OI!STER

The OI!STER is an STM32L5 Target Board with a QFP48 clamshell socket aimed at debugging and glitching salvaged MCUs. The board can be powered via USB-C, a 2032 coin cell battery on the back of the board or an external power suppy. All pins are broken out in the 24-pin headers on either side at the top of the board. The OI!STER contains five debug headers, to support a wide range of debugging hardware such as a Hydrabus or a Black Magic Probe. It comes with six SMA connectors arranged in I/O pairs. One pair is dedicated to glitching the external LSE clock, another for glitching the external HSE clock and one pair for power analysis and fault injection with a Chipwhisperer. Each SMA connector can be bypassed by removing a small jumper. The OI!STER also has additional solder jumpers for the external clocks and each of the power traces to the MCU to allow for quick experimentation.

The Pinout diagrams below are directed at reverse engineering. The first diagram is targeted at debugging and reverse engineering an STM32L5 MCU itself. The second diagram is aimed at the communication between external peripherals and the MCU. Although some functionaly might overlap, we've found it practical to define these two pinout groups. Additional documentation is currently under development.

Debug Pinout Diagram

LPUART/USART/UART/SWD/JTAG/USB/OSC/OSC32 Pinout

Debug Pinout Table

Pin	Function	Alternate Function
1	VBAT
2	PC13
3	PC14	OSC32_IN
4	PC15	OSC32_OUT
5	PH0	OSC_IN
6	PH1	OSC_OUT
7	NRST
8	VSSA	VREF-
9	VDDA	VREF+
10	PA0	UART4_TX	USART2_CTS
11	PA1	UART4_RX	USART2_RTS
12	PA2	LPUART1_TX	USART2_TX
13	PA3	LPUART1_RX	USART2_RX
14	PA4	USART2_CK
15	PA5
16	PA6	LPUART1_CTS	USART3_CTS
17	PA7
18	PB0	LED1	USART3_CK
19	PB1	LED2	LPUART1_RTS	USART3_RTS
20	PB2
21	PB10	LPUART1_RX	USART3_TX
22	PB11	LPUART1_TX	USART3_RX
23	VSS
24	VDD
25	PB12	USART3_CK	LPUART1_RTS
26	PB13	USART3_CTS	LPUART1_CTS
27	PB14	USART3_RTS
28	PB15
29	PA8	USART1_CK
30	PA9	USART1_TX
31	PA10	USART1_RX
32	PA11	USART1_CTS	USB_DM
33	PA12	USART1_RTS	USB_DP
34	PA13	JTMS	SWDIO	USB_NOE
35	VSS_2
36	VDD_2
37	PA14	JTCK	SWCLK
38	PA15	JTDI	NC	USART2_RX	USART3_RTS	UART4_RTS
39	PB3	JTDO	TRACESWO	USART1_RTS
40	PB4	NJTRST	USART1_CTS
41	PB5	USART1_CK
42	PB6	USART1_TX
43	PB7	USART1_RX	UART4_CTS
44	PH3	BOOT0
45	PB8
46	PB9
47	VSS_3
48	VDD_3

Protocol Pinout Reference

LPUART1

Pin		Function	Description
12	22	LPUART1_TX	Transmit Data
13	21	LPUART1_RX	Receive Data
16	26	LPUART1_CTS	Clear To Send
19	25	LPUART1_RTS	Request To Send

USART1

Pin		Function	Description
29	41	USART1_CK	Transmitter Clock
30	42	USART1_TX	Transmit Data
31	43	USART1_RX	Receive Data
32	40	USART1_CTS	Clear To Send
33	39	USART1_RTS	Request To Send

USART2

Pin		Function	Description
10		USART2_CTS	Clear To Send
11		USART2_RTS	Request To Send
12		USART2_TX	Transmit Data
13	38	USART2_RX	Receive Data
14		USART2_CK	Transmitter Clock

USART3

Pin		Function	Description
16	26	USART3_CTS	Clear To Send
18	25	USART3_CK	Transmitter Clock
19	27	USART3_RTS	Request To Send
21		USART3_TX	Transmit Data
22		USART3_RX	Request Data

UART4

Pin	Function	Description
10	UART4_TX	Transmit Data
11	UART4_RX	Receive Data
38	UART4_RTS	Request To Send
43	UART4_CTS	Clear To Send

SWD

Pin	Function	Description
7	NRST	Reset
34	SWDIO	Data I/O
37	SWCLK	Clock
38	NC	Not Connected
39	TRACESWO	Trace Output

JTAG

Pin	Function	Description
34	JTMS	Test Mode State
37	JTCK	Test Clock
38	JTDI	Test Data In
39	JTDO	Test Data Out
40	NJTRST	Reset

USB

Pin	Function	Description
32	USB_DM	Data -
33	USB_DP	Data +
34	USB_NOE	Output Enable

OSC

Pin	Function	Description
5	OSC_IN	High Speed External Clock In (HSEI)
6	OSC_OUT	High Speed External Clock Out (HSEO)

OSC32

Pin	Function	Description
3	OSC32_IN	Low Speed External Clock In (LSEI)
4	OSC32_OUT	Low Speed External Clock Out (LSEO)

Peripheral Pinout Diagram

I2C/SPI/OCTOSPI/FDCAN/SDMMC Pinout

Peripheral Pinout Table

Pin	Function	Alternate Function
1	VBAT
2	PC13
3	PC14
4	PC15
5	PH0
6	PH1
7	NRST
8	VSSA
9	VDDA
10	PA0
11	PA1	I2C1_SMBA	SPI1_SCK	OCTOSPI1_DQS
12	PA2	OCTOSPI1_NCS
13	PA3	OCTOSPI1_CLK
14	PA4	SPI1_NSS	SPI3_NSS	OCTOSPI1_NCS
15	PA5	SPI1_SCK
16	PA6	SPI1_MISO	OCTOSPI1_IO3
17	PA7	I2C3_SCL	SPI1_MOSI	OCTOSPI1_IO2
18	PB0	SPI1_NSS	OCTOSPI1_IO1
19	PB1	OCTOSPI1_IO0
20	PB2	I2C3_SMBA	OCTOSPI1_DQS
21	PB10	I2C2_SCL	I2C4_SCL	SPI2_SCK	OCTOSPI1_CLK
22	PB11	I2C2_SDA	I2C4_SDA	OCTOSPI1_NCS
23	VSS
24	VDD
25	PB12	I2C2_SMBA	SPI2_NSS	OCTOSPI_NCLK
26	PB13	I2C2_SCL	SPI2_SCK
27	PB14	I2C2_SDA	SPI2_MISO
28	PB15	SPI2_MOSI
29	PA8
30	PA9	SPI2_SCK
31	PA10
32	PA11	SPI1_MISO	FDCAN1_RX
33	PA12	SPI1_MOSI	FDCAN1_TX
34	PA13
35	VSS_2
36	VDD_2
37	PA14	I2C1_SMBA	I2C4_SMBA
38	PA15	SPI1_NSS	SPI3_NSS
39	PB3	SPI1_SCK	SPI3_SCK
40	PB4	I2C3_SDA	SPI1_MISO	SPI3_MISO
41	PB5	I2C1_SMBA	SPI1_MOSI	SPI3_MOSI	OCTOSPI_NCLK
42	PB6	I2C2_SCL	I2C4_SCL
43	PB7	I2C1_SDA	I2C4_SDA
44	PH3
45	PB8	I2C1_SCL	FDCAN1_RX	SDMMC1_CKIN	SDMMC1_D4
46	PB9	I2C1_SDA	SPI2_NSS	FDCAN1_TX	SDMMC1_CDIR	SDMMC1_D5
47	VSS_3
48	VDD_3

Protocol Pinout Reference

I2C1

Pin		Function	Description
11	41	I2C1_SMBA	System Management Bus Alert (SMBus mode)
43	46	I2C1_SDA	Serial Data Line
42	45	I2C1_SCL	Serial Clock Line

I2C2

Pin		Function	Description
21	26	I2C2_SCL	Serial Clock Line
22	27	I2C2_SDA	Serial Data Line
25		I2C2_SMBA	System Management Bus Alert (SMBus mode)

I2C3

Pin	Function	Description
17	I2C3_SCL	Serial Clock Line
25	I2C3_SMBA	System Management Bus Alert (SMBus mode)
40	I2C3_SDA	Serial Data Line

I2C4

Pin		Function
21	42	I2C4_SCL
22	43	I2C4_SDA
37		I2C4_SMBA

SPI1

Pin			Function
11	15	39	SPI1_SCK
14	18	38	SPI1_NSS
16	32	40	SPI1_MISO
17	33	41	SPI1_MOSI

SPI2

Pin		Function
21	26	SPI2_SCK
25		SPI2_NSS
27		SPI2_MISO
28		SPI2_MOSI

SPI3

Pin		Function
14	38	SPI3_NSS
39		SPI3_SCK
40		SPI3_MISO
41		SPI3_MOSI

OCTOSPI1

Pin		Function
11	20	OCTOSPI1_DQS
12	14	OCTOSPI1_NCS
13	21	OCTOSPI1_CLK
16		OCTOSPI1_IO3
17		OCTOSPI1_IO2
18		OCTOSPI1_IO1
25	41	OCTOSPI1_NCLK

FDCAN

Pin	Function
32	FDCAN_RX
33	FDCAN_TX

SDMMC

Pin	Function
45	SDMMC1_CKIN
46	SDMMC_CDIR
45	SDMMC_D4
46	SDMMC_D5