Blind VCC Glitching Technique to Bypass the Secure Boot of Qualcomm MSM8916 Mobile SoC

Explore a 37-minute Black Hat conference talk on the Blind VCC glitch (Vlind Glitch) method for bypassing secure boot mechanisms in mobile SoCs. Learn about this innovative technique that doesn't require source or binary code knowledge, and see its practical application on the Qualcomm MSM8916/APQ8016 SoC. Discover the step-by-step process, from soldering to the Chip Whisperer to characterizing the DragonBoard 410c, culminating in a demonstration of bypassing Secure Boot. Gain insights into the EXFILES Project, EDL image verification, and the overall attack overview presented by Vicente Arnau and Hector Marco.

Intro
EXFILES Project
Target: DragonBoard 410c
EDL Image verification
Attack Overview
Enabling Secure Boot
Soldering to the Chip Whisperer
Characterising the DragonBoard
Bypassing Secure Boot