更新中…
- 华为HG8245H救砖番外篇之利用JTAG完成硬件初始化
- 逆向分析工程师硬件调试入门，第1篇：SWD、OpenOCD与Xbox One控制器
- Hardware Debugging for Reverse Engineers Part 1: SWD, OpenOCD and Xbox One Controllers
- Hardware Debugging for Reverse Engineers Part 2: JTAG, SSDs and Firmware Extraction
- 从逆向分析的角度学习硬件调试技巧JTAG，SSD和固件提取
- JTAG篇(5) OpenOCD 写入数据到TAP
- How to ping a chip (detect if a chip is connected) with OpenOCD
- IR capture error at bit 4
- IR capture errors #2
JLINK
➜ xpack-openocd-0.11.0-3 ./bin/openocd -f ./scripts/interface/jlink.cfg -c "adapter speed 4000" -c "jtag newtap test cpu -irlen 4"
xPack OpenOCD x86_64 Open On-Chip Debugger 0.11.0+dev (2021-12-07-19:33)
Licensed under GNU GPL v2
For bug reports, read
http://openocd.org/doc/doxygen/bugs.html
adapter speed: 4000 kHz
Info : auto-selecting first available session transport "jtag". To override use 'transport select <transport>'.
Info : Listening on port 6666 for tcl connections
Info : Listening on port 4444 for telnet connections
Info : J-Link V9 compiled Dec 13 2019 11:14:50
Info : Hardware version: 9.60
Info : VTarget = 3.288 V
Info : clock speed 4000 kHz
Info : JTAG tap: test.cpu tap/device found: 0x4ba00477 (mfg: 0x23b (ARM Ltd), part: 0xba00, ver: 0x4)
Info : TAP auto0.tap does not have valid IDCODE (idcode=0x4323803a)
Info : JTAG tap: auto1.tap tap/device found: 0x2191c01d (mfg: 0x00e (Freescale (Motorola)), part: 0x191c, ver: 0x2)
Warn : AUTO auto0.tap - use "jtag newtap auto0 tap -irlen 2 -expected-id 0x00000000"
Error: auto0.tap: IR capture error; saw 0x0000 not 0x0001
Warn : Bypassing JTAG setup events due to errors
Warn : gdb services need one or more targets defined
JTAGulator
UU LLL
JJJ TTTTTTT AAAAA GGGGGGGGGGG UUUU LLL AAAAA TTTTTTTT OOOOOOO RRRRRRRRR
JJJJ TTTTTTT AAAAAA GGGGGGG UUUU LLL AAAAAA TTTTTTTT OOOOOOO RRRRRRRR
JJJJ TTTT AAAAAAA GGG UUU UUUU LLL AAA AAA TTT OOOO OOO RRR RRR
JJJJ TTTT AAA AAA GGG GGG UUUU UUUU LLL AAA AAA TTT OOO OOO RRRRRRR
JJJJ TTTT AAA AA GGGGGGGGG UUUUUUUU LLLLLLLL AAAA TTT OOOOOOOOO RRR RRR
JJJ TTTT AAA AA GGGGGGGGG UUUUUUUU LLLLLLLLL AAA TTT OOOOOOOOO RRR RRR
JJJ TT GGG AAA RR RRR
JJJ GG AA RRR
JJJ G A RR
Welcome to JTAGulator. Press 'H' for available commands.
Warning: Use of this tool may affect target system behavior!
> j
JTAG> v
Current target I/O voltage: Undefined
Enter new target I/O voltage (1.4 - 3.3, 0 for off): 3.3
New target I/O voltage set: 3.3
Warning: Ensure VADJ is NOT connected to target!
JTAG> i
Enter starting channel [0]:
Enter ending channel [4]:
Possible permutations: 60
Bring channels LOW before each permutation? [y/N]:
Press spacebar to begin (any other key to abort)...
JTAGulating! Press any key to abort...
TDI: N/A
TDO: 0
TCK: 4
TMS: 1
Device ID #1: 0100 1011101000000000 01000111011 1 (0x4BA00477)
TRST#: 3
IDCODE scan complete.