Advanced Search
Search Results
67 total results found
Serial boot logs
When connecting to the UART serial header, the following is printed to the console during boot: Basic POST completed... Success. Last reset cause: Hardware reset (Power-on reset) PSPBoot1.4 rev: 1.4.0.6 (c) Copyright 2002-2008 Texas Instruments, Inc. All ...
Titan SoC
The SPA504G uses the Texas Instruments TNETV1057ZDW processor on a Titan SoC, pictured below. It is super hard to find a datasheet for this CPU/SoC; however, the boot logs reveal that the CPU operates at 87.5 MHz, and the SoC features 60 KB (61.44 KiB) of memo...
Memory
Extra memory (beyond what is provided on the SoC) is provided through the W9812G6JH-6 IC, manufactured by Winbond. The datasheet for this IC can be downloaded from here. This IC offers 16 MB of volatile memory (2,097,152 words x 4 banks x 16 bits), and operate...
Flash storage
Whilst no information could be found online regarding the MX T122541 IC, Macronix is semiconductor manufacturer which specialises in producing non-volatile memory. It is likely that there are JTAG headers on the SPA504G. Maybe we can identify more about this I...
Boot Loader
The SPA504G uses the PSPBoot boot loader. This is an old bootloader with not much info out there but there is one piece of documentation floating arround and can be found here. The bootloader can be found in the firmware update files: psbl.elf Recovery Mode Th...
Firmware validation
The logic to validate the firmware bundle begins at: libupg_validate_firmware_mem. This is called from libupg_upgrade_mem that is subsequently called from the command upgrade in the psbl terminal. This can be seen from the upgrade command handler: int upgrade...
Firmware format
The firmware file is made up of the following components, each located in the firmware file after one another: Firmware header Module header table Module data This can be extracted using the following Kaitai Struct definition: Kaitai Struct definition m...
Firmware artefacts
Extracted using the SPA504G extraction utility available here. spa50x-30x-7-6-2f_artefacts.zip
Socials
Activity (sorted alphabetically) Price Suggested head count Suggested location Airsoft £30 - £50 per person - Gloucester Prison Aquarium visit Axe/knife throwing Beach trip Beer tasting - Stroud Brewery - being investigated by Tom- B...
Midroll
Every episode of Panique au Village (2002) Out of the Closet (2014) Free Software Foundation videos: Fight to Repair Shoetool Rewind The University of Costumed Heroes TV adverts Cravendale "Time Travellers" Turkmenistan Visa Nescafe Dolce ...
Frida SSL intercept
Overview The output from these Frida scripts should be entered into Wirehark's '(Pre)-Master-Secret log filename' field under 'TLS' in 'Protocol Preferences'. The files should contain one set of keys per line. The window is shown below. To quickly navigate to...
Logo
KFC
API key Requests to the KFC API requires a KFC API key. This, in addition to several other API keys and endpoints, can be retrieved from the <script> tag at the end of the KFC homepage. Requests to the KFC homepage must come from a legitimate browser (determin...
Agent Design
Overview This pipeline focuses on generating exam questions from textbooks, emphasizing quality control at various stages. It involves a sequence of specialized agents, each responsible for a specific task, from text extraction to question generation, ensuring...
Flashing Firmware
This Youtube video covers this fairly well https://www.youtube.com/watch?v=D7MeslXuo7Q. Full writeup coming soon ^tm
Video Guides
Playing Rush Ob Playing Built to Last Glacier Playing against NEH Asset Spam From 1:07:30
Backup Architecture
Cloudflare Tunnel Configuration
Navigate and sign in to the Cloudflare Zero Trust dashboard. Using the sidebar, navigate to Networks -> Tunnels. Click the blue 'Create a tunnel' button. Select the default 'Cloudflared' connector type, and then click 'Next'. Give the tunnel a ...
Docker Compose Template
Guidelines These guidelines are suggested in order to maximise reliability of hosted services. Store secrets and tokens in a .env file adjacent to the docker-compose.yml file. The environment variables are automatically interpolated when docker compose up is...
Service Registry
Moved here