Skip to content

The best hardware hacking YouTube channels in 2026

An IoT hacker's honest ranked picks for learning firmware extraction, UART, JTAG, and glitching from YouTube in 2026.

Published on 6 min read

Hardware hacking is a small niche on YouTube and the quality is weirdly bimodal. You get a handful of people doing real, deep, technically honest work, and then a long tail of channels that flash a Flipper Zero at a parking gate and call it research. This roundup is about the first group.

Here is the thing nobody tells you when you start. The hard part is rarely the clever attack. It's the boring part. Finding the ground pin with a multimeter. Guessing the baud rate. Soldering a 0.5mm wire onto a pad that doesn't want it and watching it lift the trace off the board. Hardware fights back in a way software doesn't, and the channels worth your time are the ones that show that friction instead of cutting around it.

We run a directory of these channels, so we watch far too many of them. There are only five genuinely strong picks here, and that's on purpose. I'd rather give you five channels you'll actually rewatch than pad the list with people teardown-narrating a smart bulb. For the wider security picture this is part of the full roundup.

The picks

Joe Grand is where most people should start, and not because he's beginner content. He's Kingpin from the old L0pht days, he's been designing and breaking hardware for decades, and he's somehow also a genuinely good teacher, which almost never coexists. The channel walks teardowns, board bring-up, and design from the perspective of someone who builds the things he breaks. That dual view matters: you understand attacks better when you understand why an engineer laid the board out that way. What he nails is making hardware feel approachable without dumbing it down. The famous wallet recovery video, where he glitched a hardware wallet to extract a forgotten key, is a master class in patience and method. Honest caveat: it's not a structured curriculum. It's a brilliant practitioner sharing projects, so you assemble the syllabus yourself rather than getting handed one.

Matt Brown is the one I send aspiring IoT pentesters to, full stop. Most hardware content is edited into a highlight reel where everything works on the first try. Matt does the opposite. He'll sit down with a router or an IP camera and record the actual session: pulling firmware off SPI flash, dealing with a binwalk extraction that half-fails, finding the command injection, hitting a wall, backing out, trying again. The long unedited format is the entire value. You see the real cadence of IoT work, including the dead ends, which is exactly what a highlight reel trains out of you. Who it's for: anyone who wants to do this as a job and needs to see what the job actually feels like. Caveat: the unedited length is not for casual viewing. These are working sessions, not entertainment, and if you want a tight 12-minute dopamine hit you'll bounce off it.

stacksmashing is the deep end. Embedded reverse engineering, voltage and clock glitching, console and chip security, dumping firmware off parts that very much do not want to be dumped. The technical depth is the real thing, and he explains attacks like fault injection in a way that makes them feel like engineering instead of magic. If you've watched the Game Boy and Trezor work, you know he doesn't hand-wave the hard steps. What he nails is rigor: the why behind each glitch parameter, not just the payoff. For who: people moving past "find the UART" into actually reversing what runs on the silicon. Caveat, and it's a real one: this is the highest barrier to entry on the list. You'll want a logic analyzer at minimum and often a glitcher, real soldering skill, and patience measured in evenings. Watching is educational; replicating is a project. It also overlaps heavily with reverse engineering, so pair it with the reverse engineering roundup if that's your lean.

Hak5 earns a spot but I want to set expectations carefully, because people miscategorize it. This is gadgets and payloads, not deep hardware research. The Rubber Ducky, the Bash Bunny, the WiFi Pineapple: red-team tooling you buy and deploy, with content built around using those tools. It's well produced, it's genuinely useful if you do physical and red-team engagements, and it's a fine way to understand an attack surface most people ignore. But know what it is. You're learning to wield finished tools, not to extract firmware or reverse a chip. If you came for SPI flash dumping you're in the wrong room. As tooling-and-tradecraft content it's strong; as "hardware hacking" in the firmware sense it's adjacent, and conflating the two is how beginners end up confused about why their Ducky skills don't help on a UART console.

Flashback Team rounds it out with hardware reverse engineering that sits right next to the repair world. Teardowns, tracing how a board actually works, the kind of careful board-level investigation that the repair scene quietly does better than half the security industry. There's enormous transferable value here: reading a schematic you reconstructed yourself, identifying components, understanding power and data paths is exactly the skill that makes the security attacks possible later. What they nail is methodical, no-drama board analysis. Caveat: it leans more repair-and-understand than attack-and-exploit, so it's a foundation channel rather than an offensive one. Watch it to get fluent with hardware, then bring that fluency to the others.

Where to start, honestly

If you watch one, watch Joe Grand for the mindset and Matt Brown for the reality of the work. Then go get hardware on a bench, because none of this sticks by watching. Reading about finding a ground pin is not the same as finding one at 11pm with a multimeter while you second-guess your continuity beep.

You don't need much to begin. A cheap logic analyzer, a USB-serial adapter, a multimeter, and something sacrificial to take apart. We wrote up exactly what's worth buying and what's a photogenic waste of money in building a hardware hacking lab, and the short version is that your first real wins come from UART and SPI flash, not from anything expensive.

One last thing. Hardware is humbling in a way that's good for you. Firmware you dumped is real in a way a CTF flag never is. These five channels won't give you the skill. They'll show you the shape of it, and what it looks like when it's done right. The trace you lift off your first board is on you.

Related articles

What gear actually earns its place on a hardware hacking bench, what's a beginner trap, and the failure modes nobody films.