neophob

I found some nice tools and documents which do help you analysing embedded firmware files.

Analyser tools
FIIN - Firmware Inspector
A bit outdated but still useful

uwfirmforce
Very nice file analyser which knows quite a lot of file types

draca - Crypto Analyser
Search for known cryptographic constants in a file

Documents
23C3-Fudging-with-firmware-analysis.pdf (khorben)
Reverse Engineering of Embedded Devices (dash)
Exploiting Embedded Systems, Blackhat 2006 (Barnaby Jack)
Hacking Embedded Linux Based Home Appliances (Alexander Sirotkin)
Hacking into TomTom GO (Thomas Kleffel, Christian Daniel)

Continue reading "Analyze an embedded firmware"

Posted by michu

... has just begun. Check out Java4k.com. I just submitted my 4k game jm00 - a boomshine clone.
I'll release the source as soon as the competition has finished.



Hint: If you uploaded your .jnlp and .jar file to your website, but the .jnlp does not start, add a .htaccess file with this content:
AddType application/x-java-jnlp-file .jnlpThanks to Árni Arent for this hint.

Posted by michu

The binary release of displaytag is a bit out of date (August 2007, version 1.1). According to their roadmap there are already some bug fixed in the svn repo. So I decided to build a bleeding edge release for displaytag, revision 1133. A little howto:

1) get latest svn version (r1133)

> svn checkout https://svn.sourceforge.net/svnroot/displaytag/trunk displaytag

2) compile the source and ignore errors

> mvn package -ft

3) create the jar files:

> mvn jar:jar

Grab displaytag v1.1.2-snapshot-1133.zip here.

 

Posted by michu

I tried several different Linux distributions (Gentoo, Debian, OpenSuse...) on my laptop, but every distribution suffered from the same problem - the maximal LAN throughput was around 5-7 kb/s... The laptop use a Realtek LAN NIC:

Ethernet controller: Realtek Semiconductor Co., Ltd. RTL-8139/8139C/8139C+ (rev 10)

I'm using the 8139too Kernel module for the LAN card. To fix the speed issue, I had to change some sysctl variables:

michu@opensusi:~/_down> cat /etc/sysctl.conf 
net.ipv4.tcp_window_scaling = 0
net.ipv4.tcp_timestamps = 0

Activate the changes with "sysctl -p" and you're done.

 

Posted by michu

Needed tools: proguard v4.2, JoGa and BJWFlate.exe.

Step 1: Check out the instructions at http://wiki.java.net/bin/view/Games/4KGamesDesign.
The file size of my optimized .class file is 12'354 bytes (compiled with eclipse, debug information included).

Step 2: Create a Zip file with your single .class file (mine is called bin.zip and it's size is 7'361 Bytes).

Step 3: Compress the created File with proguard 4.2. The size of my .class file is now 9'411 bytes.

Step 4: Compress the optimized .jar file (mine is called bin.zip.proguard.jar) with JoGa.
Important: there is a Bug with JoGa, if you're unable to run your .class File (Error: Exception in thread "main" java.lang.VerifyError: (class: N, method: <init> signature: ()V) Register 5 contains wrong type") you need to deselect the option "Optimizations / byte code optimizations / optimize slot order". After this optimize step, the size of the .class file is 7307 Bytes.

Step 5: Create a work directory and copy the Manifest.mf file and your compressed .class file inside it.

Step 6: Create a valid .jar file and compress it with BJWFlate.exe:

BJWFlate.exe -n -r -s 4192 -v NAMEIT.jar work\*

My .jar file is now 4'083 Bytes. You may re-run BJWFlate.exe with a different numsplits parameter if the .jar file is still too big.

Hint: You can also try the tool 4KJO, which does those task automatically. Unfortunately there are some bugs in this nice tool, so I couldn't use it...

 

Continue reading "Optimize JAVA code for a 4k compo"

Posted by michu

Als Semesterarbeit im Fach Netzwerk habe ich mich dem Thema SSH gewidmet.

Entstanden ist eine Arbeit, welche sich primär am praktischen Nutzen orientiert - klick auf den untenstehenden Link um das Inhaltsverzeichnis anzuzeigen.

Download SSH Guide

(c) by Michael Vogt 2008




Inhaltsverzeichnis:

 

Continue reading "SSH Guide (German)"

Posted by michu

 
Ich habe als Diplomarbeit den Überbegriff "Embedded Linux" gewählt. Konkret verwende ich OpenWRT um folgende 2 Embedded Devices zu betreiben:

• MP3 Jukebox, Bluetooth Steuerung, Last.fm support, Webradio Unterstützung. Basierend auf einer ASUS Wrt 500GP Hardware. Die MP3's werden entweder auf einem USB Memory stick zu Verfügung gestellt oder werden via Netzwerk gestreamt.
  


• Home Access Point mit WPA2 Verschlüsselung, OpenSSH, SSH over HTTP Tunnel, SSH over ICMP Tunnel. Als Hardware wird ein Atheros-Basierender AP von der Firma FON verwendet, welcher für ca. 20€ zu erwerben ist.
  

Download Bauanleitung für die MP3 Jukebox, Umfang 15 Seiten.
Download gesamte Diplomarbeit, Umfang 89 Seiten.

(c) by Michael Vogt 2008




Inhaltsverzeichnis:

 

Continue reading "Diplomarbeit Embedded Linux (German)"

Posted by michu

I want to watch some divx movies on my XBOX360 (without HDD). They are stored on a DM800 Dreambox (with HDD).

First you need UShare v1.1a, the UPnP Daemon. I found a static compiled mipsel version here, which will run on the DM800 Dreambox. I also created a local mirror of this binary file.

There are some issues compiling a non-static version, for more information click here.

Anyway, first copy the binary file to the Dreambox and set the executable flag (chmod a+x ./ushare). Now the important step, setup a multicast route for UPnP messages:

root@dm800:/tmp# route add -net 239.0.0.0 netmask 255.0.0.0 eth0

Now you may start the UPnp Daemon:
 

Continue reading "Stream DIVX movies from the Dreambox to the XBOX360"

Posted by michu

MIDIsense is a nice MIDI input device, that let you use all kind of sensors as midi input. Check the Website.

Now the Application (MIDIsense Software) was quite unpleasant, because it crashed here and then and was quite slow and CPU intensive. As this Software is OpenSource I downloaded the latest CVS code and compiled an uptodate version, including the latest wxWindows and portmidi libraries. Now the Application works much better and faster.

Hint: This is just a quick hack, which worked fine for me. There are NO DEBUG messages available!

Download

 

Posted by michu

I tried to reuse some parts of my dead notebook. After watching this video, I tried to attach a PS/2 Cable to my Synaptics based touchpad, which is quite straightforward.

Here are some pictures:


 

Continue reading "Reuse old notebook parts"

Posted by michu