Light

fotisl / utimaco Goto Github PK

View Code? Open in Web Editor NEW

43.0 7.0 61.0 12 KB

Tools for reverse engineering the Utimaco Firmware

License: BSD 3-Clause "New" or "Revised" License

Python 100.00%

utimaco's Introduction

Utimaco Firmware Tools

Information

These are a couple of tools for reverse engineering the Utimaco Firmware, plus an exploit for a simple vulnerability.

All of these tools were presented at my Recon Brussels 2017 talk.

You can find the presentation at my website.

Tools

fwtools/ : Firmware tools
exploit/ : A simple exploit
tms320c64x/ : Various files regarding the TMS320C64x architecture

License

This work is licensed under the BSD 3-Clause License.

utimaco's People

Contributors

Stargazers

Watchers

Forkers

idkwim techlord-rce peterfillmore minkione r3zk0n nevun v-p-b aczid 0x375 eriksmets xtratoast endothermic wanion badpass wwebb-r7 richinseattle dnet cunninglogic wapiflapi secretsquirrel iangcarroll orziruo letoram guedou filternetz egypt irregulator gi0 c3d2 datenwolf 2001db8 mmilenko ocakgun thebodster tonynaggs rafaelrmachado ra75 whiskysec trust-point rflaperuta buenaideastudio ptu fpmurphy shekkbuilder rootjacker pombredanne kleopatra999 abuuuu f0829 amesianx masterscott global-localhost global19 global19-atlassian-net firebitsbr

utimaco's Issues

NameError: global name 'msg' is not defined

Hi @fotisl,

Really nice talk on RECON BRUSSELS 2017! Thanks a lot for sharing knowledge with everybody.
I'm trying to play a little bit with the exploit but I'm getting the error below.

$ python readvmbk1.py
Traceback (most recent call last):
  File "readvmbk1.py", line 114, in <module>
    c.connect()
  File "readvmbk1.py", line 90, in connect
    return self._connect_net(msg)
NameError: global name 'msg' is not defined

In my case I'm trying to retrieve the "FLASH\VMBK1.db" from a remote CryptoServer device so I changed the line below in your python script with my device IP address before run it.

c = cs2('192.168.1.35')

I took a look on the code and I couldn't figure out where or how the "msg" should be assigned a value.
Could you please help me to get this exploit working?
Thanks!

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.