๐Ÿ”— NullSec UART

March 7, 2026 ยท View on GitHub

๐Ÿ”— NullSec UART

UART/Serial Console Discovery & Exploitation

Python License NullSec

Discover hidden UART consoles, auto-detect baud rates, and interact with embedded device serial interfaces


๐ŸŽฏ Overview

NullSec UART automates the discovery and exploitation of serial debug consoles on embedded devices. Hidden UART interfaces are one of the most common hardware attack surfaces โ€” often providing root shells, bootloader access, and firmware update capabilities.

โšก Features

FeatureDescription
Baud DetectorAuto-detect baud rate from 300 to 4M baud
Pin FinderIdentify TX/RX pins using signal analysis
Console LoggerRecord serial output with timestamps
Command InjectorAutomated command injection via serial
Bootloader DetectorIdentify U-Boot, Barebox, CFE, and custom bootloaders
Shell DetectorDetect root shells, BusyBox, and restricted environments
Firmware ExtractorDump firmware via bootloader commands (XMODEM, YMODEM)

๐Ÿ”ง Supported Adapters

AdapterStatus
FTDI FT232R/FT2232Hโœ… Full
CP2102/CP2104โœ… Full
CH340/CH341โœ… Full
Bus Pirateโœ… Full
Raspberry Pi GPIOโœ… Full

๏ฟฝ๏ฟฝ Quick Start

# Auto-detect baud rate
nullsec-uart detect --port /dev/ttyUSB0

# Connect to UART console
nullsec-uart connect --port /dev/ttyUSB0 --baud 115200

# Log all serial output
nullsec-uart log --port /dev/ttyUSB0 --baud 115200 -o device_log.txt

# Brute-force login
nullsec-uart bruteforce --port /dev/ttyUSB0 --wordlist common_creds.txt
ProjectDescription
nullsec-jtagJTAG/SWD debug interface toolkit
nullsec-glitchVoltage glitching & fault injection
nullsec-sdrSoftware-defined radio toolkit
nullsec-linuxSecurity Linux distro (140+ tools)

For authorized hardware security testing only.

๐Ÿ“œ License

MIT License โ€” @bad-antics


Part of the NullSec Hardware Security Suite