Commit Graph

83 Commits

Author SHA1 Message Date
Jonathan Herrewijnen
c8dd132ef9 Some spaces/devices 2024-09-05 20:55:39 +02:00
Jonathan Herrewijnen
c03af09de2 Adding ghidra BL31 file for later inspection 2024-09-05 20:18:05 +02:00
Jonathan Herrewijnen
20ad0cdb45 Found area where 02035600 becomes unaccessible. Trying to patch it. 2024-09-04 18:16:37 +02:00
Jonathan Herrewijnen
66621d36d7 Add descriptions to commit and cleanup 2024-09-04 14:16:26 +02:00
Jonathan Herrewijnen
906629b80f Small docs update 2024-09-03 19:31:41 +02:00
Jonathan Herrewijnen
e59478187d Loads and executes BL31, then returns debugger, then continues bootflow and enters recovery 2024-08-29 21:06:15 +02:00
Jonathan Herrewijnen
a12453cbd3 TTBR0_EL3 visible after BL31 2024-08-28 18:45:05 +02:00
Jonathan Herrewijnen
91c7d60638 Adding third (variable) debugger 2024-08-27 20:18:39 +02:00
Jonathan Herrewijnen
a9f426292c Reversing draw order of boot diagram 2024-08-27 20:16:45 +02:00
Jonathan Herrewijnen
5044941619 Better boot memory overview. Boots into recovery. 2024-08-26 17:45:29 +02:00
Jonathan Herrewijnen
fb2c105bf3 Adding memdump with potential keys (NIST_P25) from before any boot other than bootrom 2024-08-26 13:09:19 +02:00
Jonathan Herrewijnen
df71d537ec small blocks in blocks memory map update 2024-08-25 20:00:07 +02:00
Jonathan Herrewijnen
3039e1dbc7 Debugger overwritten by BL2. Working on better memory map 2024-08-23 18:05:06 +02:00
Jonathan Herrewijnen
98033c5d61 Update .gitlab-ci.yml file 2024-08-23 08:27:08 +00:00
Jonathan Herrewijnen
ee605f567e Adjust for non-sudo 2024-08-22 19:56:46 +02:00
Jonathan Herrewijnen
d45b9eeb1b Add xvfb to build pipeline 2024-08-22 19:55:56 +02:00
Jonathan Herrewijnen
4ab063cc71 Unable to get firmware loader to return to debugger (yet) 2024-08-22 19:50:46 +02:00
Jonathan Herrewijnen
416521c8c7 Revert changes in exploit.py 2024-08-21 19:00:18 +02:00
Jonathan Herrewijnen
34ca995109 Adding gitlab pages 2024-08-20 17:28:57 +02:00
Jonathan Herrewijnen
5154096998 Updating readme and adding some necessary binaries to run the exploit 2024-08-20 16:31:49 +02:00
Jonathan Herrewijnen
ac9b7630b9 update gitignore 2024-08-20 15:23:50 +02:00
2c20ff6255 Boots a patched bl31 2024-08-18 13:55:11 +02:00
2d0557c5c7 update 2024-08-17 20:35:52 +02:00
8cb5f2e151 added bl1 patches comment 2024-08-17 12:27:56 +02:00
8926897590 added bl1 patches comment 2024-08-17 12:25:35 +02:00
c4fac034a1 Fully booting with ability to patch BL1 2024-08-17 12:24:47 +02:00
6bc9156cb6 Fixed resturctured text layout 2024-08-16 23:00:13 +02:00
Jonathan Herrewijnen
5e7cfa7a60 Debugger alive after bl31 2024-08-16 19:37:25 +02:00
Jonathan Herrewijnen
55da2ce981 Now booting into USB recovery. Not yet jumping back to the debugger at each boot stage 2024-08-16 18:15:53 +02:00
dc64defded added sboot 2024-08-16 13:46:03 +02:00
27fd2b00fb added normal boot mode 2024-08-16 10:11:18 +02:00
Jonathan Herrewijnen
a8aed2e480 usb stack likely not executable 2024-08-14 19:46:27 +02:00
Jonathan Herrewijnen
99385d69e9 Booting bl31 fails as soon as we jump into it at 02021810 2024-08-13 16:42:17 +02:00
Jonathan Herrewijnen
7a80b9f5a9 Boots BL1 correctly by setting some things (twin) 2024-08-12 18:58:49 +02:00
Jonathan Herrewijnen
4bbb11908f Merge branch 'main' of https://git.herreweb.nl/EljakimHerrewijnen/Samsung_S7 2024-08-12 16:58:46 +02:00
Jonathan Herrewijnen
de8395b286 updated docs 2024-08-12 16:58:34 +02:00
Jonathan Herrewijnen
19d20965db updated docs 2024-08-12 16:57:40 +02:00
6e4a22b5c3 pushed ghidra db 2024-08-12 16:56:19 +02:00
5e7fd96d40 fixed conflicts 2024-08-12 16:53:25 +02:00
2a0cd7ef02 bl1 authenticated and jumped to 2024-08-09 22:22:16 +02:00
cf83b3d34e Merge pull request 'altered-script-flow' (#1) from altered-script-flow into main
Reviewed-on: #1
2024-08-09 20:21:42 +00:00
Jonathan Herrewijnen
5d6204efa3 Minor docs update. Trying to dump memory 2024-08-09 22:16:13 +02:00
Jonathan Herrewijnen
e8a997fee8 Merge branch 'main' of https://git.herreweb.nl/EljakimHerrewijnen/Samsung_S7 into altered-script-flow 2024-08-09 15:26:18 +02:00
Jonathan Herrewijnen
5cf20aa834 Merge branch 'main' of https://git.herreweb.nl/EljakimHerrewijnen/Samsung_S7 2024-08-09 13:16:16 +02:00
Jonathan Herrewijnen
34c23e0d2a add venv to gitignore 2024-08-09 13:15:31 +02:00
fbf826c99b authbl1 with bl1 works 2024-08-09 12:57:34 +02:00
Jonathan Herrewijnen
11bd8dd512 changed exploit flow 2024-08-08 19:46:04 +02:00
d3ffb96db4 Readme update 2024-08-08 11:47:47 +02:00
63befbb676 .gitignore update 2024-08-08 11:45:22 +02:00
5cece6a205 .gitignore update 2024-08-08 11:44:56 +02:00