Verified:GitHub

hardware-security

Name: hardware-security
Availability: InStock
Author: brucesongs

Identify and assess hardware security vulnerabilities in embedded devices through reconnaissance, teardown, and firmware analysis.

60|14|Updated Apr 27, 2026

Search Tags:#firmware #embedded #uart #pentest #hardware-security #jtag #proxmark

Ready to run

npx skills add https://github.com/brucesongs/kali-claw --skill hardware-security

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hardware-security
Source: https://github.com/brucesongs/kali-claw/tree/main/skills/hardware-security
Command: npx skills add https://github.com/brucesongs/kali-claw --skill hardware-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Hardware-security knowledge helps teams identify and mitigate the risk of hardware and embedded-system vulnerabilities, including insecure debug interfaces, insecure firmware, and weak physical-layer protections.

Core Features & Use Cases

Comprehensive hardware assessment across UART/JTAG/SWD, SPI/NAND, firmware extraction, and side-channel considerations.
Firmware analysis workflows to extract, unpack, and search for secrets, keys, and default credentials in embedded devices.
Real-world use cases include IoT gateways, consumer routers, and medical/devices with sensitive data exposure.

Quick Start

Begin with device reconnaissance, map all interfaces, and initiate firmware extraction following the step-by-step methodology.

Frequently Asked Questions about hardware-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I extract firmware from an embedded device for hardware security testing?▼

Firmware extraction involves mapping physical interfaces like SPI or NAND and using hardware tools to dump memory. This Skill provides a structured workflow for device reconnaissance, teardown, and firmware extraction to identify insecure firmware and embedded-system vulnerabilities.

How do I find insecure debug interfaces like UART and JTAG during a hardware pentest?▼

Identifying insecure debug interfaces like UART, JTAG, and SWD requires a physical device teardown and interface mapping. This Skill guides hardware reconnaissance to assess physical interface exposure and detect weak physical-layer protections in embedded devices.

Can I analyze extracted firmware to search for secrets and default credentials?▼

Yes, firmware analysis workflows allow you to unpack extracted firmware and search for hardcoded secrets, cryptographic keys, and default credentials. This Skill supports identifying sensitive data exposure in IoT gateways, consumer routers, and medical devices.

Does this hardware security methodology cover RFID and NFC cloning risks?▼

Yes, hardware security testing covers RFID and NFC cloning risks using tools like Proxmark. This Skill assesses side-channel risks and physical-layer protections to generate a comprehensive risk report for embedded devices.

What is the best way to assess hardware security vulnerabilities in IoT devices?▼

The best way to assess hardware security vulnerabilities is through a structured methodology of device reconnaissance, teardown, and firmware analysis. This Skill supports evaluating IoT, consumer electronics, and industrial hardware to identify physical interface exposure and side-channel risks.

How do I generate a hardware security risk report after a device teardown?▼

Generating a comprehensive risk report requires explicit phases of evidence collection, firmware extraction, and interface assessment during device teardown. This Skill structures your hardware security testing workflow to produce a final risk assessment.