HITCON-Badge-2019 - HITCON electric badge for HITCON CMT 2019.

项目说明

HITCON Badge 2019

O

HITCON Badge 2019 is based on M2351ZIAAE MCU.

Usage

There are four pages, you can use LEFT and RIGHT button on the badge to switch them.

Page 0: LED Le

* Badge will show the status of 24 LEDs.
* Locked: white color
* Unlocked: Bright and colorful
* Press UP + A/B to decrease/increase the brightness.
* You can unlock each LED by playing the game or completing the mission with sponsors.

Page 1: Pattern Display

* Use UP and DOWN button to select patterns.
* Pattern 0 will be unlocked by unlocking led 0 1 2.
* Pattern 1: led 3 4 5.
* Pattern 2: led 6 7 8.
* ..
* If the pattern is still locked, it will render the error pattern (all LED are red).
* There are 11 patterns in total.

Page 2: Paint Mode

* In this page, you can customize the color of LEDs!
* Select the LEDs by pressing UP DOWN LEFT RIGHT.
* Change the color by pressing A B.
* Press AB (at the same time) and then press LEFT/RIGHT to lea mode.

Page 3: Snake

* Let badge connect to the computor with Micro USB cable.
* Use any client you like to connect the serial com port.
* Linux/macOS: You can use screen command.
* example: screen /dev/tty.usbmodemxxx (replace /dev/tty.usbmodemxxx with correct path)
* Windows: You can use PuTTY (Connection type: Serial) to connect the COM port.
* Control the snake by pressing UP DOWN LEFT RIGHT.
* Press AB at the same time to pause the game.
* Press AB again to continue the game, LEFT to exit.
* Score
* score >= 50, snake pattern (pattern 8) will unlocked!
* score == 2147483647: Well done, hacker :)

Badge Command Line

* There is a simple command line interface running on the badge.
* You can use it by connecting the badge to computer with micro usb.

Commands

#### help
Type help for all a commands.

#### show
Show command will display the status of all LEDs and patterns.

HITCON Badge Challenges

> Badge source code, solution and exploits will be released within the talk HITCON Badge 2019 秘辛: MCU ARM TrustZone challenges at R0 (Day2 14:40 - 15:30).

There are 11 pattern in total, but three of them are special, so you need to get them in special way :)

Stage 0 - Warm Up

* Before pwning the badge, why not play some game first.
* Get the score higher than 50, you can unlock the snake pattern.

Stage 1 - Hack The Game

* Try to let the score == 2147483647 by playing the game.
* Or pwn the badge :)
* You will know how to do it by re the binary of normal world (NonSecure world) in this MCU TrustZone.
* To make life easier, the binary is not striped and not a raw binary, just take them all (See firmware/)

Stage 2 - Pwn the Badge

* The final target is protected by TrustZone in Secure Region.
* I put my secret in the TrustZone, it is pretty safe, isn't it?
* Try to pwn the badge for all patterns!

项目信息

开发语言：C

Star 数：78

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕HITCON electric badge for HITCON CMT 2019.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。