RSSAmplifier

Blog

Bof.

syscall.euRSS feed ↗10 posts

Latest posts

Disable apt pager

echo 'Binary::apt::Pager "false";' > /etc/apt/apt.conf.d/96-nopager chmod a+r /etc/apt/apt.conf.d/96-nopager

Upgrading a Toshiba NAS HDD firmware on Linux

TL;DR I reversed the firmware updater of my Toshiba HDD to be able to update it on Linux. The following commands should work, USE AT YOUR OWN RISK : $ wget https://www.canvio.jp/en/support/download/hdd/ot_ihdd/fw/ISFw.dat $ grep -C2 MODELNAME ISFw.dat # ^ # |___ identify the right filename here $ wget https://www.canvio.jp/en/support/download/hdd/ot_ihdd/fw/sk060202.ftd # hdparm --fwdownload-mode3…

Adding a newline when necessary to bash's prompt

The problem Since years I’ve raged when my cursor in my bash prompt was incoherent: the blinking rectangle was in one place but deleting chars would delete the wrong ones. I finally took the time to try to understand what was wrong. Long story short: if the previous command did no end with a newline. A typical case is when using curl , which by default, outputs the page without adding a newline at…

Making DHCP work without a Livebox

Context I replaced my Livebox with a GPON, but recently, Orange reinforced the checks they do on DHCP requests options. The most important ones are: authentication is actually verified, instead of relying on just identification as before DHCP requests must have a CoS value of 6 in the VLAN header Debian 11 Linux setup The most “challenging” part is having DHCP packets with a CoS value of 6.…

Replacing the Livebox 5 with an ONT GPON LXT-010G-D

Context I bought a GPON LXT-010G-D to replace my Livebox 5, which comes with an integrated ONT, so you cannot use an MC220L easily. Plus, the Sercomm FGS202 that is provided by Orange does not allow you to spoof the necessary information to register on the GPON tree (if I understood things correctly). LXT basic setup The LXT starts with a default IP: 192.168.1.1 . To change it, login on the HTTP…

ONT GPON LXT-010G-D basic info

I bought a GPON LXT-010G-D to replace my Livebox 5. Basic survival information: default IP: 192.168.1.1 default user/pass for web: user / user (low priv) adsl / realtek telnet, on port 23. user / user (low priv) adsl / realtek : root leox / leolabs_7 : root Useful commands: diag : Cisco like diagnostic and config shell pon get transceiver tx-power

ASUS ASIO2.sys exploitation

This post is a follow up to the vuln research in ASUS AsIO2 driver, which provides, among others, Everyone the following primitives: arbitrary MSR read and write R/W access to arbitrary physical memory a stack based buffer overflow My initial tests on physical memory seemed to indicate it was read-only, but they were a result of me inverting the results of AllocatePhysMemory … However, it’s…

ASUS ASIO2.sys driver fun

So a friend built a new PC, and he installed some fans on his GPU, connected on headers on the GPU board. Unfortunately, setting the fan speed does not seems to work easily on Linux, they don’t spin. Update: He did finally have everything working. Here is the writeup. On Windows, ASUS GPU Tweak II works. So the idea was to reverse it to understand how it works. Having had a look the various files…

WinDbg: setting up a cross-VM debugging, tips

Setting up WinDbg can be a real pain. This posts documents how to lessen the pain (or at least to make it less painful to do another setup). Requirements: a Windows 10 VM (I use VMWare workstation) WinDbg (classic, not Preview) installed in that VM Getting started with network KD A few things to keep in mind: the debugee connects to the host you will have no error message if things fail The…

Active Directory searches from Linux

Imagine you have a Linux PC inside an Active Directory domain, and that you want to be able to request information using LDAP, over TLS, using Kerberos authentication. In theory, everything is easy, in practice, not so much. For the impatient, here is the magic command line, provided that you already requested a valid TGT using kinit username@REALM.SOMETHING.CORP : ldapsearch -N -H…