0xricksanchez

6 ms·

1. 1.▲
   by 0xricksanchez 4y ago

   In a future (very very very future) PR I'd be interesting exploring this idea of building and pushing stuff to a dev-board and debugging it remotely. However, right now, I don't have any specific use case for this scenario
2. 2.▲
   by 0xricksanchez 4y ago

   Exactly the use-case I had in mind with this as well :).
3. 3.▲
   by 0xricksanchez 4y ago

   I wanted containers for the following things: - Minimal host system requirements as kernel tool chains can be very much a pain to set up correctly. If I want to compile different kernel versions for different architectures this seemed liked
4. 4.▲
   by 0xricksanchez 4y ago

   You're welcome! Note that this is still very much early alpha stage at best. PS: If you're using a case-insensitive APFS, Linux kernel compilation will fail. I'm already aware of that
5. 5.▲
   by 0xricksanchez 4y ago

   Hi author of like-dbg here :)! The attached debugger is not just raw GDB but is using https://hugsy.github.io/gef/ to make debugging less of a pain. It's still not perfect but helps plenty already. I was not awa
6. 6.▲
   by 0xricksanchez 6y ago

   They make use of /etc_ro/public.pem to verify the integrity of a firmware update. So flashing a custom firmware (e.g.: OpenWRT) will fail all checks they put in place. I did not investigate how one could circumvent the update mec
7. 7.▲
   by 0xricksanchez 6y ago

   You're right with your assumptions! If you go to part 3 pretty much to the bottom of the article there's a good summary of what fields are included in their firmware verification headers. TL;DR: They verify the length of the encry
8. 8.▲
   by 0xricksanchez 6y ago

   Thanks! Much appreciated :)
9. 9.▲
   by 0xricksanchez 6y ago

   Hi, As much as I have to give credit to Ghidra and its capabilities and I just don't like using it. I find the UI/UX very awful. So I decided to just reverse it in IDA. After I was done with everything I double-checked what I had
10. 10.▲
    by 0xricksanchez 6y ago

    Hey, I'm the author of this series (see my Twitter "rant": https://twitter.com/0xricksanchez/status/1290291267914563585 or my repo with the re-constructed source code here: https://github