atc1441 / ESP32_nRF52_SWD

This software brings you the possibility to Read and Write the internal Flash of the Nordic nRF52 series with an ESP32

ESP32 SWD Flasher for nRF52

This software makes it possible to Read and Write the internal Flash of the Nordic nRF52 series with an ESP32 using the SWD interface. A tool to exploit the APPROTECT vulnerability is included as well.

You can support my work via PayPal: https://paypal.me/hoverboard1 this keeps projects like this coming.

To flash an nRF52 connect the following:

• nRF52 SWDCLK to ESP32 GPIO 21
• nRF52 SWDIO to ESP32 GPIO 19
• nRF52 GND to ESP32 GND to N-Channel MOSFET GND (Optional: O-scope GND Clips)
• Then power the nRF52 as needed

To bypass the Readout protection (APPROTECT) of an nRF52 connect all of the above and the following:

• nRF52 3.3V Power VDD to ESP32 GPIO 22 (Optional: O-scope Channel 2 Probe)
• N-Channel MOSFET PWM+ to ESP32 GPIO 5 (as shown)
• N-Channel MOSFET VOUT- to nRF52 DEC1 (as shown) (Optional: O-scope Channel 1 Probe)
• Then power the nRF52 as needed

This repo is explained and demonstrated in these videos (click to watch):

Required Hardware

• ESP32 Development Board
• N-Channel MOSFET Board
• nRF52 Series Board
• Optional: Oscilloscope

HowTo:

Use Visual Studio Code with PlatformIO to compile and upload the project.

Note: The Arduino IDE is not supported any more!

Change the WiFi credentials in Web.cpp and the Pinout to your needs in the platformio.ini file

Upload the data/index.htm to the ESP32 via the ip-address/edit web editor

ESP32 Glitcher schematic:

nRF52832 Glitch Tip, way better results with these 2 caps removed

Credits go to LimitedResults for finding the Power glitching Exploit: https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass-part-2/