

This chip is a low power 24-bit stereo CODEC with a microphone, headphone and speaker amplifiers. There is an IC labeled AK4961 towards the bottom of the board, but this is an audio codec chip. Luckily for us a lot of the test pads are labeled, but the labeled ones seem to be test points for various button presses, so there’s nothing exciting there. Note that there really isn’t too much to see here, as the main chip is covered in epoxy. Opening up the case reveals the following PCB: The first step to answering some of these questions will be a hardware teardown. Can the firmware be modified or changed, either through software exploitation or hardware modifications?.Can the target be debugged or instrumented in such a way that allows us to learn more about it’s internal operations?.Can the firmware be extracted from the target?.When assessing an embedded platform there are a number of things you can do or try to accomplish, with this post I want to demonstrate/test the following: I don’t really play my XBox that much so I thought it might be interesting to tear down this controller and see what kind of information we could extract from it.

I was looking around my apartment for potential targets for my next post and was pleasantly surprised to find the following XBox One controller still in the packaging:
