Skip to content

Instantly share code, notes, and snippets.

View aeickho's full-sized avatar

alex, df8av aeickho

29 followers · 47 following
View GitHub Profile
@aeickho
aeickho / gist:5a8b272dcc3cf66112a48add723b059d
Created September 22, 2016 12:24
anal.a2f = false
anal.afterjmp = true
anal.arch = arm
anal.autoname = true
anal.bb_max_size = 1024
anal.bbs_alignment = 0x10
anal.bbsplit = true
anal.calls = false
anal.cjmpref = false
anal.cpu =
@aeickho
aeickho / gist:53a09c5e9e15513adc38e2bd5a38723a
Created August 21, 2016 17:21
gfx_drawbmp = 0x80237ff;
gfx_drawtext = 0x800def7;
gfx_chars_to_display = 0x801dd09;
gfx_drawtext2 = 0x801dd09;
md380_spiflash_read = 0x8031477;
botlinetext = 0x2001e410;
welcomebmp = 0x080f8510;
/* spi-flash */
md380_spiflash_read = 0x08031477;
@aeickho
aeickho / a4a6cb8b606.txt
Created August 15, 2016 23:07
[ ] 1 arm_16: thumb ldr pc-rel analysis
[OK]
[ ] 2 arm_16: thumb ldr pc-rel emulation
[OK]
[ ] 3 arm_16: bx ip eof
[OK]
[ ] 4 arm_16: thumb ldr pc-rel analysis
[OK]
[ ] 5 arm_16: thumb ldr+add pc-rel analysis
[XX]
@aeickho
aeickho / gist:e0a82aeef271492a53f2b27dbab2ebb0
Last active July 22, 2016 00:19
r2 Arm thumb
with 3d9bea75ab6b0ed1ab47ae98e4e4e3ff34cf2f19 Fixing some ARM regressions
############################################# just like head(wrong offset calc)
| 0x08020a62 dff8680e ldr.w r0, [pc, 0xe68] ; [0x80218d0:4]=0x2001affc
| 0x08020a6a 4ff48072 mov.w r2, 0x100 ; 256
| 0x08020a6e 4ff40051 mov.w r1, 0x2000
| 0x08020a72 dff85c0e ldr.w r0, [pc, 0xe5c] ; [0x80218d4:4]=0x2240b580
| 0x08020a76 0ff0a1fb bl spiflash_Read_Security_Registers_48h ;[1]
| 0x08020a7a dff8500e ldr.w r0, [pc, 0xe50] ; [0x80218d0:4]=0x2001affc
| 0x08020a7e 007c ldrb r0, [r0, 0x10]
|
@aeickho
aeickho / output of arm_16
Created July 20, 2016 13:40
output of arm_16
[ ] 1 arm_16: thumb ldr pc-rel analysis
[BR]
Regression: ./arm_16
Command: /home/alex/bin/radare2 -e scr.color=0 -N -q -i /tmp/r2-regressions//arm_16-AAdP9j/rad malloc://32 > /tmp/r2-regressions//arm_16-AAdP9j/out 2> /tmp/r2-regressions//arm_16-AAdP9j/err
File: malloc://32
Script:
e asm.arch=arm
e asm.bits=16
wx dff80000 12000000 34000000
@aeickho
aeickho / gist:d87b4a2da69a9af9e194
Created February 24, 2016 23:36
35035,35079c35035,35077
< 0088fd0 0000 0000 0000 0100 0055 0000 0000 0000
< 0088fe0 0000 0600 40aa 0500 0050 0000 0000 1a00
< 0088ff0 90aa 1a00 00a4 0000 0000 2a00 a0aa 6a00
< 0089000 00a9 0000 0000 6a00 a4aa aa01 40aa 0000
< 0089010 0000 6a00 a4aa aa01 40aa 0000 0000 6a00
< 0089020 a4aa aa01 40aa 0000 0000 2a00 a0aa aa00
< 0089030 00aa 0000 0000 1a00 90aa 2a00 00a8 0000
@aeickho
aeickho / gist:ea2505fb0a2f007c796e
Created February 15, 2016 18:36
# flash.r by Travis Goodspeed
# This is a Radare2 script for annotating the Tytera MD380
# application, version 2.032, which begins at 0x0800C000 in Flash
# memory. Preceding it is a bootloader, which can be either the
# official factory bootloader or an aftermarket one.
# Begin by opening the application in R2 with this script.
# r2 -a arm -m 0x0800C000 -b 16 -i flash.r ../../firmware/D002.032.bin
@aeickho
aeickho / ath79
Created December 14, 2015 00:14
diff -r -u ath79.3.10/clock.c ath79.3.18/clock.c
--- ath79.3.10/clock.c 2015-12-14 01:12:20.413654166 +0100
+++ ath79.3.18/clock.c 2015-12-14 01:11:45.206275171 +0100
@@ -16,6 +16,7 @@
#include <linux/init.h>
#include <linux/err.h>
#include <linux/clk.h>
+#include <linux/clkdev.h>
#include <asm/div64.h>
@aeickho
aeickho / 158
Created December 11, 2015 18:27
xe0\xf5\x97mL\x1fbH\xea\xf3\xe3\xf6\xa1\xb7\xe7\x9b\xe7\x87\xed\xcb\x13\xa3\xbc:\xdc\x1e\xeen\xe62\x19>\x01t\x97\x1e\x
9a6\x02\x00\x00" },
{ "60:e3:27:d6:1b:08", "\x1f\x8b\x08\x00D=dV\x02\x03m\x911o\xc3
\x10\x85\xffJ\xc4\x9cX\x80c\xec\xdeZu\xeb\x90\xa1[\x15
Egs$Vl\x88\x00;C\x94\xff^p\x14\xb5\xaa\"\x16\xf4\xee{\xef\xee\xe0\xc6\xac\xd3t\xe85\x03\xa68\x95\xb2\xd6J\xb4\xbcakf)^
\x9d?3\xb8\xb1\x11\xbb\xa5\x0eT\x82\xacA+\x10-,\x10j\xed)\x04\x0a\x0c\xbe\x99\xd1\xa4\xa0T\xa6\x83\xee\xad\xa9\x80\x83
\x92\x8b\xc1\x180\xb4\x98\x16\x8f\xa1\x86\xc3\xe3\xbc\x02\xf6k6R8\x1dz\x1b\xc9\x1b\xec\x1e\xd9J\x02\xd5\xff\x9agM\x81l
~\xb5\xfd}\xcdN.D\x8b#\xa5\x89\x8d\xd1\x93>\x0c6$xp\x1d\xc6\xde\xd9\xbc\xcf\xe0\xec\xb1\x8f\x93N\x8c\xe0\x85T\xb2\xe2U
\"R\xfd!V\xa2\xa8\x84\x10\xaa\xa9S^p&^\xd1S6\x1a\x0cQ\xe7\x0bYl\x07J\xd7\xe8'Z\xb3\x99|X\xb2\xd9,\x14K&\x9c\xa2\x9b.\x
@aeickho
aeickho / ar71xx-nand
Created December 8, 2015 12:53
This file has been truncated, but you can view the full file.
make[1]: Entering directory '/home/alex/gluon_master/gluon/openwrt'
[ -s /home/alex/gluon_master/gluon/build/gluon-opkg-key -a -s /home/alex/gluon_master/gluon/build/gluon-opkg-key.pub ] || \
mkdir -p $(dirname /home/alex/gluon_master/gluon/build/gluon-opkg-key) && /home/alex/gluon_master/gluon/openwrt/staging_dir/host/bin/usign -G -s /home/alex/gluon_master/gluon/build/gluon-opkg-key -p /home/alex/gluon_master/gluon/build/gluon-opkg-key.pub -c "Gluon opkg key"
rm /home/alex/gluon_master/gluon/build/ar71xx-nand/openwrt/tmp || true
rm: cannot remove '/home/alex/gluon_master/gluon/build/ar71xx-nand/openwrt/tmp': Is a directory
mkdir -p /home/alex/gluon_master/gluon/build/ar71xx-nand/openwrt/tmp
for link in build_dir config Config.in dl include Makefile package rules.mk scripts staging_dir target toolchain tools; do \
ln -sf /home/alex/gluon_master/gluon/openwrt/$link /home/alex/gluon_master/gluon/build/ar71xx-nand/openwrt; \
done
make -w -C /home/alex/gluon_master/gluon/build/ar71xx-nand/openwrt -f /home/alex