Beyond Root: Custom Firmware for Embedded Mobile Chipsets
Christopher Wade reverse engineers closed proprietary NFC controllers in modern smartphones, patching microcontroller firmware to expand RF capabilities.
Summary
The Hidden Closed Hardware in Rooted Smartphones
While rooting Android smartphones grants root privileges over the Linux kernel and userland, specialized embedded coprocessors remain closed and inaccessible.
Reverse Engineering Smartphone NFC Controllers
Christopher Wade examines proprietary NFC microcontrollers deployed across modern handsets, analyzing hardware interfaces and proprietary bootloader firmware.
Patching Firmware and Bypassing Silicon Protections
By overcoming memory readout protections and patching firmware binaries, researchers can bypass silicon restrictions and manipulate raw RF modulation.
Unlocking Advanced Wireless Capabilities
Custom controller firmware enables arbitrary frame transmission, custom tag emulation, and low-level protocol fuzzing directly from commodity smartphone hardware.
Related talks
Main Stage·31 min
Christopher Wade
Christopher Wade discusses reverse engineering proprietary NFC microcontrollers, patching mobile baseband coprocessors, and custom firmware.
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Main Stage·41 min
Jeroen 'Jeroen' Domburg
Demonstrates hardware hacking and reverse engineering to run custom Linux kernels and open software on inexpensive USB webcams.