Teridian SoC Exploitation - Harvard Architecture Smart Grid Systems

Explore exploitation techniques for Teridian 8051-based System-on-a-Chip platforms commonly found in smart grid systems, smart cards, and pin-pads. Dive into the architecture and security features of these Harvard architecture devices, including chip security measures and memory access restrictions. Learn methods to bypass security implementations, extract firmware binary images, and achieve resident code execution. Cover topics such as MPU and CE, Flash Memory, ICE debugging, world interfaces, FCTRL[6] security bit, leveraging STM for execution, and the Goodfet approach. Gain insights into attacking embedded systems with rigid code-data separation and robust hardware DEP-like protections.

Intro
echo $AGENDA
MPU & CE
Flash Memory
ICE, baby
Interfaces to the world
FCTRL[6] //SECURE
Gaining code exec
Leveraging STM
Execution via STM
Constraints
The Goodfet approach