Unified hardware reverse engineering framework. Extract all information from any system through signals and data. Unknown protocol discovery, state machine extraction, CRC recovery, security analysis. 16+ protocols, IEEE-compliant measurements.
Project description
Oscura
Unified hardware reverse engineering framework. Extract all information from any system through signals and data.
What is Oscura?
Oscura is a hardware reverse engineering framework for security researchers, right-to-repair advocates, defense analysts, and commercial intelligence teams. From oscilloscope captures to complete system understanding.
Reverse Engineering: Unknown protocol discovery • State machine extraction • CRC/checksum recovery • Proprietary device replication • Security vulnerability analysis
Signal Analysis: IEEE-compliant measurements (181/1241/1459/2414) • Comprehensive protocol decoding (16+ protocols) • Spectral analysis • Timing characterization
Built For: Exploitation • Replication • Defense analysis • Commercial intelligence • Right-to-repair
Installation
# Using uv (recommended)
uv pip install oscura
# Or with pip
pip install oscura
# Development install (RECOMMENDED)
git clone https://github.com/oscura-re/oscura.git
cd oscura
./scripts/setup.sh # Complete setup (dependencies + hooks)
./scripts/verify-setup.sh # Verify environment is ready
Quick Start
import oscura as osc
# Load oscilloscope capture
trace = osc.load("capture.wfm")
# Basic measurements
print(f"Frequency: {osc.frequency(trace) / 1e6:.3f} MHz")
print(f"Rise time: {osc.rise_time(trace) * 1e9:.1f} ns")
# Decode protocol
from oscura.protocols import UARTDecoder
decoder = UARTDecoder(baud_rate=115200)
messages = decoder.decode(trace)
Learn by Example
Demos are the documentation. Each category includes working code with comprehensive explanations.
Core Capabilities
| Demo | Description |
|---|---|
| 01_waveform_analysis | Load and analyze Tektronix, Rigol, LeCroy captures |
| 02_file_format_io | CSV, HDF5, NumPy, custom binary formats |
| 03_custom_daq | Streaming loaders for custom DAQ systems |
| 04_serial_protocols | UART, SPI, I2C, 1-Wire decoding |
| 05_protocol_decoding | Protocol auto-detection and decoding |
| 06_udp_packet_analysis | Network packet capture and analysis |
Advanced Analysis
| Demo | Description |
|---|---|
| 07_protocol_inference | State machine learning, CRC reverse engineering |
| 08_automotive_protocols | CAN, CAN-FD, LIN, FlexRay analysis |
| 09_automotive | OBD-II, UDS, J1939 diagnostics |
| 10_timing_measurements | Rise/fall time, duty cycle (IEEE 181) |
| 11_mixed_signal | Analog + digital combined analysis |
| 12_spectral_compliance | FFT, THD, SNR, SINAD (IEEE 1241) |
| 13_jitter_analysis | TIE, RJ/DJ, eye diagrams (IEEE 2414) |
| 14_power_analysis | DC-DC, ripple, efficiency (IEEE 1459) |
| 15_signal_integrity | TDR, S-parameters, setup/hold timing |
| 16_emc_compliance | CISPR, FCC, MIL-STD testing |
| 17_signal_reverse_engineering | Complete unknown signal analysis |
| 18_advanced_inference | Bayesian inference, Protocol DSL |
| 19_complete_workflows | End-to-end reverse engineering |
Run Your First Demo
# Generate demo data
python demos/generate_all_demo_data.py
# Run a demo
uv run python demos/01_waveform_analysis/comprehensive_wfm_analysis.py
Key Features
Protocols (16+)
UART • SPI • I2C • 1-Wire • CAN • CAN-FD • LIN • FlexRay • JTAG • SWD • Manchester • Miller • USB • HDLC • I2S • MDIO • DMX512
File Formats (18+)
Tektronix WFM • Rigol WFM • LeCroy TRC • Sigrok • VCD • CSV • NumPy • HDF5 • MATLAB • WAV • JSON • BLF • MF4 • PCAP • PCAPNG
Standards Compliance
IEEE 181-2011: Rise/fall time, pulse width, overshoot
IEEE 1241-2010: SNR, SINAD, THD, SFDR, ENOB
IEEE 1459-2010: Power factor, harmonics, efficiency
IEEE 2414-2020: TIE, period jitter, RJ/DJ
Command Line Interface
# Characterize signal measurements
oscura characterize capture.wfm
# Decode protocol
oscura decode uart.wfm --protocol uart
# Batch process multiple files
oscura batch '*.wfm' --analysis characterize
# Compare two signals
oscura compare before.wfm after.wfm
# Interactive shell
oscura shell
See CLI Reference for complete documentation.
Contributing
We welcome contributions! See CONTRIBUTING.md for development setup and guidelines.
# Quick setup
git clone https://github.com/oscura-re/oscura.git
cd oscura
uv sync --all-extras
./scripts/setup/install-hooks.sh
# Run tests
./scripts/test.sh
# Quality checks
./scripts/check.sh
Documentation
- Demos - Start here (working examples)
- API Reference - Complete API documentation
- CLI Reference - Command line usage
- Testing Guide - Test suite architecture
- CHANGELOG - Version history
License
MIT License - see LICENSE for details.
Citation
If you use Oscura in research:
@software{oscura,
title = {Oscura: Signal Reverse Engineering Toolkit},
author = {Oscura Contributors},
year = {2026},
url = {https://github.com/oscura-re/oscura}
}
Machine-readable: CITATION.cff
Support
- GitHub Issues - Bug reports and feature requests
- Discussions - Questions and community
Oscura • Reverse engineer any system from captured waveforms
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file oscura-0.3.0.tar.gz.
File metadata
- Download URL: oscura-0.3.0.tar.gz
- Upload date:
- Size: 1.6 MB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
bd85cc4b82e19bf9ab7536f74aaefb3c6d6e1dd99b711f98ed2388d662a36b31
|
|
| MD5 |
5a7ffb48000ccc4762ce6afc19a8f3df
|
|
| BLAKE2b-256 |
be95fe3844db5dc05bb56ac5a8e404e1c7d111beb60630bb96cbec856528a64f
|
Provenance
The following attestation bundles were made for oscura-0.3.0.tar.gz:
Publisher:
release.yml on oscura-re/oscura
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
oscura-0.3.0.tar.gz -
Subject digest:
bd85cc4b82e19bf9ab7536f74aaefb3c6d6e1dd99b711f98ed2388d662a36b31 - Sigstore transparency entry: 836285984
- Sigstore integration time:
-
Permalink:
oscura-re/oscura@de4655be93e8f24b64071baff89a3bd8dfeac996 -
Branch / Tag:
refs/tags/v0.3.0 - Owner: https://github.com/oscura-re
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@de4655be93e8f24b64071baff89a3bd8dfeac996 -
Trigger Event:
push
-
Statement type:
File details
Details for the file oscura-0.3.0-py3-none-any.whl.
File metadata
- Download URL: oscura-0.3.0-py3-none-any.whl
- Upload date:
- Size: 1.6 MB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
e03f8f3485fd83d55f1893bc15b260d5f766b1c74e894401bd6c83f3d5f0652f
|
|
| MD5 |
d269559fdb4237144667cca0dcff4bbc
|
|
| BLAKE2b-256 |
b960ac7e2fcd7239c35c73ff70feb7c9623267e4021ea15bfaced26ebe38bbee
|
Provenance
The following attestation bundles were made for oscura-0.3.0-py3-none-any.whl:
Publisher:
release.yml on oscura-re/oscura
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
oscura-0.3.0-py3-none-any.whl -
Subject digest:
e03f8f3485fd83d55f1893bc15b260d5f766b1c74e894401bd6c83f3d5f0652f - Sigstore transparency entry: 836286004
- Sigstore integration time:
-
Permalink:
oscura-re/oscura@de4655be93e8f24b64071baff89a3bd8dfeac996 -
Branch / Tag:
refs/tags/v0.3.0 - Owner: https://github.com/oscura-re
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@de4655be93e8f24b64071baff89a3bd8dfeac996 -
Trigger Event:
push
-
Statement type: