Skip to content

UART Pinout

UART pinout discovery is a critical step in reverse-engineering embedded systems, enabling communication with devices via serial interfaces. Identifying the correct TX (transmit), RX (receive), and GND (ground) pins allows direct interaction with firmware, debug outputs, or custom protocols. This process leverages multimeters, logic analyzers, and signal probing to map pin functions without relying on documentation.

1. Multimeter-Based Continuity and Voltage Checks

A multimeter can help identify ground and differentiate between TX/RX pins by measuring continuity and voltage levels.

Steps:

  1. Identify Ground (GND):
  2. Use the multimeter’s continuity test mode to find a pin that connects to the device’s power supply (e.g., VCC) or other known ground points on the PCB.

  3. Alternatively, measure voltage between pins: the GND pin will show 0V relative to VCC or other power rails.

  4. Differentiate TX/RX:

  5. Use the multimeter’s voltage function to check for signal presence. TX and RX typically exhibit voltage fluctuations, while GND remains stable at 0V.
  6. For devices with known serial communication (e.g., a microcontroller with a serial bootloader), apply a signal to one pin and observe for a response on another.

Example:

# Use a multimeter to check continuity between pins
# Connect the multimeter’s probes to suspected GND and VCC pins
# Look for a short circuit or 0V reading to confirm GND

2. Logic Analyzer for Signal Probing

A logic analyzer provides precise timing and waveform analysis to distinguish TX/RX signals.

Steps:

  1. Connect the Analyzer:

  2. Probe suspected TX/RX pins and GND. Ensure the analyzer’s sampling rate matches the expected baud rate (e.g., 115200 bps).

  3. Observe Waveforms:

  4. Look for UART-like signals: a start bit (low), data bits (high/low), and stop bits (high). TX will show outgoing data, while RX will reflect incoming data.
  5. Use the analyzer’s trigger feature to capture data when a known signal is applied (e.g., sending a character via a serial terminal).

Example:

# Use Saleae Logic Analyzer to capture UART signals
# Connect probes to suspected TX/RX pins and GND
# Configure sampling rate and trigger on start bit

3. Terminal Emulator for Active Testing

Serial terminal tools can directly test TX/RX pairs by sending and receiving data.

Steps:

  1. Connect to the UART:

  2. Use a serial cable (e.g., USB-to-serial adapter) and a terminal emulator (e.g., screen, minicom, or PuTTY).

  3. Test Bidirectional Communication:

  4. Set the correct baud rate (e.g., 115200) and parity settings.
  5. Send a character (e.g., Hello) and observe if it is echoed back. This confirms the TX/RX mapping.

Example:

# Open a serial terminal with screen
screen /dev/ttyUSB0 115200
# Type "Hello" and observe if it appears on the device's output

4. Cross-Referencing PCB Layout and Schematics

Physical inspection of the PCB can reveal pinout patterns: - Pin order: UART pins are often arranged as GND, TX, RX or RX, TX, GND. - Component placement: Look for capacitors or resistors near UART pins, which may indicate signal conditioning or termination.

Key takeaways

  • Multimeters help identify GND and differentiate TX/RX via continuity and voltage checks.
  • Logic analyzers provide precise waveform analysis to confirm UART signal timing.
  • Serial terminal tools enable active testing by sending/receiving data.
  • Physical inspection of PCBs and schematics can validate pinout assumptions.
  • Always use proper voltage level conversion (e.g., 3.3V to 5V) to avoid damaging components.