Keen to see you tackle a more realistic device, say without the full uboot version, a login prompt for UART, encrypted firmware etc. that's what I keep getting lately, or not being able to find a file system at all after desoldering and reading the memory chip 😢
@muh1h1
5 ай бұрын
Thanks for making these videos! I watch them purely for education and entertainment, even though i have no professional relationship with any of this. I really find your videos very interesting to watch and easy to grasp, so please keep them going!!!
@mattbrwn
5 ай бұрын
This is awesome to hear :)
@pinpinpoola
5 ай бұрын
@@mattbrwnMatt, in the future please could you move the picture-in-picture to the top-right corner? On one of the last videos, you had two terminal sessions side by side and the command line in the right hand session was obscured by the inset video of you. Was hard to follow along.
@mytechnotalent
5 ай бұрын
Nice job as always Matt. Really like the firmware tools, awesome automation for this extraction analysis.
@TheRealWulfderay
5 ай бұрын
Thanks, Matt. Uboot has always seemed a bit mystical to me. Very practical example.
@OsamaAltobuli
15 күн бұрын
Great video ! Thanks for all these useful details and tools. I’m dealing with similar reset issue on a device I’m trying to recover, can you share how did you identified the block of memory you write without resetting the device?
@feff6754
5 ай бұрын
Lots of really good info here, thanks!
@XYZ56771
5 ай бұрын
Thank you for the content, great insights, as always!
@Spozinbro
5 ай бұрын
Love your stuff! This is super useful for what I'm trying to do right now with my router, keep up the awesome work!
@bartzilla333
4 ай бұрын
If you run 'bdinfo' that will give you the memory organization of U-Boot. Failures on md/mw on address could be; 1. Memory is mapped to CPU registers, 2 the address does not exist, or 3 U-boot could be running out of that memory rang. There could be a lot of things to cause failure.
@mattbrwn
4 ай бұрын
Yeah that makes sense. I was just writing over random blocks of memory :D
@alecsei393ify
5 ай бұрын
Thank you , the content is awesome, good information!!
@sonysav3813
5 ай бұрын
Nice job Matt 👍
@tritnaha1345
2 ай бұрын
You should give any Avaya J-series phone a try, they offer a pretty fun challenge
@zachkost-smith6923
5 ай бұрын
Surprised to see that your parse uboot dump wasn't just wrapping a call to 'xxd -r'
@mattbrwn
5 ай бұрын
why use bash when python do trick? ;)
@kixxthemanz437
4 ай бұрын
Matt make a video on extracting the files on locked down phones like Samsung, extracting the files that tell the device can use ADB or that tell the device if the OEM is on or not so we can extract them and change the values then push them back to the device to gain root access
@charlesdorval394
3 ай бұрын
Wow! That was sooooooooooooooo interesting! Thanks! I wish I had some device to mess around with now lol
@tomwimmenhove4652
5 ай бұрын
Don't you think the reset is simply caused by you overwriting code in memory that is currently being executed? Maybe the bootloader code itself, or interrupt vectors?
@mattbrwn
5 ай бұрын
that's a good point. that could totally be it.
@sp33dracerx2
5 ай бұрын
Good stuff
@EricMarsi
5 ай бұрын
Awesome work dude!
@kaderdz4564
4 ай бұрын
am i only person get entertained by watching your content 🤠 ❤ GOOD 👍 JOB 👌 BRO
@njmust
11 күн бұрын
From Unlock boot loader do anyone by any os system like putty in window u using ubuntu and using picocom. But when the boot is lock now you do this is the thing..
@saad1983
5 ай бұрын
awesome tool. i will be putting it to work and def makes life a whole lot easier to just be able to fetch the actual files rather than MD. Can you elaborate on any write methods which can help write files or strings back to a location on an ext4fs via uboot.
@mattbrwn
5 ай бұрын
yeah I'm going to work on adding a tool that will do that. You do it the opposite way of reading. First write data to memory with the "mw" command. Second write file to filesystem with the "ext4write".
@saad1983
5 ай бұрын
@@mattbrwn will def give it a shot. thank you.
@timmturner
5 ай бұрын
What's the sensitive nature of the device? I don't understand why you would not want the viewers to know what it is?
@wtftolate3782
5 ай бұрын
Can you do this to cell phones?
@robertsimon6911
5 ай бұрын
I have a Device, that boots it's normal OS after 30-60 seconds in u-boot command-prompt. Any chance to interrupt this autoboot?
@mattbrwn
5 ай бұрын
Can you interact with the uboot menu during that time? Come join us in discord for help with stuff like this 😁
@pinpinpoola
5 ай бұрын
@@mattbrwnso good to see you back on here Matt. I really enjoy your content and was worried when you stopped posting a year or so ago. Hope all is well. I am now catching up with the last few weeks content.
@DJStompZone
5 ай бұрын
bootretry is an environment variable containing the current delay in effect. Negative values mean boot retry will not occur. Unfortunately, *this value is only sampled on startup* - changing it will *not* prevent boot retry in the current session. If your build supports saving environment variables persistently: u-boot> setenv bootretry -1 u-boot> saveenv Otherwise you would have to modify the source and rebuild. If you wanted to get rid of that behavior entirely you could do something like `grep -r CONFIG_BOOT_RETRY *`, remove those lines, rebuild, and reflash. Definitely make sure you have a backup means of booting or flashing before overwriting the existing U-Boot, just in case
@Hobypyrocom
5 ай бұрын
if i have a firmware extracted from a device (example wifi camera), is there any way to modify the firmware? can you make such video?
@mattbrwn
5 ай бұрын
It depends on a lot of factors: what is the flash layout? what is the actual underlying system? what modifications do you want to make? Join us on discord (invite in description) and some of the community might be able to help you learn :)
@Hobypyrocom
5 ай бұрын
@@mattbrwn sadly i am not that far in, i just found the UART pins and managed to execute some useless commands, noticed that its a U-boot. just wanted to know if extracting the firmware is worth the effort for future modifications of the functionalities. for example i have many old wifi Chinese cameras, but they turned down the servers and now you cant connect the cameras, so i wanted to connect LAN module instead of the WiFi module that they use and that way make them work again, but i will probably have to change some settings for the camera to use the LAN connection instead the WiFi. thank you for the replay, i will definitely check and join the discord.
@xenoxaos1
5 ай бұрын
10:35 probably memory mapped io or memory that's being used by the bootloader.
Пікірлер: 42