Security & Privacy
Protocol Interfaces
FPGA Boards

Cynthion

A multi-tool for building, analyzing, and hacking USB devices

$280,207 raised

of $80,000 goal

350% Funded! Order Below

Available for pre-order.

$149 - $199

View Purchasing Options

Recent Updates

You'll be notified about news and stock updates for this project.

Making USB Accessible

Cynthion is an all-in-one tool for building, testing, monitoring, and experimenting with USB devices. Built around a unique FPGA-based architecture, Cynthion’s digital hardware can be fully customized to suit the application at hand. As a result, it can act as a no-compromise High-Speed USB protocol analyzer, a USB-hacking multi-tool, or a USB development platform.

Out-of-the-box, Cynthion acts as a USB protocol analyzer capable of capturing and analyzing traffic between a host and any Low-, Full-, or High-Speed ("USB 2.0") USB device. It works seamlessly with our open-source analysis software.

Combined with our LUNA gateware and Facedancer libraries, Cynthion becomes a versatile USB-hacking and development tool. Facedancer makes it quick and easy to create or tamper with real USB devices—not just emulations—even if you don’t have experience with digital-hardware design, HDL, or FPGA architecture!

Core Features

Cynthion is a fully reconfigurable test instrument that provides all the hardware, gateware, firmware, and software you will need to work with—and, indeed, to master—USB. Below are a few of the challenges to which you’ll be able to apply your Cynthion:

Packetry interface

Cynthion includes all of the hardware necessary for low-, full-, or high-speed USB protocol analysis – which means it can provide the same functionality as expensive commercial USB analyzers like the TotalPhase Beagle 480 or the LeCroy Mercury series.

Unlike existing USB solutions, however, Cynthion’s analyzer stack is built entirely upon powerful, open-source tooling. By leveraging the remarkable Amaranth gateware-generation library and ultra-fast open FPGA tools, You can customize Cynthion to the task at hand, which gives it access to unique features like user-defined hardware triggering and simultaneous capture of additional external or internal signals.

Cynthion uses the open-source Packetry analyzer frontend, which is a fast cross-platform tool for capturing, viewing and analyzing USB captures. Packetry helps make USB traffic more human-readable, whilst handling large high-speed captures smoothly and efficiently. Since Packetry is completely open source, you can customize it to your needs.

An Educational Platform for Learning About USB

A fully open-source set of training materials walk you through the basics of USB - including descriptions and diagrams of the basic elements of USB, such as USB Transfers pictured here.

A fully open-source set of training materials walk you through the basics of USB - including descriptions and diagrams of the basic elements of USB, such as USB Transfers pictured here. Click to expand.

The Cynthion team has a long history of USB education. We’ve developed a number of open-source USB trainings at varying difficulty levels. Over the course of this campaign, we will develop and maintain additional Cynthion-specific material that will help you learn how to work with—and hack on—USB.

Cynthion’s customizable architecture allows you to do more than just watch the packets fly by. Using Cynthion, you can reach out and touch USB traffic at every level. It’s a lot easier to learn how something works when you can take it apart, poke around inside it, and manipulate it in clever ways. Cynthion gives you that level of control.

Easily Create Your Own USB Designs

Cynthion was built from the ground-up to facilitate the process of creating new USB devices. Whether you’re a veteran low-level hardware designer or completely new to this, Cynthion will make your life easier in several ways.

First of all, its Facedancer backend allows you to describe entire custom USB devices quickly, using just a few lines of Python, so you can try them out right away on real hardware. And, to help you get started, Facedancer comes with a collection of existing device templates:

# Using a Facedancer pre-made device, you can create a
# "USB rubber ducky" with only a few lines of python!

device = USBKeyboardDevice()
async def type_letters():
    await device.type_string('r', modifiers=KeyboardModifiers.MOD_LEFT_META)
    await asyncio.sleep(0.5)
    await device.type_string('calc\n')
main(device, type_letters())

And, for those with an interest in FPGA design, the LUNA gateware’s unique Amaranth library makes it almost trivial to implement USB gateware. Have a look at our library of examples and start building your own gateware devices in no time!

Transparently Manipulate USB Data

Cynthion is as useful when working with existing USB devices as it is when designing new ones. By giving you the ability to inject or modify USB data transparently—on the fly—it allows you to do things that would otherwise be impossible. And its support for Facedancer’s USBProxy means that manipulating USB data on the wire is as easy as writing a few lines of Python:

# USBProxy makes manipulating USB data trivial!
# The following few lines are enough to flip the X-axis
# on a Nintendo-branded USB game controller:

class SwitchControllerInvertXFilter(USBProxyFilter):
    def filter_in(self, ep_num, data):
        # The fourth byte of our packets contains the
        # joystick X position, as a number between 0 and 255.
        data[3] = 0xff - data[3]
        return en_num, data

Cynthion’s USB peripherals are customized for each USBProxy application, so you’re not restricted to certain USB device configurations. It is theoretically possible to proxy just about any USB device in existence!

Tools for Reverse Engineering & Security Research

As a Great Scott Gadgets (GSG) product Cynthion was designed from the beginning to enable new and innovative research, but it also supports a multitude of security and reverse-engineering applications:

Technical Specifications

Milled-Aluminum Enclosure

To protect your Cynthion while in use, we’ve commissioned an expert designer to create a beautiful and robust milled-aluminum enclosure that completely surrounds and protects Cynthion’s electronics:

3D render of Cynthion in its CNC-milled aluminum enclosure

Each case will be precisely CNC-milled from solid aluminum, then anodized for a sleek, matte-black surface finish. The case design features an intricate internal pattern tailored exactly to the Cynthion it will contain. This customization maximizes case density for robust protection and an unusually solid feel – without compromising Cynthion’s tiny size or light weight.

During the campaign, Cynthion can be purchased with or without its enclosure.

Comparisons

CynthionBeagle USB 12Beagle USB 480USB Explorer 200OpenVizslaPhyWhisperer-USBGreatFET One
Low-/Full-Speed SupportY Y Y Y Y Y Y
High Speed SupportY N Y Y Y Y N
USB Analysis SupportedY Y Y Y Y limited N
External Buffer DRAMY N Y Y Y N N
Advanced Analysis TriggeringY N Limited Limited N Y N
Supports User USB DesignsY N N N Unofficial ¹ Unofficial ¹ Y
Facedancer SupportY N N N N N Full-speed only
MITM SupportY N N N N N Limited
USB Device-capable ports ²3 0 0 0 1 1 1
USB Host-capable ports ³1 0 0 0 0 0 1
Target Power ControlY N N N N Y Host mode only
Extra/User I/O16 (PMOD) 0 4 (mini-DIN connector) 0 22 (0.1" header) 12 (CW connector) 100 (0.1" header)
LEDS / Unique Colors11 / 9 1 / 1 3 / 2 3 / 1 3 / 2 5 / 3 4 / 2
Onboard Debug Hardware Y N N N UART only UART only Y
Standalone Operation Capable Y N N N N N Limited
User-Customizable FPGAY N N N Y Y N/A
usbc.tf Training MaterialsY N N N N N Y
Open HW/FW/SWY N N N Y Y Y
Open ToolchainY N N N N (ISE) N (Vivado) Y (non-FPGA)
Size EquivalentSaltine cracker or 7x7 LEGO® tile Deck of cards HackRF One Two bricks HackRF One Deck of cards Deck of cards
Cost (USD or USD equivalent)$149 $495 $1,295 $1,599 $180 $250 $89

¹ By replacing official gateware with LUNA’s open gateware
² Via LUNA Gateware, TinyUSB SoC, or Facedancer
³ Via FPGA Gateware
To debug USB/FPGA designs
For user gateware or firmware designs
No longer directly available (price from a third-party manufacturing the open design)

Support & Documentation

The Cynthion project—including its hardware and LUNA gateware, firmware, and software—has been developed and enhanced in the open on GitHub.You can view its annotated hardware designs on GitHub, and its developer documentation on Read The Docs.

We welcome questions and discussion in the Cynthion Discord Channel.

Manufacturing Plan

Great Scott Gadgets has a long history of working with electronics manufacturers in the United States and in China. We have developed working relationships with several contract manufacturers in China, and we trust them to manufacture and assemble Cynthion’s electronics and enclosures. We are working closely with a number of distributors and vendors—including Lattice Semiconductor, who manufactures Cynthion’s core FPGA—to accelerate component acquisition so Cynthion can be manufactured as quickly as possible under current supply-chain conditions. We’ll keep you up to date on manufacturing developments as they occur! Updates will be sent via email to campaign subscribers.

Fulfillment & Logistics

Cynthion hardware and enclosures will be manufactured, assembled, and tested by our contract manufacturers in China, after which they will be shipped to Mouser Electronics, Crowd Supply’s fulfillment partner, for global distribution. More information about ordering, payment, and shipping is available from Crowd Supply, as are details about international fulfillment.

Risks & Challenges

The global electronics supply chain is experiencing an unprecedented chip shortage that makes it significantly more difficult to get concrete estimates about manufacturing time lines. While we’re confident in our ability to produce Cynthion’s electronics, industry-wide uncertainty regarding component lead times means that there’s a non-negligible risk of delivery delays.

To reduce the effects of the chip shortage as much as possible, we’ve been working directly with our suppliers, manufacturers, and critical-component vendors—including Lattice Semiconductor—to ensure we can acquire the necessary components as soon as possible. We’ve made arrangements to ensure the manufacturing process will start as soon as possible once all necessary components are on hand.

Electronics manufacturing always comes with associated risks. Fortunately, Great Scott Gadgets has significant experience delivering open-source hardware during periods of supply uncertainty. We are confident in our ability to resolve any issues that might arise.

In the Press

Hackster News

"Analyze, emulate, and hack USB devices with an inexpensive tool from Great Scott Gadgets."

CNX Software

" LUNA [is] a “multi-tool for building, analyzing, and hacking USB devices” based on a Lattice Semiconductor LFE5U-12F ECP5 FPGA that raised over $100,000 in a few days."

Geeky Gadgets

"Developers looking for a versatile multitool for building, analyzing and hacking USB devices may be interested in LUNA. An all-in-one tool specifically designed for building, testing, monitoring, and experimenting with USB devices"


Ask a Question

Produced by Great Scott Gadgets in Evergreen, CO.

Sold and shipped by Crowd Supply.

Cynthion

A Cynthion board in a beautiful, robust, CNC-milled, anodized-aluminum enclosure

$199 $8 US Shipping / $18 Worldwide

Cynthion Board Without Enclosure

A Cynthion USB multi-tool without enclosure

$149 $8 US Shipping / $18 Worldwide

About the Team

Great Scott Gadgets

Evergreen, CO  ·   greatscottgadgets.com

Great Scott Gadgets puts open source tools into the hands of innovative people. Our goal is to enable you to do things no one has done before.

Martin Ling
 martinling
Elizabeth Hendrex
 epenelope
Michael Ossmann
 mossmann
Straithe
 straithe
Mike Walters
Taylor Streetman
 yhetti
Antoine van Gelder

See Also

Subscribe to the Crowd Supply newsletter, highlighting the latest creators and projects