diff --git a/README.md b/README.md index e0f8224..d2c353d 100644 --- a/README.md +++ b/README.md @@ -2,6 +2,8 @@ Code to exploit and research the Exynos Bootrom. ## Setting up + +### Python module Create a venv, and intall ghidra_assistant. ```bash python3 -m venv venv @@ -9,6 +11,16 @@ python3 -m venv venv pip install -r requirements.txts ``` -To get to work, run `source/exploit/exploit.py` +### Building the debugger +The debugger needs to be built using [gupje](https://git.herreweb.nl/EljakimHerrewijnen/Gupje). Move the contents of `source/gupje_device` to `Gupje/devices/samsung_s7`. Then proceed to build the debugger. -To view documentation, ensure you have sphinx installed. If not, run `sudo apt install python3-sphinx`. Then proceed to build the documentation by running `make livehtml`. \ No newline at end of file +```bash +mv source/gupje_device/* {your-gupje-root}/devices/samsung_s7 +cd {your-gupje-root} +make -f devices/samsung_s7/Makefile +``` + +Then proceed to move the debugger to `dump/debugger.bin`. To get to work, run `source/exploit/exploit.py`. The launch.json's are located in source/exploit, so its recommended to open this folder in your VSCode/favourite IDE. + +### Viewing/building documentation +To view documentation, ensure you have sphinx installed. If not, run `sudo apt install python3-sphinx`. Then proceed to build the documentation by running `make livehtml` in `documentation`. \ No newline at end of file diff --git a/dump/debugger.bin b/dump/debugger.bin new file mode 100755 index 0000000..d1a9520 Binary files /dev/null and b/dump/debugger.bin differ diff --git a/dump/reloc_debugger.bin b/dump/reloc_debugger.bin new file mode 100755 index 0000000..6644fb0 Binary files /dev/null and b/dump/reloc_debugger.bin differ diff --git a/requirements.txt b/requirements.txt index e26a33f..42a790c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,4 +10,5 @@ ghidra_bridge tqdm pyhidra sphinxcontrib.confluencebuilder -sphinxcontrib.drawio \ No newline at end of file +sphinxcontrib.drawio +source/ghidra_assistant/ghidra_assistant-0.0.1-py3-none-any.whl \ No newline at end of file diff --git a/source/exploit/stage1/entry.o b/source/exploit/stage1/entry.o new file mode 100644 index 0000000..cfc037f Binary files /dev/null and b/source/exploit/stage1/entry.o differ diff --git a/source/exploit/stage1/stage1.bin b/source/exploit/stage1/stage1.bin new file mode 100755 index 0000000..8134687 Binary files /dev/null and b/source/exploit/stage1/stage1.bin differ diff --git a/source/exploit/stage1/stage1.elf b/source/exploit/stage1/stage1.elf new file mode 100755 index 0000000..2bd862d Binary files /dev/null and b/source/exploit/stage1/stage1.elf differ diff --git a/source/exploit/stage1/stage1.o b/source/exploit/stage1/stage1.o new file mode 100644 index 0000000..adbe930 Binary files /dev/null and b/source/exploit/stage1/stage1.o differ diff --git a/source/ghidra_assistant/ghidra_assistant-0.0.1-py3-none-any.whl b/source/ghidra_assistant/ghidra_assistant-0.0.1-py3-none-any.whl new file mode 100644 index 0000000..afe1dd9 Binary files /dev/null and b/source/ghidra_assistant/ghidra_assistant-0.0.1-py3-none-any.whl differ