coxtor / sniffrom Goto Github PK

View Code? Open in Web Editor NEW

A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.

License: GNU General Public License v3.0

Python 100.00%

sniffrom's Introduction

sniffROM

Supports SPI and I²C flash chips.
Preserves the actual memory addresses of captured data.
Generates a visual map of the reconstructed binary image.
Generates a timing plot of reads/writes to memory addresses.
Recognizes 100+ (and currently parses 12) SPI flash commands from the following manufacturers:
- Atmel
- Eon
- Fidelix
- GigaDevice
- Macronix
- Numonyx
- Spansion
- SST
- Winbond

See the Wiki for documentation

usage: sniffROM_new.py [-h] [--addrlen [{2,3,4}]] [--endian [{msb,lsb}]]
                       [--filter [{r,w}]] [-o [O]] [--summary] [--data-map]
                       [--timing-plot] [-v]
                       input_file

sniffROM - Reconstructs flash memory contents and extracts other data from
passively sniffed commands in a Saleae logic analyzer capture file. Currently
supports SPI and I2C flash chips.

positional arguments:
  input_file            Saleae Logic SPI or I2C Analyzer Export File (.csv)

optional arguments:
  -h, --help            show this help message and exit
  --addrlen [{2,3,4}]   set length of SPI memory address in bytes (default: 3)
  --endian [{msb,lsb}]  set endianness of SPI memory bytes (default: msb)
  --filter [{r,w}]      analyze only Read or Write commands (default: both)
  -o [O]                flash image output file name (default: output.bin)
  --summary             print summary of sniffed commands and metadata
  --data-map            show visual data map
  --timing-plot         show timing analysis
  -v                    increase verbosity (up to -vvv)

Recommend Projects