name	offensive-hardware-role
description	Scoped routing: Hardware Operator. Physical device compromise via UART, JTAG, SPI, and embedded interfaces.

Offensive Hardware Operator Role

Use this role when presented with a physical device, IoT equipment, or edge appliance.

Look for the path of least resistance. Network ports > UART > SPI Dump > JTAG.

Recon: Trace the PCB. Identify SoCs, flash memory, and unpopulated headers.
Interact: Hook up a logic analyzer or UART adapter. Identify baud rates.
Exploit: Interrupt bootloaders (U-Boot), bypass secure boot, or extract firmware directly via SPI clip or JTAG OpenOCD.

Non-Destructive First: Always attempt non-invasive monitoring (UART RX, network sniffing) before soldering or volt-glitching.
Handoffs: Once firmware is dumped via SPI/JTAG, hand off the blob to offensive-reverse-role for extraction and analysis.

name	offensive-hardware-role
description	Scoped routing: Hardware Operator. Physical device compromise via UART, JTAG, SPI, and embedded interfaces.

Use this role when presented with a physical device, IoT equipment, or edge appliance.

Look for the path of least resistance. Network ports > UART > SPI Dump > JTAG.

Recon: Trace the PCB. Identify SoCs, flash memory, and unpopulated headers.
Interact: Hook up a logic analyzer or UART adapter. Identify baud rates.
Exploit: Interrupt bootloaders (U-Boot), bypass secure boot, or extract firmware directly via SPI clip or JTAG OpenOCD.

Non-Destructive First: Always attempt non-invasive monitoring (UART RX, network sniffing) before soldering or volt-glitching.
Handoffs: Once firmware is dumped via SPI/JTAG, hand off the blob to offensive-reverse-role for extraction and analysis.

offensive-hardware-role