=9
Loop 1, counter=10
Loop 1, counter=11
Loop 1, counter=12
Loop 1, counter=13
Loop 1, counter=14
Loop 1, counter=15
Loop 1, counter=16
...
...
(multiple pulses triggered here)
...
...
Loop 2, counter=0
Loop 2, counter=1
...
...
(multiple pulses triggered here)
...
...
Glitched! Flag {123123123}, counter=0
Glitched! Flag {123123123}, counter=1
Glitched! Flag {123123123}, counter=2
Glitched! Flag {123123123}, counter=3
Glitched! Flag {123123123}, counter=4

Disclaimer

Please do notice: It does take many tries and getting it executed using exact timing is THE tricky part! :) Also please observe reboots when glitching near power supply/VCC - a side-effect.