Advanced Search
Search Results
15 total results found
Board overview
UART serial Once removing the case, there is a five pin header on the rear of the device. Four of the five pins are used. This is pictured below. The SPA504G's UART serial header operates using the following configuration: +3.3 V 9600 baud flow control disab...
Serial boot logs
When connecting to the UART serial header, the following is printed to the console during boot: Basic POST completed... Success. Last reset cause: Hardware reset (Power-on reset) PSPBoot1.4 rev: 1.4.0.6 (c) Copyright 2002-2008 Texas Instruments, Inc. All ...
Titan SoC
The SPA504G uses the Texas Instruments TNETV1057ZDW processor on a Titan SoC, pictured below. It is super hard to find a datasheet for this CPU/SoC; however, the boot logs reveal that the CPU operates at 87.5 MHz, and the SoC features 60 KB (61.44 KiB) of memo...
Memory
Extra memory (beyond what is provided on the SoC) is provided through the W9812G6JH-6 IC, manufactured by Winbond. The datasheet for this IC can be downloaded from here. This IC offers 16 MB of volatile memory (2,097,152 words x 4 banks x 16 bits), and operate...
Flash storage
Whilst no information could be found online regarding the MX T122541 IC, Macronix is semiconductor manufacturer which specialises in producing non-volatile memory. It is likely that there are JTAG headers on the SPA504G. Maybe we can identify more about this I...
Firmware format
The firmware file is made up of the following components, each located in the firmware file after one another: Firmware header Module header table Module data This can be extracted using the following Kaitai Struct definition: Kaitai Struct definition m...
Firmware artefacts
Extracted using the SPA504G extraction utility available here. spa50x-30x-7-6-2f_artefacts.zip
Socials
Activity (sorted alphabetically) Price Suggested head count Suggested location Airsoft £30 - £50 per person - Gloucester Prison Aquarium visit Axe/knife throwing Beach trip Beer tasting - Stroud Brewery - being investigated by Tom- B...
Frida SSL intercept
Overview The output from these Frida scripts should be entered into Wirehark's '(Pre)-Master-Secret log filename' field under 'TLS' in 'Protocol Preferences'. The files should contain one set of keys per line. The window is shown below. To quickly navigate to...
Logo
KFC
API key Requests to the KFC API requires a KFC API key. This, in addition to several other API keys and endpoints, can be retrieved from the <script> tag at the end of the KFC homepage. Requests to the KFC homepage must come from a legitimate browser (determin...
Agent Design
Overview This pipeline focuses on generating exam questions from textbooks, emphasizing quality control at various stages. It involves a sequence of specialized agents, each responsible for a specific task, from text extraction to question generation, ensuring...
Backup Architecture
Cloudflare Tunnel Configuration
Navigate and sign in to the Cloudflare Zero Trust dashboard. Using the sidebar, navigate to Networks -> Tunnels. Click the blue 'Create a tunnel' button. Select the default 'Cloudflared' connector type, and then click 'Next'. Give the tunnel a ...
Docker Compose Template
Guidelines These guidelines are suggested in order to maximise reliability of hosted services. Store secrets and tokens in a .env file adjacent to the docker-compose.yml file. The environment variables are automatically interpolated when docker compose up is...