{"guid":"I1Wkt7x8Yy2ZnP2kOGAuXA","title":"Hardware Attacks, Advanced ARM Exploitation, and Android Hacking","subtitle":null,"slug":"30C3_-_5193_-_en_-_saal_1_-_201312281715_-_hardware_attacks_advanced_arm_exploitation_and_android_hacking_-_stephen_a_ridley","link":"http://events.ccc.de/congress/2013/Fahrplan/events/5193.html","description":"In this talk (which in part was delivered at Infiltrate 2013 and NoSuchCon 2013) we will discuss our recent research that is being rolled into our Practical ARM Exploitation course (sold out at Blackhat this year and last) on Linux and Android (for embedded applications and mobile devices). We will also demonstrate these techniques and discuss how we were able to discover them using several ARM hardware development platforms that we custom built.  Where relevant we will also discuss ARM exploitation as it related to Android as we wrote about in the \"Android Hackers Handbook\" which we co-authored and will be released in October 2013.\n","original_language":"eng","persons":["Stephen A. Ridley"],"tags":["30c3","Security \u0026 Safety"],"view_count":610,"promoted":false,"date":"2013-12-28T01:00:00.000+01:00","release_date":"2014-01-01T01:00:00.000+01:00","updated_at":"2026-03-29T17:15:05.653+02:00","length":3439,"duration":3439,"thumb_url":"https://static.media.ccc.de/media/congress/2013/5193-h264-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2013/5193-h264-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2013/I1Wkt7x8Yy2ZnP2kOGAuXA-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2013/I1Wkt7x8Yy2ZnP2kOGAuXA-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/30C3_-_5193_-_en_-_saal_1_-_201312281715_-_hardware_attacks_advanced_arm_exploitation_and_android_hacking_-_stephen_a_ridley","url":"https://api.media.ccc.de/public/events/I1Wkt7x8Yy2ZnP2kOGAuXA","conference_title":"30C3","conference_url":"https://api.media.ccc.de/public/conferences/30c3","related":[{"event_id":169,"event_guid":"import-3eee1d460ed0c3da7c","weight":1},{"event_id":619,"event_guid":"import-441f6211ee783d472a","weight":1},{"event_id":663,"event_guid":"import-b698bd8cf5e4d19ef1","weight":1},{"event_id":684,"event_guid":"import-3c6185884db88b4055","weight":1},{"event_id":1094,"event_guid":"import-33fb0d803b5b408751","weight":1},{"event_id":1396,"event_guid":"import-75b2d58a4dc12e1a88","weight":1},{"event_id":1398,"event_guid":"import-4cd820d77b40b4b492","weight":1},{"event_id":1444,"event_guid":"import-01fa9b6c433d8f94ff","weight":1},{"event_id":1455,"event_guid":"import-524e41ae54d3230bb9","weight":1},{"event_id":1465,"event_guid":"import-6c057cb9e23a38badd","weight":1},{"event_id":1487,"event_guid":"import-31618b1a3c02facb8d","weight":1},{"event_id":1503,"event_guid":"import-019cfe6488a1c1abe9","weight":1},{"event_id":1505,"event_guid":"import-aab17311f8754984a4","weight":1},{"event_id":1520,"event_guid":"import-70c32b8bc4f7a9b0a7","weight":1},{"event_id":1541,"event_guid":"import-8fd39363e733cd1101","weight":1},{"event_id":1548,"event_guid":"import-c55c543fed3dbc291f","weight":1},{"event_id":1583,"event_guid":"import-11d95d8eb06a7bb8eb","weight":1},{"event_id":1685,"event_guid":"import-3e4a92a7169b065ca1","weight":1},{"event_id":1722,"event_guid":"RiskSjr33wsyUrC5oX80uw","weight":1},{"event_id":1724,"event_guid":"-zXtqISaAof8oPTr8SYyTQ","weight":1},{"event_id":1726,"event_guid":"w9UU1iDfP18QvWJ5i2VDsg","weight":1},{"event_id":1733,"event_guid":"QszoY6oJD6rpkbsTRQinRA","weight":1},{"event_id":1740,"event_guid":"0IuyfNlW5fXVnrMIgEXesw","weight":1},{"event_id":1748,"event_guid":"ufJTu-pu8QBUtd-bji9tmw","weight":1},{"event_id":1758,"event_guid":"wJ8usABBu6mJXRNpmhr_SQ","weight":2},{"event_id":1763,"event_guid":"WbqegbTKG5YheKse8X4ZUw","weight":1},{"event_id":1771,"event_guid":"UW-GGUBQz587MFHw9yXl6A","weight":1},{"event_id":1780,"event_guid":"hWph2wdjII5XK6nCL_1kWA","weight":1},{"event_id":1783,"event_guid":"3rqxJH8xZ4waSOXtJbxrDg","weight":2},{"event_id":1786,"event_guid":"X5bQYDGyUSq8KPoTcyahdw","weight":2},{"event_id":1787,"event_guid":"Veo2ucE-l2cA-V-EaA_ckA","weight":2},{"event_id":1789,"event_guid":"rglYVLzBOIMfYpF873lgjQ","weight":2},{"event_id":1803,"event_guid":"c3Q-MbMX7FDXWv6rYj2bFw","weight":3},{"event_id":1805,"event_guid":"z2_SbAXdwSQnezj6oPTuIg","weight":2},{"event_id":1806,"event_guid":"IE5aOu8FUaPfpFv5v4rtJg","weight":5},{"event_id":1807,"event_guid":"wGEf2KpP3_UU4Qm0vrtz1g","weight":1},{"event_id":1821,"event_guid":"rSMcCR_40Gu8XhIBpMapxQ","weight":2},{"event_id":1826,"event_guid":"Ae-3k2zOoIDF16EaC2uCWA","weight":2},{"event_id":1831,"event_guid":"shKT8wmGW3LurqOCDmbZyg","weight":3},{"event_id":1832,"event_guid":"toykIIIHEXC1x8F7xoiYRw","weight":1},{"event_id":1833,"event_guid":"bJDjDUHLd0Y6wLncMd5Unw","weight":2},{"event_id":1839,"event_guid":"tnCge6rYmFPy9O0KjvtBAQ","weight":2},{"event_id":1851,"event_guid":"hAXLUoYo1xQHEzFm6HR_SA","weight":1},{"event_id":1853,"event_guid":"_PZbf5bEsVNq9q3vTxAazQ","weight":1},{"event_id":1854,"event_guid":"D27zQV1jKk88oKyXxGBGPQ","weight":1},{"event_id":2165,"event_guid":"hnRe8t6JYI_8PYnFh-dsug","weight":1},{"event_id":2172,"event_guid":"ELK9-ZQeFcqKxBYW8eay8g","weight":2},{"event_id":2178,"event_guid":"7G4FQIXg2eb7D6F_jNwuxA","weight":1},{"event_id":2183,"event_guid":"yMuYr5eW4o9FpJMw-NwXrg","weight":1},{"event_id":2187,"event_guid":"JhCUm-jQqCMx_jDfrzH24Q","weight":2},{"event_id":2204,"event_guid":"78e2d419-0adc-43ff-989e-95a78ac9ddd4","weight":2},{"event_id":2208,"event_guid":"T7Ta13fUuQaAbv1JlO4-Qg","weight":1},{"event_id":2244,"event_guid":"a7cde3ca-46a8-4f0b-be61-f60e77f3418e","weight":1},{"event_id":2267,"event_guid":"9RncwfCW37x4dhs15BQqBQ","weight":1},{"event_id":2332,"event_guid":"c8fe75dc-bc24-4bf7-8b6d-a5ac76c48d0e","weight":1},{"event_id":2363,"event_guid":"52af7df6-796f-41ed-ada8-289a8b87667e","weight":1},{"event_id":2817,"event_guid":"7430c969-7ccf-4d40-903a-d9b1ebb4fb15","weight":1},{"event_id":2879,"event_guid":"3f61827f-8b17-47b4-a43c-e0dce6532cbe","weight":1},{"event_id":2882,"event_guid":"df35c860-60fc-4df8-801c-b2f4f91b33b8","weight":1},{"event_id":2884,"event_guid":"fb537cde-7f1d-484b-971b-1d30a543ecfb","weight":2},{"event_id":2887,"event_guid":"cc9ede64-bad5-4ed0-92a3-4fbaf54eadec","weight":1},{"event_id":2917,"event_guid":"16613345-4f8c-44f1-a065-b3fa1d7b51cc","weight":1},{"event_id":2920,"event_guid":"d516ffe3-d32d-4bed-8289-09d245ac2b2f","weight":2},{"event_id":2979,"event_guid":"e2d62f19-f20d-47fe-94eb-4a892e95875e","weight":1},{"event_id":3097,"event_guid":"ffa36a68-67e0-4b5d-a932-a2250f725080","weight":1},{"event_id":3102,"event_guid":"fc8dc1db-978c-46db-96b4-2b64fc3f8e5c","weight":1},{"event_id":3248,"event_guid":"f20fe948-cd33-535d-b7dd-00938781e212","weight":1},{"event_id":3309,"event_guid":"9335f1f1-c0c5-5378-b686-fffd6781c5ce","weight":1},{"event_id":3640,"event_guid":"700a07e7-a9c4-437b-a4c5-4491b23a9b4a","weight":1},{"event_id":3671,"event_guid":"4ef69e6a-026f-4b30-888d-af654b220a3d","weight":1},{"event_id":3695,"event_guid":"c300b194-2a85-4705-92aa-b4e789882303","weight":1},{"event_id":3696,"event_guid":"9d36932f-616a-4677-b924-60c1986fbbfc","weight":1},{"event_id":3702,"event_guid":"5fb5e620-383a-4679-b37a-beef20bcd4fe","weight":1},{"event_id":3720,"event_guid":"198bdfe5-24cf-4b2f-9cd5-7522a99b3b4e","weight":1},{"event_id":3754,"event_guid":"0cf3ff5b-9d86-4831-8eac-588d92771f63","weight":1},{"event_id":3757,"event_guid":"9d6db804-1074-4116-8210-cca78b335a1a","weight":1},{"event_id":3816,"event_guid":"e370add0-106d-48e6-9e97-cd560ba60b9c","weight":1},{"event_id":3844,"event_guid":"385033fe-d217-0130-aca6-28dd05677c66","weight":1},{"event_id":4130,"event_guid":"6953ca59-16e4-4b23-97dd-64675f6fbe79","weight":1},{"event_id":4766,"event_guid":"19b7e5d7-bba7-46da-afbc-f16d43fe395f","weight":1},{"event_id":4785,"event_guid":"4c4af291-e9ed-4dc9-8b2e-9062db9924fa","weight":1},{"event_id":4799,"event_guid":"95f7fa6a-c6a4-42eb-8c04-e5c82d696539","weight":1},{"event_id":4803,"event_guid":"23d59026-ab98-4f6c-a46d-0bb3e1788a67","weight":1},{"event_id":4813,"event_guid":"d5d27820-0e97-4c19-bf57-b470cbbd97ef","weight":1},{"event_id":4817,"event_guid":"be19fbe3-e825-4e67-93f9-a6aeda2e31af","weight":1},{"event_id":4819,"event_guid":"55f921ed-ab90-4553-9903-8658557ac447","weight":2},{"event_id":4830,"event_guid":"5cf8c222-47d3-4741-9324-be182b4d0fb8","weight":1},{"event_id":4833,"event_guid":"e1a60f7b-6a56-4dce-ab3a-c686fa940aa8","weight":1},{"event_id":4847,"event_guid":"6d9ee2da-4907-415f-84b4-61ecfa783895","weight":1},{"event_id":4862,"event_guid":"82d8204a-7147-452d-b5a3-91969e3a3ac6","weight":1},{"event_id":4885,"event_guid":"956cf3ed-c342-4c1d-b636-29ec3d4578d2","weight":1},{"event_id":4902,"event_guid":"c02bcac2-4df7-4264-83e3-c7277913cbd8","weight":1},{"event_id":4916,"event_guid":"57f82be5-77f2-46aa-ba55-94e922e6cb77","weight":1},{"event_id":4926,"event_guid":"1e5e3f78-dfbe-4aeb-9565-73c395c9f8fc","weight":1},{"event_id":4929,"event_guid":"8e222759-cd6b-403b-8fe1-3517bf7d2802","weight":1}],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"DRAFT_30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking.en_DRAFT.srt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-24T22:40:54.841+01:00","recording_url":"https://cdn.media.ccc.de/congress/2013/DRAFT_30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking.en_DRAFT.srt","url":"https://api.media.ccc.de/public/recordings/52405","event_url":"https://api.media.ccc.de/public/events/I1Wkt7x8Yy2ZnP2kOGAuXA","conference_url":"https://api.media.ccc.de/public/conferences/30c3"},{"size":null,"length":3439,"mime_type":"video/mp4","language":"eng","filename":"30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_h264-hq.mp4","state":"downloaded","folder":"mp4","high_quality":true,"width":640,"height":360,"updated_at":"2016-01-27T11:03:58.950+01:00","recording_url":"https://cdn.media.ccc.de/congress/2013/mp4/30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_h264-hq.mp4","url":"https://api.media.ccc.de/public/recordings/3671","event_url":"https://api.media.ccc.de/public/events/I1Wkt7x8Yy2ZnP2kOGAuXA","conference_url":"https://api.media.ccc.de/public/conferences/30c3"},{"size":null,"length":3439,"mime_type":"video/mp4","language":"eng","filename":"30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_h264-iprod.mp4","state":"downloaded","folder":"mp4-lq","high_quality":false,"width":512,"height":288,"updated_at":"2016-01-26T08:07:12.477+01:00","recording_url":"https://cdn.media.ccc.de/congress/2013/mp4-lq/30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_h264-iprod.mp4","url":"https://api.media.ccc.de/public/recordings/4558","event_url":"https://api.media.ccc.de/public/events/I1Wkt7x8Yy2ZnP2kOGAuXA","conference_url":"https://api.media.ccc.de/public/conferences/30c3"},{"size":null,"length":3439,"mime_type":"audio/opus","language":"eng","filename":"30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_opus.opus","state":"downloaded","folder":"opus","high_quality":true,"width":0,"height":0,"updated_at":"2014-11-11T12:42:54.400+01:00","recording_url":"https://cdn.media.ccc.de/congress/2013/opus/30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_opus.opus","url":"https://api.media.ccc.de/public/recordings/4696","event_url":"https://api.media.ccc.de/public/events/I1Wkt7x8Yy2ZnP2kOGAuXA","conference_url":"https://api.media.ccc.de/public/conferences/30c3"},{"size":null,"length":3439,"mime_type":"video/webm","language":"eng","filename":"30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_webm.webm","state":"downloaded","folder":"webm","high_quality":true,"width":640,"height":360,"updated_at":"2016-01-27T11:03:58.990+01:00","recording_url":"https://cdn.media.ccc.de/congress/2013/webm/30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_webm.webm","url":"https://api.media.ccc.de/public/recordings/3670","event_url":"https://api.media.ccc.de/public/events/I1Wkt7x8Yy2ZnP2kOGAuXA","conference_url":"https://api.media.ccc.de/public/conferences/30c3"},{"size":null,"length":3412,"mime_type":"audio/mpeg","language":"eng","filename":"30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_mp3.mp3","state":"downloaded","folder":"mp3","high_quality":true,"width":640,"height":360,"updated_at":"2014-06-29T00:22:16.742+02:00","recording_url":"https://cdn.media.ccc.de/congress/2013/mp3/30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/3672","event_url":"https://api.media.ccc.de/public/events/I1Wkt7x8Yy2ZnP2kOGAuXA","conference_url":"https://api.media.ccc.de/public/conferences/30c3"},{"size":null,"length":3439,"mime_type":"video/mp4","language":"eng","filename":"30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_h264-hd.mp4","state":"downloaded","folder":"mp4-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-01-26T08:07:11.075+01:00","recording_url":"https://cdn.media.ccc.de/congress/2013/mp4-hd/30c3-5193-en-Hardware_Attacks_Advanced_ARM_Exploitation_and_Android_Hacking_h264-hd.mp4","url":"https://api.media.ccc.de/public/recordings/4517","event_url":"https://api.media.ccc.de/public/events/I1Wkt7x8Yy2ZnP2kOGAuXA","conference_url":"https://api.media.ccc.de/public/conferences/30c3"}]}