{"id":13826513,"url":"https://github.com/alainiamburg/sniffrom","last_synced_at":"2025-07-09T00:34:06.263Z","repository":{"id":43537479,"uuid":"84377964","full_name":"alainiamburg/sniffROM","owner":"alainiamburg","description":"A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.","archived":false,"fork":false,"pushed_at":"2023-12-07T07:06:51.000Z","size":20498,"stargazers_count":281,"open_issues_count":1,"forks_count":34,"subscribers_count":20,"default_branch":"master","last_synced_at":"2024-10-26T11:33:47.228Z","etag":null,"topics":["flash-memory","hardware-hacking","i2c","logic-analyzer","python","reverse-engineering","saleae","saleae-logic","sniffer","spi"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alainiamburg.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2017-03-08T23:56:12.000Z","updated_at":"2024-10-22T15:42:11.000Z","dependencies_parsed_at":"2024-01-07T22:49:40.297Z","dependency_job_id":"6e198046-cd9a-4ad5-b2b2-83481b5e80e5","html_url":"https://github.com/alainiamburg/sniffROM","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alainiamburg%2FsniffROM","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alainiamburg%2FsniffROM/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alainiamburg%2FsniffROM/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alainiamburg%2FsniffROM/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alainiamburg","download_url":"https://codeload.github.com/alainiamburg/sniffROM/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225476383,"owners_count":17480215,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["flash-memory","hardware-hacking","i2c","logic-analyzer","python","reverse-engineering","saleae","saleae-logic","sniffer","spi"],"created_at":"2024-08-04T09:01:39.425Z","updated_at":"2024-11-20T05:30:52.771Z","avatar_url":"https://github.com/alainiamburg.png","language":"Python","funding_links":[],"categories":["\u003ca id=\"7bf0f5839fb2827fdc1b93ae6ac7f53d\"\u003e\u003c/a\u003e工具"],"sub_categories":["\u003ca id=\"32739127f0c38d61b14448c66a797098\"\u003e\u003c/a\u003e嗅探\u0026\u0026Sniff"],"readme":"**NOTE:** Saleae Logic version 2 breaks the built-in SPI analyzer export feature, meaning sniffROM currently only works with data exported from Logic version 1.x\n\nAs of 12/6/2023 it is unknown when this will be fixed.\n* https://discuss.saleae.com/t/logic-2-2-11/436/9\n* [Logic2 low-level analyzer export - transaction and packet missing](https://discuss.saleae.com/t/logic2-low-level-analyzer-export-transaction-and-packet-missing/1387)\n* [Packet ID always shows up as '0' in Logic 2 #12](https://github.com/saleae/i2c-analyzer/issues/12)\n\n\n# sniffROM\n\nA tool for passive data capture and reconnaissance of serial flash chips. It is used with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.\n\n* Supports \u003cb\u003eSPI\u003c/b\u003e and \u003cb\u003eI²C\u003c/b\u003e flash chips.\n* Preserves the actual memory addresses of captured data.\n* Generates a \u003cb\u003evisual map\u003c/b\u003e of the reconstructed binary image.\n* Generates a \u003cb\u003etiming plot\u003c/b\u003e of reads/writes to memory addresses. \n* Recognizes \u003cb\u003e100+\u003c/b\u003e (and currently parses \u003cb\u003e12\u003c/b\u003e) SPI flash commands from the following manufacturers:\n  * Atmel\n  * Eon\n  * Fidelix\n  * GigaDevice\n  * Macronix\n  * Numonyx \n  * Spansion\n  * SST\n  * Winbond\n\nSee the [Wiki](https://github.com/alainiamburg/sniffROM/wiki) for documentation\n```\nusage: sniffROM_new.py [-h] [--addrlen [{2,3,4}]] [--endian [{msb,lsb}]]\n                       [--filter [{r,w}]] [-o [O]] [--summary] [--data-map]\n                       [--timing-plot] [-v]\n                       input_file\n\nsniffROM - Reconstructs flash memory contents and extracts other data from\npassively sniffed commands in a Saleae logic analyzer capture file. Currently\nsupports SPI and I2C flash chips.\n\npositional arguments:\n  input_file            Saleae Logic SPI or I2C Analyzer Export File (.csv)\n\noptional arguments:\n  -h, --help            show this help message and exit\n  --addrlen [{2,3,4}]   set length of SPI memory address in bytes (default: 3)\n  --endian [{msb,lsb}]  set endianness of SPI memory bytes (default: msb)\n  --filter [{r,w}]      analyze only Read or Write commands (default: both)\n  -o [O]                flash image output file name (default: output.bin)\n  --summary             print summary of sniffed commands and metadata\n  --data-map            show visual data map\n  --timing-plot         show timing analysis\n  -v                    increase verbosity (up to -vvv)\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falainiamburg%2Fsniffrom","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Falainiamburg%2Fsniffrom","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falainiamburg%2Fsniffrom/lists"}