HardLabs

GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant

jayis1·hacker-devices·ghostbus/kicad/ghostbus.kicad_pcb

GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant PCB layout, top view — open source STM32 board by jayis1

About the GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant PCB

GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant is an open source STM32 PCB design by jayis1, published on GitHub. It is a 4-layer board measuring 50 × 24 mm, with 18 components from 18 distinct parts.

Its main chip is the STM32H563ZIT6, from the STM32 family. Other key parts include the nRF52840-QFAA, MCP73831T-2ACI/OT, MAX17048G+T10 and TXU0104PWR. By type, the board carries 5 ICs, 4 capacitors, 3 connectors, 2 resistors, 1 crystal and 1 switch.

It belongs with the usb & debug tools, iot & wireless and power & battery designs in this gallery.

From the project

Full-cycle hardware designs for security research devices — each device is a subfolder with its own README, schematics, PCB layout, and software stack

A pocket-sized, battery-powered covert hardware debug probe that auto-discovers and exploits SWD and JTAG interfaces on target embedded systems, enabling firmware extraction, runtime memory inspection, peripheral manipulation, and debug-port exploitation — all streamed over an encrypted BLE backhaul to an operator's mobile device.

Author: jayis1 License: Hardware — CERN-OHL-S v2 · Firmware — GPL-2.0 · App — MIT Version: 1.0.0

Main components on the GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant

STM32H563ZIT6nRF52840-QFAAMCP73831T-2ACI/OTMAX17048G+T10TXU0104PWR

GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant bill of materials (BOM)

18 components, 18 distinct parts.

QtyPartRefs
1
STM32H563ZIT6
U1
1
nRF52840-QFAA
U2
1
MCP73831T-2ACI/OT
U3
1
MAX17048G+T10
U4
1
TXU0104PWR
U5
1
32MHz
Y1
1
USB_C 16P
J1
1
PROBE_HEAD_8P
J2
1
BATTERY_1200mAh
J3
1
TS-1187A
SW1
1
WS2812B-Mini
D1
1
3.9nH
L1
1
2.2pF
C1
1
0.8pF
C2
1
100nF
C3
1
10uF
C5
1
5.1k
R1
1
10k
R2

GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant design files

The KiCad project lives in the jayis1/hacker-devices repository on GitHub; these links point at the commit this page was built from.

GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant: common questions

What microcontroller does the GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant use?

The GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant is built around the STM32H563ZIT6, from the STM32 family.

How big is the GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant PCB?

The GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant measures 50 × 24 mm, has 4 copper layers and is 1.6 mm thick.

How many components are on the GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant?

18 components, from 18 distinct parts. The full bill of materials is listed on this page.

Where can I download the GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant design files?

From the jayis1/hacker-devices repository on GitHub, which has the KiCad layout and the schematic; the links under Design files point to each one.

Can I use the GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant design in my own project?

The repository has no license, so all rights stay with jayis1. Use it as a reference, and ask the author before reusing the design.

Can I test firmware for the GHOSTBUS — Covert SWD/JTAG Hardware Debug Implant without the hardware?

Yes. HardLabs builds a simulation of the board from its netlist and BOM, so you can run and debug STM32 firmware against it before you order a PCB.

More boards in hacker-devices

Similar boards