UART
Definition
Universal Asynchronous Receiver/Transmitter. A two-wire serial interface (TX, RX, GND, optional VCC) exposed on most IoT device boards as debug pads or pins. With a USB-TTL adapter at the right baud rate, opens a Linux or RTOS shell on most consumer devices.
- Full name
- Universal Asynchronous Receiver/Transmitter
- Wiring
- TX, RX, GND, optional VCC
- Location
- Debug pads or pins on IoT device boards
- Tool needed
- USB-TTL adapter at correct baud rate
Common questions
Why is UART such a common first step in IoT device forensic acquisition?+
Many manufacturers leave UART debug pads exposed or easily accessible on the circuit board, and connecting a USB-TTL adapter at the right baud rate often drops straight into a root or bootloader shell without needing to defeat any authentication on the device's normal interfaces.
What can prevent a UART connection from yielding a usable shell?+
Manufacturers increasingly disable the UART console in production firmware, require a login even over serial, or physically remove the header pads, forcing examiners to fall back on JTAG, chip-off, or other more invasive extraction methods.
Related terms
- Binwalk
- An open-source firmware analysis tool that scans a binary blob for known file signatures (squashfs, JFFS2, gzip, LZMA, certificates) and extracts the...
- CoAP
- Constrained Application Protocol (RFC 7252). A RESTful protocol over UDP on port 5683 (or 5684 with DTLS), designed for constrained devices that...
- DPDP Act 2023
- Digital Personal Data Protection Act 2023. India's general data protection statute, in force in phases from 2024. Applies to IoT-collected personal data...
- eMMC Dump
- Embedded Multi-Media Card flash chip extraction. The chip is desoldered (chip-off) or read in-circuit with an ISP adapter; the raw NAND or...
- JTAG
- Joint Test Action Group standard (IEEE 1149.1) for chip-level debugging. The test access port left on a phone's PCB lets a forensic...
- MQTT
- Message Queuing Telemetry Transport. A publish/subscribe protocol on TCP port 1883 (plain) or 8883 (TLS) with a central broker. Designed for low-bandwidth...