Skip to content

Instantly share code, notes, and snippets.

Avatar

Matthew Garrett mjg59

View GitHub Profile
View rfkill.s
.global _start
_start:
.org 0x20000
.org 0x20fa4
BR rfkill@l
.org 0x20faa
orig:
.org 0x234ea
gpio_out:
.org 0x24ee4
View gist:e782a9c33dee3ce67c5ee68933ae1d29
[134.140989] HW.GFX.GMA.Initialize
[134.141256] HW.GFX.GMA.Panel.Setup_PP_Sequencer
[134.141278] HW.GFX.GMA.Registers.Read: 0x0e200001 <- 0x000c7208:PCH_PP_ON_DELAYS
[134.141321] HW.GFX.GMA.Registers.Read: 0x13880001 <- 0x000c720c:PCH_PP_OFF_DELAYS
[134.141370] HW.GFX.GMA.Registers.Read: 0x0004af06 <- 0x000c7210:PCH_PP_DIVISOR
[134.141405] PP: Using preset POWER_UP_DELAY of 361600 us.
[134.141428] PP: Using preset POWER_UP_TO_BL_ON of 100 us.
[134.141448] PP: Using preset POWER_DOWN_DELAY of 500000 us.
[134.141471] PP: Using preset BL_OFF_TO_POWER_DOWN of 100 us.
[134.141491] PP: Using preset POWER_CYCLE_DELAY of 500000 us.
View gist:af59508be5fd143100932e8961abf942
--- working 2019-07-20 14:25:07.373666717 -0700
+++ broken 2019-07-20 14:25:17.356411552 -0700
@@ -82,14 +82,14 @@
HW.GFX.GMA.Registers.Write: 0x80003015 -> 0x00064f08:DDI_BUF_TRANS_C_S9T1
HW.GFX.GMA.Registers.Write: 0x000000cd -> 0x00064f0c:DDI_BUF_TRANS_C_S9T2
HW.GFX.GMA.Registers.Unset_And_Set_Mask: DISPIO_CR_TX_BMU_CR0
-HW.GFX.GMA.Registers.Read: 0x00000000 <- 0x0006c00c:DISPIO_CR_TX_BMU_CR0
+HW.GFX.GMA.Registers.Read: 0x08800000 <- 0x0006c00c:DISPIO_CR_TX_BMU_CR0
HW.GFX.GMA.Registers.Write: 0x0036db00 -> 0x0006c00c:DISPIO_CR_TX_BMU_CR0
HW.GFX.GMA.Registers.Set_Mask: 0x80000000 .S CPU_VGACNTRL
View gist:c2def9e81f074713bffa5308b6b00f44
HW.GFX.GMA.Initialize
HW.GFX.GMA.Panel.Setup_PP_Sequencer
HW.GFX.GMA.Registers.Read: 0x0e200064 <- 0x000c7208:PCH_PP_ON_DELAYS
HW.GFX.GMA.Registers.Read: 0x13880e20 <- 0x000c720c:PCH_PP_OFF_DELAYS
HW.GFX.GMA.Registers.Read: 0x0004af06 <- 0x000c7210:PCH_PP_DIVISOR
HW.GFX.GMA.Registers.Set_Mask: 0x00000002 .S PCH_PP_CONTROL
HW.GFX.GMA.Registers.Read: 0x00000008 <- 0x000c7204:PCH_PP_CONTROL
HW.GFX.GMA.Registers.Write: 0x0000000a -> 0x000c7204:PCH_PP_CONTROL
HW.GFX.GMA.Registers.Is_Set_Mask: DDI_BUF_CTL_A
HW.GFX.GMA.Registers.Read: 0x00000091 <- 0x00064000:DDI_BUF_CTL_A
View gist:3dc67cffba5e562c163ad132dc51cd91
HW.GFX.GMA.Initialize
HW.GFX.GMA.Panel.Setup_PP_Sequencer
HW.GFX.GMA.Registers.Read: 0x0e200064 <- 0x000c7208:PCH_PP_ON_DELAYS
HW.GFX.GMA.Registers.Read: 0x13880e20 <- 0x000c720c:PCH_PP_OFF_DELAYS
HW.GFX.GMA.Registers.Read: 0x0004af06 <- 0x000c7210:PCH_PP_DIVISOR
HW.GFX.GMA.Registers.Set_Mask: 0x00000002 .S PCH_PP_CONTROL
HW.GFX.GMA.Registers.Read: 0x00000008 <- 0x000c7204:PCH_PP_CONTROL
HW.GFX.GMA.Registers.Write: 0x0000000a -> 0x000c7204:PCH_PP_CONTROL
HW.GFX.GMA.Registers.Is_Set_Mask: DDI_BUF_CTL_A
HW.GFX.GMA.Registers.Read: 0x00000091 <- 0x00064000:DDI_BUF_CTL_A
View gist:ef521a30e11171abc96bb58196cc7bae
[0.456363] HW.GFX.GMA.Panel.Setup_PP_Sequencer
[0.456370] HW.GFX.GMA.Registers.Read: 0x0e200064 <- 0x000c7208:PCH_PP_ON_DELAYS
[0.456378] HW.GFX.GMA.Registers.Read: 0x13880e20 <- 0x000c720c:PCH_PP_OFF_DELAYS
[0.456385] HW.GFX.GMA.Registers.Read: 0x0004af06 <- 0x000c7210:PCH_PP_DIVISOR
[0.456386] HW.GFX.GMA.Registers.Set_Mask: 0x00000002 .S PCH_PP_CONTROL
[0.456393] HW.GFX.GMA.Registers.Read: 0x00000008 <- 0x000c7204:PCH_PP_CONTROL
[0.456394] HW.GFX.GMA.Registers.Write: 0x0000000a -> 0x000c7204:PCH_PP_CONTROL
[0.456401] HW.GFX.GMA.Registers.Is_Set_Mask: DDI_BUF_CTL_A
[0.456402] HW.GFX.GMA.Registers.Read: 0x00000091 <- 0x00064000:DDI_BUF_CTL_A
[0.456403] HW.GFX.GMA.Registers.Unset_And_Set_Mask: SHOTPLUG_CTL
View gist:ccbeec81dacd38eac5fd92e121faa5fc
#include <signal.h>
#include <stdio.h>
#include <malloc.h>
#include <setjmp.h>
#include <stdbool.h>
static jmp_buf omg;
struct list {
char dummy[16384];
View gist:65ef73ce6e3ab636bf06e6e8264b3550
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /HNAP1/ HTTP/1.1" 404 204 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET / HTTP/1.1" 403 4655 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /cgi-bin/webcm?getpage=..%2Fhtml%2Findex.html HTTP/1.1" 404 211 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /Main_Login.asp HTTP/1.1" 404 212 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /login.html HTTP/1.1" 404 208 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /info/Login.html HTTP/1.1" 404 213 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /Docsis_system.asp HTTP/1.1" 404 215 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET / HTTP/1.1" 403 4655 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /ui/1.0.99.173728/dynamic/login.html HTTP/1.1" 404 233 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /ubicom.js HTTP/1.1" 404 207 "-" "-"
View gist:ab1e9a6e60ef96ca9565ae09690a396b
#!/usr/bin/python
import os
import socket
import sys
def encode_packet(data):
output = bytearray()
for i in range(0, len(data)):
tmpoutput = bytearray([0, data[i]])
View gist:826bde4f3fa8ecb3445046b92f08f90b
#!/usr/bin/env python
# Copyright 2016 Mike Ryan
# Copyright 2016 Matthew Garrett
#
# This code will connect to a Bluetooth nuLock and reset the password to 123456
#
# This file is part of PyBT and is available under the MIT license. Refer to
# LICENSE for details.
You can’t perform that action at this time.