# PicoGlitcher V3

> Open-source voltage glitching tool for hardware security research, based on Raspberry Pi Pico 2 (RP2350) with dual high-power MOSFETs, 4 selectable voltage levels, and adjustable Schmitt trigger inputs.

## Quick Facts

- **Brand:** Faulty Hardware
- **Board Type:** security-tool
- **Price:** ~$54
- **Product Readiness:** developer
- **CPU:** RP2350 Dual-core ARM Cortex-M33 / RISC-V Hazard3 @ 150MHz
- **CPU Architecture:** ARM Cortex-M33 / RISC-V Hazard3
- **CPU Cores:** 2
- **RAM:** 520KB SRAM
- **Flash:** 4MB
- **USB:** Micro-USB
- **Power:** 5V via Micro-USB
- **Operating Voltage:** 3.3V
- **Antenna:** none

## Connectivity

- **Wifi:** false
- **Bluetooth:** false
- **Zigbee:** false
- **Ethernet:** false

## Open Source

- **Status:** fully-open
- **Firmware:** Yes
- **Schematics:** Yes
- **PCB Layout:** Yes
- **License:** GPL-3.0

## Use Cases

- hardware-security-research
- fault-injection
- voltage-glitching
- penetration-testing

## Components

- **RP2350** (mcu): Dual-core ARM Cortex-M33 / RISC-V Hazard3 microcontroller at 150MHz with 520KB SRAM, providing high-speed glitch timing control. — [Datasheet](https://openhardware.directory/r?to=https%3A%2F%2Fdatasheets.raspberrypi.com%2Frp2350%2Frp2350-datasheet.pdf&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)
- **High-Power MOSFET (Crowbar Glitch)** (power-management): Two N-channel MOSFET transistors (IRF9410/NDS8434-compatible SOIC-8) capable of switching up to 66A for generating crowbar-style voltage glitches on target power rails. — [Datasheet](https://openhardware.directory/r?to=https%3A%2F%2Fwww.infineon.com%2Fdgdl%2FInfineon-IRF9410-DataSheet-v01_01-EN.pdf%3FfileId%3D5546d462533600a40153567a25b42552&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)
- **Adjustable Schmitt Trigger** (sensor): Two Schmitt trigger input channels (EXT1, EXT2) with adjustable threshold, attenuation, and hysteresis via onboard potentiometers for reliable glitch triggering. — [Datasheet](https://openhardware.directory/r?to=https%3A%2F%2Fwww.ti.com%2Flit%2Fds%2Fsymlink%2Fsn74lvc1g17.pdf&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)
- **Voltage Level Shifter** (bus-controller): Two SN74LVC8T245 bidirectional voltage level shifters from Texas Instruments for translating signals between the RP2350 (3.3V) and target devices at 1.2V to 5V. — [Datasheet](https://openhardware.directory/r?to=https%3A%2F%2Fwww.ti.com%2Flit%2Fds%2Fsymlink%2Fsn74lvc8t245.pdf&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)
- **Voltage Multiplexer** (power-management): Analog multiplexer for rapid switching between four voltage outputs (1.2V, 1.8V, 3.3V, 5V) during fault injection operations. — [Datasheet](https://openhardware.directory/r?to=https%3A%2F%2Fwww.ti.com%2Flit%2Fds%2Fsymlink%2Fcd74hc4067.pdf&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)

## Protocols

- **UART**
- **SPI**
- **GPIO**
- **SWD**
- **ADC**

## Available Software

- **[findus](https://openhardware.directory/r?to=https%3A%2F%2Fpypi.org%2Fproject%2Ffindus%2F&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)**: Python fault injection library for automated glitch campaigns

## Description

The PicoGlitcher V3 is an open-source voltage fault injection tool designed to make hardware security research accessible to hobbyists and professionals alike. Built around the Raspberry Pi Pico 2 with the RP2350 microcontroller, it provides higher clock speeds and improved timing accuracy compared to previous versions, enabling more precise glitch attacks against microcontrollers and secure elements. The board generates crowbar-style voltage glitches using two high-power MOSFETs capable of switching up to 66 amps, making it a powerful yet affordable alternative to professional tools like the ChipWhisperer Pro.

Version 3 introduces a selectable power supply with four voltage levels (1.2V, 1.8V, 3.3V, and 5V), allowing it to interface with a wide range of target microcontrollers. The improved Schmitt trigger inputs on the EXT1 and EXT2 channels feature adjustable threshold, attenuation, and hysteresis via onboard potentiometers, providing reliable triggering across different signal conditions. Level shifters based on the SN74LVC8T245 handle voltage translation between the RP2350 and the target device, while the multiplexing output stage enables rapid switching between voltage levels during glitch operations.

The PicoGlitcher is paired with the findus Python library, which provides a complete fault injection framework including parameter search, UART-based triggering, and automated glitch campaigns. The accompanying documentation at fault-injection-library.readthedocs.io includes detailed tutorials covering attacks against common microcontrollers such as STM8, STM32, and various ARM targets. Hardware design files including KiCad schematics and Fritzing diagrams are available in the GitHub repository under the GPL-3.0 license, making the entire platform fully open source from firmware to PCB layout.

## Where to Buy

- [Tindie](https://openhardware.directory/r?to=https%3A%2F%2Fwww.tindie.com%2Fproducts%2Ffaulty-hardware%2Fpicoglitcher-v3%2F&ref=openhardware.directory&product=picoglitcher-v3&source=md-export) — $54.00
- [Faulty Hardware](https://openhardware.directory/r?to=https%3A%2F%2Ffaultyhardware.de&ref=openhardware.directory&product=picoglitcher-v3&source=md-export) — €55.00

## Resources

- [product](https://openhardware.directory/r?to=https%3A%2F%2Ffaultyhardware.de&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)
- [github](https://openhardware.directory/r?to=https%3A%2F%2Fgithub.com%2FMKesenheimer%2Ffault-injection-library&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)
- [wiki](https://openhardware.directory/r?to=https%3A%2F%2Ffault-injection-library.readthedocs.io%2F&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)
- [schematics](https://openhardware.directory/r?to=https%3A%2F%2Fgithub.com%2FMKesenheimer%2Ffault-injection-library%2Ftree%2Fmaster%2Fschematics&ref=openhardware.directory&product=picoglitcher-v3&source=md-export)

## Tags

`voltage-glitching`, `fault-injection`, `hardware-security`, `rp2350`, `raspberry-pi-pico-2`, `open-source-hardware`, `crowbar-glitch`, `penetration-testing`, `side-channel`, `findus`

## Images

![PicoGlitcher V3](https://nbg1.your-objectstorage.com/openhardware-directory/entities/picoglitcher-v3/87166379ea57.JPG)

---
[View full device page](https://openhardware.directory/devices/picoglitcher-v3)