Facedancer20

The Facedancer20 is the twenty-third hardware revision of the GoodFET, owing its heritage to the GoodFET41 and Facedancer11. Unlike the general-purpose GoodFET boards, the only purpose of this board is to allow USB devices to be written in host-side Python, so that one workstation can fuzz-test the USB device drivers of another host. This board replaces the MAX3420E of earlier Facedancers with a MAX3421E, allowing for optional host mode through a USB A receptacle.

See the Orders page for details on ordering PCBs. Assembled boards are not yet available.

Facedancer20

Further Reading

For more information on USB emulation and fuzzing, see Travis Goodspeed's article, Emulating USB Device with Python. A follow-up article describes emulating DFU to capture firmware updates.

CAD Files

Eagle CAD 6.x files for the design can be found in /branches/facedancer20 of the GoodFET subversion repository, or along with gerbers as facedancer20.zip.

Bill of Materials

The MSP430F2618TPM may be replaced with a 2617, 2619, 2417, 2418, or 2419 chip, provided that the $mcu variable is set.

Resistor values can be approximated, and the 1.0μF capacitors are probably unneeded. Be sure to get the 64 pin variant of the MSP430F2618, as 80-pin versions are also manufactured.

QuantityPackage
1SSOP28FT232RL
1QFP64MSP430F2618TPM
1TQFP32MAX3421E
206031.0μF Capacitors
306030.1μF Decoupling Capacitors
2060318pF Capacitors*
1HC49/UP**12MHz SMD Crystal, 18pF
306030603 LED
20603330R LED Series Resistors
2060333R USB Series Resistors
2USB Mini Receptacle Kobiconn 154-15320-E or FCI 10033526-N3212MLF or On Shore USB-M26FTR
1USB TYPE A SMT CONN RECEPT

* These should match the required capacitance of the crystal. 18pF is wrong, but close enough to work.

** The /US SMD package works as an alternative.

If you need help selecting parts, you can follow this example Digi-Key order, but be sure to replace the MAX3420 with a MAX3421. You will also need the USB Type A receptacle for Host Mode

Construction

Place the components as shown in the comments of this Flickr image. As this is a surface-mount design, be sure that you are familiar with such techniques or have assistance before beginning assembly. See the errata section for details on where to run fly-wires, as two pins were not connected in the PCB layout.

Facedancer20

See the GoodFET Tutorial for more detailed explanations.

Usage

Build and flash firmware with the following commands. This board self-flashes over USB through a masked-ROM bootloader, so there is no need for an external programmer.

export board=facedancer20
make clean install
goodfet.maxusbhid

See the GoodFET Tutorial for more detailed explanations.

Errata

In the MAX3421 chip, pins 3 and 19 should have been--but were not--wired to ground. This is fixed in the Facedancer21 board. To assemble a proper Facedancer11 board, you must manually fly-wire these chips to ground as shown in the picture below.

Facedance20 Erratum