JTAG and Chip-Off Tools and Equipment

From ForensicsWiki
Jump to: navigation, search

The following list contains equipment used for performing JTAG and chip-off analysis. It is noted when equipment is used for both procedures in order to avoid overlap and duplication of equipment. The URL's provided are for reference and other vendors and suppliers exist for said equipment. Please search Internet for other competitive vendors.

Note: This equipment is not a definitive list and substitutions can be made for equivalent tools and equipment.

JTAG and Chip-Off Equipment List

Item Info Estimated Cost (CAD)
iSeasamo Phone Opening Tool http://www.fonefunshop.co.uk/cable_picker/97424_iSesamo_Opening_Tool.html £6
iSeasamo Phone Opening Tool http://teeltechcanada.com/equipment/ 3 CAD
Carton SPZT-50PG Microscope (optional: w/trinocular) http://valleymicroscope.com/shop/spz-50pg/ $1200
BK-30A Microscope w/lamp http://teeltechcanada.com/equipment/ ~200 CAD
Xytronic 988D Solder Rework Station http://www.howardelectronics.com/xytronic/988d.html $300
T862D REWORK STATION http://teeltechcanada.com/equipment/jtagchipoffisp-tools/t862d-rework-station/ ~ $300 CAD
Weller WES51 Solder Station sourced locally (Electronics shop) $100
FEITA DIGITAL INSPECTION STATION http://teeltechcanada.com/equipment/feita-digital-inspection-station/ $ 380 CAD
Xytronic LF-852D Hot Air Station http://www.howardelectronics.com/xytronic/LF-852D.html $225
HP Agilent U8002A Variable Power Supply http://www.home.agilent.com/agilent/product.jspx?pn=u8002a&cc=CA&lc=eng $400
Amprobe 35XP Multimeter sourced locally (Electronics shop) $120
Magnifying Desk Lamp http://www.fonefunshop.co.uk/cable_picker/600_Professional_Table_Lamp_With_10_Time_Magnifier.html £40
Circuit board holder http://www.fonefunshop.co.uk/cable_picker/98201_PCB_Holder.html £5
Circuit board holder http://teeltechcanada.com/equipment/ ~ 5.00 CDN
Chip Epoxy Glue Remover http://www.ebay.com/itm/BGA-IC-30ml-IC-BGA-CPU-Chip-Epoxy-Glue-Remover-Adhesive-Solution-Solvent-Liquid-/321012736931?pt=Digital_Camera_Accessories&hash=item4abdd9a3a3 $10
0.040 gauge transformer winding wire sourced locally (Electronics shop) $15
0.040 gauge Advanced Enameled Wire (0.09mm) http://teeltechcanada.com/equipment/ 5 roll $1.00 CAD
30AWG Gauge Wrapping Wire - 9 colors 100 Ft. roll each http://teeltechcanada.com/equipment/ ~90.00 CDN
Kester 44 rosin flux solder sourced locally (Electronics shop) $50
Xcelite Hobby Knives sourced locally (Electronics shop) $15
Terra Dexterity PVC foam gloves sourced locally (Costco) $10
Richard 13321 blades sourced https://www.acklandsgrainger.com/AGIPortalWeb/WebSource/ProductDisplay/globalProductDetailDisplay.do?item_code=RCH13321 ~$10
HAKKO Omnivise C1390C Handle https://multi-com.eu/shrt-DOuv7ERkA 59 EUR
eMMC SCP-6 Platform https://multi-com.eu/shrt-9VO20fDx 22 EUR
BGA PMTC Sn63pb37 balls 0,35mm 12500 pcs https://multi-com.eu/shrt-wsgZAFebz 3.5 EUR
BGA PMTC Sn63pb37 balls 0,30mm 12500 pcs https://multi-com.eu/shrt-6XueZmYY 3,5 EUR
Stencil Direct BGA for eMMC 153/169 https://multi-com.eu/shrt-DYvLsqOdj 8 EUR
Stencil Direct BGA for eMMC 162/186 https://multi-com.eu/shrt-BbkGx3a2v 8 EUR
Stencil Direct BGA for eMMC/eMCP 221 https://multi-com.eu/shrt-PHnHUQ81c 8 EUR
Stencil Direct BGA for eMMC 529 https://multi-com.eu/shrt-rEDf77mMZ 8 EUR
BGA stencil for Samsung S7 (SM-G930F) https://multi-com.eu/shrt-ryvmlxmmM 6.20 EUR
BGA stencil for Samsung S6 Edge (SM-G925F) https://multi-com.eu/shrt-ZUSWn6UJ4 6,20 EUR
BGA stencil for Samsung S6 (SM-G920F) https://multi-com.eu/shrt-SJvvlLDs6 6,20 EUR
BGA stencil for Samsung Galaxy S5 (SM-G900F) https://multi-com.eu/shrt-NKSledHMz 6.20 EUR
BGA stencil for Samsung Galaxy S4 (i9505) https://multi-com.eu/shrt-zypMRksPB 6.20 EUR
BGA stencil for Samsung Galaxy S4 (i9500) https://multi-com.eu/shrt-eOAWZpv 6,20 EUR
Ultra thin jumper wire/Copper spool wire 0.02mm/50m https://multi-com.eu/shrt-8Vfgy5KDa 6,50 EUR
Desoldering Tape 80-2-5 Chemtronics Solder-Wick 1.5mm / 1.5m https://multi-com.eu/shrt-jyfPDsUBG 4,99 EUR
Isopropanol with sprayer 99.9% capacity of 150ml https://multi-com.eu/shrt-68GYj9tj 1,10 EUR
Anti-static mat PROSKIT 8BM-405A 60x120 cm https://multi-com.eu/shrt-RKnvCEqDi 36 EUR
Silicone service mat MAT-001 25x35cm https://multi-com.eu/shrt-shQZmRJlh 9,50 EUR
13in1 spatula for removing and work with BGAs (Jabe) https://multi-com.eu/shrt-4ldEVBltM 25 EUR
Precision scalpel/ penknife with 10 removable blades https://multi-com.eu/shrt-tjwn2AeL5 7 EUR
Precision tweezer straight and narrow Rhino RH-11 https://multi-com.eu/shrt-gQMvZJrKa 10 EUR
Ceramic Tweezers / Tweezers VETUS - T2 https://multi-com.eu/shrt-J6QmzXKK 10 EUR
Solder Fume Extractor ZD-153 https://multi-com.eu/shrt-jJKs1dJyk 22 EUR
Quick 6101 Fume Extractor https://multi-com.eu/shrt-Ykqc8076p 479 EUR
Air Ionizer Dr. Schneider SL-001 https://multi-com.eu/shrt-J4MuEP1cM 105 EUR
8" x 8" x 3/8" steel plate sourced locally (Steel fabrication shop) free

JTAG Specific Equipment List

Item Info Estimated Cost (CAD)
RIFF Box http://www.fonefunshop.co.uk/Unlocking/riff_box.htm Approx £130
RIFF Box w/ISP http://teeltechcanada.com/equipment/jtag-flasher-boxes/riff-box/ Approx 230.00 CDN
RIFF Box 2 (JTAG and EMMC) https://multi-com.eu/shrt-umy50YIiG 159 EUR
Octoplus Box http://www.fonefunshop.co.uk/cable_picker/98824_Octoplus_Box_With_Samsung_LG_and_JTAG_Activation.html Approx. £270
Octoplus JTAG Box (JTAG) https://multi-com.eu/shrt-BCfTRSQlD 149 EUR
Octoplus Box Cables/JTAG/LG/SAM http://teeltechcanada.com/equipment/jtag-flasher-boxes/octoplus-box/ Approx. 450.00 CDN
Z3X Easy-Jtag Box http://www.fonefunshop.co.uk/cable_picker/97487_Z3X_Easy-Jtag_Box.html Approxx £130
Easy JTAG Z3X Box (JTAG and EMMC) https://multi-com.eu/shrt-9VJ7td493 149 EUR
Z3X Easy-Jtag Box http://teeltechcanada.com/equipment/jtag-flasher-boxes/z3x-easy-jtag-box/ ~ 225.00 CAD
GPGEMMC Box http://www.fonefunshop.co.uk/cable_picker/97506_GPGEMMC_Box.html Approx. £160
GPG JTAG Box (JTAG PRO) https://multi-com.eu/shrt-rF5Y17ygT 135 EUR
ATF (Advance Turbo Flasher) http://www.fonefunshop.co.uk/cable_picker/96545_ATF_Nitro_(Advance_Turbo_Flasher_Nitro_Pre-Activated_With_ATF_Network_Account).html Approx. £110
ATF (Advance Turbo Flasher) http://teeltechcanada.com/equipment/jtag-flasher-boxes/atf-advance-turbo-flasher/ ~ 200.00 CDN
ATF GOLD (Advance Turbo Flasher for JTAG, EMMC, SPI) https://multi-com.eu/shrt-eMByEzFy 159 EUR
GPGJTAG Box (Jtag Pro) http://www.fonefunshop.co.uk/cable_picker/96415_GPGJTAG_Box_(Jtag_Pro).html Approx. £120
GPGJTAG Box (Jtag Pro) http://teeltechcanada.com/equipment/jtag-flasher-boxes/gpg-jtag-box-jtag-pro/ ~ 190.00 CDN
ORT Box http://www.fonefunshop.co.uk/cable_picker/95814_GPGORT_(Bulit_with_Omnia_Repair_Tool_DNA_).html Approx. £140
OMNIA REPAIR TOOL (ORT) JTAG PRO EDITION http://teeltechcanada.com/equipment/jtag-flasher-boxes/omnia-repair-tool-ort-jtag-pro-edition/ ~ 175.00 CAD
ORT JTAG Pro with EMMC Booster (JTAG and EMMC) https://multi-com.eu/shrt-CtwRi9jbK 149 EUR
MEDUSA PRO eMMC Edition http://teeltechcanada.com/equipment/jtag-flasher-boxes/medusa-pro/ ~ 250.00.00 CAD
Medusa Pro Box (JTAG and EMMC) https://multi-com.eu/shrt-EZulxq5x 159 EUR
Medusa Box http://www.fonefunshop.co.uk/cable_picker/95798_Medusa_Box.html Approx £155
UFI BOX (JTAG, EMMC, SPI) https://multi-com.eu/shrt-cywZ3uIue 299 EUR
Programmer UFS / eMMC / eMCP NuProg-E https://multi-com.eu/shrt-tM9BbwHX1 1149 EUR

Add-On Tools / Adapters For JTAG Specific Equipment List

Item Info Estimated Cost (CAD)
E-Mate E-Socket 5-in-1 High Speed EMMC Programmer for ATF - Z3x-Pro - GPGEMMC http://www.fonefunshop.co.uk/cable_picker/98324_E-Mate_E-Socket_5-in-1_High_Speed_EMMC_Programmer_for_ATF_-_Z3x-Pro_-_GPGEMMC.html Approx £160
E-Mate Pro eMMC Tool MoorC v2 https://multi-com.eu/shrt-Yeh3t5Zph 129 EUR
BGA Adapter 162 For GPGEMMC Box http://www.fonefunshop.co.uk/cable_picker/97948_BGA_Adapter_162_For_GPGEMMC_Box.html Approx. £64
BGA Adapter 169E For GPGEMMC Box http://www.fonefunshop.co.uk/cable_picker/97949_BGA_Adapter_169E_For_GPGEMMC_Box.html Approx. £64
BGA221 Adapter Socket For E-Mate Box - Riff Box - GPGEMMC Box http://www.fonefunshop.co.uk/cable_picker/99340_BGA221_Adapter_Socket_For_E-Mate_Box_-_Riff_Box_-_GPGEMMC_Box.html Approx. £90
MOORC JTAG-ISP Adapter 5-in-1 For ATF, Riff, Medusa etc. http://www.fonefunshop.co.uk/cable_picker/99009_MOORC_JTAG-ISP_Adapter_5-in-1.html Approxx £25
ATF EMMC Test Point Finder http://www.fonefunshop.co.uk/cable_picker/99070_ATF_EMMC_Test_Point_Finder.html Approx. £160
Universal JTAG/eMMC/FBUS JE-02 adapter https://multi-com.eu/shrt-1LRdjoD4f 15 EUR
Set of Universal JTAG adapters VF-JIG for VR-Table - 11R https://multi-com.eu/shrt-4xQHA1ch 219 EUR
Adapter eMMC/JTAG for Riff BOX 2 - RC2000 https://multi-com.eu/shrt-05fPVWcCP 10 EUR
JTAG Finder http://www.fonefunshop.co.uk/cable_picker/98093_JTAG_Finder.html Approx. £90
EMMC Z3X Jtag Pro 3 in 1 Adapter http://www.fonefunshop.co.uk/cable_picker/98025_EMMC_Z3X_Jtag_Pro_3_in_1_Adapter.html Approx. £20
Universal JTAG Interface http://www.fonefunshop.co.uk/cable_picker/95869_Universal_JTAG_Interface.html Approx. £5
Universal Jtag Cable With Labeled Wires http://www.fonefunshop.co.uk/cable_picker/96614_Universal_Jtag_Cable_With_Labeled_Wires.html Approx. £5
SD-EMMC Plus Adapter - Model SE-P1 https://multi-com.eu/shrt-iLrv4Jo0J 12 EUR
Frames / Limiters adapters for BGA (spacer) https://multi-com.eu/shrt-QLo4A3gFd 10 EUR
Probe Cable For Riff Box Manually locate jtag lines for unsupported devices - http://www.fonefunshop.co.uk/cable_picker/98043_Probe_Cable_For_Riff_Box.html Approx £5
Powered Mini USB - Micro USB Cable For Repair and Jtag Power phones and dump via usb while phone disassembled - http://www.fonefunshop.co.uk/cable_picker/98057_Powered_Mini_USB_-_Micro_USB_Cable_For_Repair_and_Jtag.html Approx £10
Fonefunshop Test Point Box http://www.fonefunshop.co.uk/cable_picker/286_Fonefunshop_Test_Point_Box.html Approx £30
JTAG AMOI adapters https://multi-com.eu/shrt-QlZHD70PS ~8-15 EUR
JTAG DELL adapters https://multi-com.eu/shrt-oBHcKhgVM ~8-15 EUR
JTAG BenQ-Siemens adapters https://multi-com.eu/shrt-Slmpqmm8 ~8-15 EUR
JTAG Toshiba adapters https://multi-com.eu/shrt-Gsx2ifoA6 ~8-15 EUR
Jtag Adapters For HTC http://www.fonefunshop.co.uk/Unlocking/sagemjigs.htm#htc Approx £9 - £15
JTAG HTC adapters https://multi-com.eu/shrt-MTPwlRJ3p ~8-15 EUR
JTAG Huawei adapters https://multi-com.eu/shrt-7zXhKjifd ~8-15 EUR
JTAG LG adapters https://multi-com.eu/shrt-e4AduICO ~8-15 EUR
JTAG Motorola adapters https://multi-com.eu/shrt-In6l6zNmv ~8-15 EUR
JTAG Nokia adapters https://multi-com.eu/shrt-ce1uaw3b2 ~8-15 EUR
JTAG Panasonic adapters https://multi-com.eu/shrt-CgcNOynVQ ~8-15 EUR
JTAG Sagem adapters https://multi-com.eu/shrt-eZ1IGoO0v ~8-15 EUR
Jtag Adapters For Samsung http://www.fonefunshop.co.uk/Unlocking/sagemjigs.htm#samsung Approx £9 - £15
JTAG Samsung adapters https://multi-com.eu/shrt-hrhxxMdv4 ~8-15 EUR
JTAG Sendo adapters https://multi-com.eu/shrt-WCxdK690R ~8-15 EUR
Jtag Adapters For Sony / SonyEricsson http://www.fonefunshop.co.uk/Unlocking/sagemjigs.htm#se Approx £9 - £15
JTAG Sony adapters https://multi-com.eu/shrt-RS5Utfpw ~8-15 EUR
JTAG SonyEricsson adapters https://multi-com.eu/shrt-7HEUvbhq0 ~8-15 EUR
JTAG ZTE adapters https://multi-com.eu/shrt-keDsKh3K ~8-15 EUR
Jtag Adapters For Other models http://www.fonefunshop.co.uk/Unlocking/sagemjigs.htm#other Approx £9 - £15

eMMC ISP Specific Equipment List

Item Info Estimated Cost (CAD)
VR-TABLE Forensic Tool for JTAG/EMMC/FBUS Tool http://vr-table.com ~899-1200 EUR
Inspection camera for VR-Table - VGA 2Mpx with holder https://multi-com.eu/shrt-dbgo7ckfp 229 EUR
Universal eMMC PullUp PU cable for ISP eMMC to VR-Table https://multi-com.eu/shrt-3uakwxlCJ 20 EUR
Set of 10 high-precision probes with movable pins VR-064 1mm / 69mm to VR-Table https://multi-com.eu/shrt-lwSCDEro 89 EUR
Set of 10 ultra high-precision probes VR-070m 0,50mm/73mm to R-Table https://multi-com.eu/shrt-8dUoankmt 99 EUR
Set of 10 standard probes VR-070 1mm/73mm to VR-Table https://multi-com.eu/shrt-yrCK6Uh1 30 EUR
Adapter EMMC for Riff BOX - RC1000 https://multi-com.eu/shrt-MMxr5shud 25 EUR
Adapter EMMC/JTAG ATF v2 5in1 GPG https://multi-com.eu/shrt-Yt3fJHdtg 20 EUR
EMMC adapter for Easy Z3x JTAG Box https://multi-com.eu/,details,id_pr,13278,key,emmc-adapter-for-easy-z3x-jtag-box,smenu,forensic_tools.html 12 EUR

Chip-Off Specific Equipment List

Item Info Estimated Cost (CAD)
Wagner HT1000 Heat Gun http://www.wagnerspraytech.com/portal/ht1000_en_spray,362096,358970.html $30
Heat Gun stand http://www.ibreakityoufixit.com/shop/air-gun-holder $60
UP-828 Programmer http://www.fonefunshop.co.uk/cable_picker/98622_UP-828_Programmer.html Approx. £1,400
UP-828 Adapter VBGA529 Galaxy Note 4 - http://www.fonefunshop.co.uk/cable_picker/99471_UP-828_Adapter_VBGA529.html Approx. £470
UP-828 Adapter BGA110 http://www.fonefunshop.co.uk/cable_picker/98694_UP-828_Adapter_BGA110.html Approx. £260
UP-828 Adapter BGA88 - U08881 http://www.fonefunshop.co.uk/cable_picker/99429_UP-828_Adapter_BGA88_-_U08881.html Approx. £200
UP-828 Adapter FBGA167 http://www.fonefunshop.co.uk/cable_picker/98625_UP-828_Adapter_FBGA167.html Approx. £290
UP-828 Adapter FBGA63 U08631 http://www.fonefunshop.co.uk/cable_picker/98822_UP-828_Adapter_FBGA63_U08631.html Approx. £150
UP-828 Adapter SBGA152 Blackberry - http://www.fonefunshop.co.uk/cable_picker/98624_UP-828_Adapter_SBGA152.html Approx. £372
UP-828 Adapter SBGA199 http://www.fonefunshop.co.uk/cable_picker/98720_UP-828_Adapter_SBGA199.html Approx. £340
UP-828 Adapter U11371 FBGA137 http://www.fonefunshop.co.uk/cable_picker/99231_UP-828_Adapter_U11371_FBGA137.html Approx. £265
UP-828 Adapter VBGA169E BlackBerry and Android - http://www.fonefunshop.co.uk/cable_picker/98719_UP-828_Adapter_VBGA169E.html Approx. £320
UP-828 Adapter VBGA221 - U05221 http://www.fonefunshop.co.uk/cable_picker/99370_UP-828_Adapter_VBGA221_-_U05221.html Approx. £330
UP-828 Adapter VBGA40 http://www.fonefunshop.co.uk/cable_picker/98623_UP-828_Adapter_VBGA40.html Approx. £240
UP-828 Adapter VBGA133 iPhone 4 Approx. $600 - $1000 depending on source
Sireda eMMC Burn-In Socket (size 11 x 10mm) http://www.fonefunshop.co.uk/cable_picker/98728_Sireda_eMMC_Burn-In_Socket_(size_11_x_10mm).html Approx. £168
Sireda eMMC Burn-In Socket (size 11.5 x 13mm) http://www.fonefunshop.co.uk/cable_picker/98726_Sireda_eMMC_Burn-In_Socket_(size_11.5_x_13mm).html Approx. £168
Sireda eMMC Burn-In Socket (size 12 x 16mm) http://www.fonefunshop.co.uk/cable_picker/98708_Sireda_eMMC_Burn-In_Socket_(size_12_x_16mm).html Approx. £168
Sireda eMMC Burn-In Socket (size 12 x 18mm) http://www.fonefunshop.co.uk/cable_picker/98729_Sireda_eMMC_Burn-In_Socket_(size_12_x_18mm).html Approx. £168
Sireda eMMC Burn-In Socket (size 14 x 18mm) http://www.fonefunshop.co.uk/cable_picker/98727_Sireda_eMMC_Burn-In_Socket_(size_14_x_18mm).html Approx. £168


1. The UP-828 driver is not signed and therefore doesn't work by default in Windows 7 64-bit. The programmer is identified as a as a Cypess Semiconductor Corp. CY7C68013. The signed Windows 7 64-bit driver can be installed by downloading and installing the Cypress EZ-USB FX2LP Development Kit, then using the CyUSB.sys driver found in '<installdir>\CY3684_EZ-USB_FX2LP_DVK\1.0\Drivers\cyusbfx1_fx2lp' for the UP-828 programmer.