Code to exploit and research the Exynos Bootrom
Go to file
2024-09-17 20:06:49 +02:00
.vscode
documentation Adding DT_Sphinx confluence push. Fixing some errors in the documentation. 2024-09-17 18:28:35 +02:00
dump Minor update to memory map and some documentation updates 2024-09-14 16:41:21 +02:00
reven
source Returns to debugger and allows booting into recovery. Patching BL33 does not work. Should try patching the verification 2024-09-17 20:06:49 +02:00
.gitignore
.gitlab-ci.yml Update .gitlab-ci.yml file 2024-08-23 08:27:08 +00:00
README.md Adding DT_Sphinx confluence push. Fixing some errors in the documentation. 2024-09-17 18:28:35 +02:00
requirements.txt Unable to get firmware loader to return to debugger (yet) 2024-08-22 19:50:46 +02:00

Samsung_S7

Code to exploit and research the Exynos Bootrom.

Setting up

Python module

Create a venv, and intall ghidra_assistant.

python3 -m venv venv
. venv/bin/activate
pip install -r requirements.txts

Building the debugger

The debugger needs to be built using gupje. Move the contents of source/gupje_device to Gupje/devices/samsung_s7. Then proceed to build the debugger.

mv source/gupje_device/* {your-gupje-root}/devices/samsung_s7
cd {your-gupje-root}
make -f devices/samsung_s7/Makefile

Then proceed to move the debugger to dump/debugger.bin. To get to work, run source/exploit/exploit.py. The launch.json's are located in source/exploit, so its recommended to open this folder in your VSCode/favourite IDE.

Viewing/building documentation

To view documentation, ensure you have sphinx installed. If not, run sudo apt install python3-sphinx. Then proceed to build the documentation by running make livehtml in documentation.

Pushing documentation to confluence

Run sphinx-build -b confluence source _build/confluence from documentation/ to push docs to confluence. They will appear in the DT_Sphinx space. If running issues, be sure to remove the '_build' folder and try again!