diff options
| author | Yuval Adam <_@yuv.al> | 2018-07-02 17:41:44 +0300 |
|---|---|---|
| committer | Yuval Adam <_@yuv.al> | 2018-07-02 17:41:44 +0300 |
| commit | 11a6855a88afe6d7782738003e7bb27255a17aed (patch) | |
| tree | 741e7107394555ca1996c77ae3456f6de35a5bae | |
| parent | e90813fc001df1ff8d111dbe67740bed39f189ce (diff) | |
Update stock firmware
| -rw-r--r-- | README.md | 25 |
1 files changed, 23 insertions, 2 deletions
@@ -26,12 +26,33 @@ Dumping the flash via Bus Pirate: $ flashrom -p buspirate_spi:dev=/dev/ttyUSB0,spispeed=8M -c MX25L12835F/MX25L12845E/MX25L12865E -o log.txt -r rom.bin ``` +## Stock Firmware + +On boot device attemps to access `http://120.25.100.187:2300/3036/anycast/ksctv/update.img` to download a firmware update. + +Update metadata and signature is fetched from `http://120.25.100.187:2300/3036/anycast/ksctv/config.txt` + +Binwalking the image provides: + +```bash +$ binwalk update.img + +DECIMAL HEXADECIMAL DESCRIPTION +-------------------------------------------------------------------------------- +269948 0x41E7C LZO compressed data +270273 0x41FC1 LZO compressed data +2999896 0x2DC658 xz compressed data +3461646 0x34D20E Unix path: /proc/sys/kernel/domainname0l +3476206 0x350AEE SHA256 hash constants, little endian +3692204 0x3856AC SHA256 hash constants, little endian +4456448 0x440000 JFFS2 filesystem, little endian +5242880 0x500000 Squashfs filesystem, little endian, version 4.0, compression:xz, size: 11323710 bytes, 344 inodes, blocksize: 131072 bytes, created: 2018-01-14 00:50:49 +``` + ## Notes - Booting with button pressed -> mask rom mode - Booting with SPI out pin 8 shorted to ground -> mask rom mode -- On boot device attemps to access `http://120.25.100.187:2300/3036/anycast/ksctv/update.img` to download a firmware update -- Update metadata and signature is fetched from `http://120.25.100.187:2300/3036/anycast/ksctv/config.txt` ## Open Questions |