High-risk tools in Buspirate
8 of the 33 tools in Buspirate are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
enter_download_modeExecutePut target into UART download mode by toggling GPIO pins.
-
la_commandExecuteExecute a bus command on the terminal and capture FALA data.
-
la_prepareExecuteSwitch to FALA (Follow Along Logic Analyzer) mode and enter a bus
-
onewire_readExecuteSend arbitrary bytes on the 1-Wire bus and read back a response.
-
send_commandExecuteSend a command over UART and capture the response.
-
set_powerExecuteEnable or disable the power supply.
-
set_voltageExecuteSet power supply voltage (0.8-5.0V) and current limit (0-500mA).
-
spi_transferExecuteSend a raw SPI transaction. Write hex bytes and optionally read back.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.