Targets
1)STM8S208K8
- Tool Open Source to dump the flash / verify protection: stm8flash (https://github.com/vdudouyt/stm8flash)
Protection: Read Out Protection (Read-out protection (ROP) on STM8 Microcontrollers locks the flash memory and data areas to block unauthorized reading, writing, or debugging via the SWIM (Single Wire Interface Module) interface.)
Steps:
Try to dump the flash with STM8FLASH, in this moment the protection is verified, the reset is by software by default by the stm8flash tool in the SWIM process, so, take this signal as a trigger.
Around delay (50 – 85)us, pulse (0.9)us
2) Tricore TC275 and 3) Tricore TC234
- Tool Open Source to dump the flash / verify protection: tricore-things (https://github.com/epozzobon/tricore-things)
Protection: Debug Password Protection, Cerberus
Steps:
Hardware Reset + Brute force delay and pulse
Prizes
- Free entry to Ekoparty Miami 2027
- Faulty Cat Tool
- A shot of PALINKA drink (the best Hungarian Drink)
