Yaakov Saxon YSaxon

Initial setup (paths are assuming an Android target but you can obviously modify it)

cat << EOF > /data/local/tmp/shell1.sh
echo echo START >> /data/local/tmp/shell/infile
tail -n 1 -f /data/local/tmp/shell/infile | sh -i >> /data/local/tmp/shell/outfile 2>>/data/local/tmp/shell/outfile
EOF

chmod +x /data/local/tmp/shell1.sh

mkdir /data/local/tmp/shell

Analyzing Cortex-M Firmware Binary Files with Ghidra

Opening the Firmware Binary

Open the firmware binary in Ghidra

Establishing the Initial Memory Offset

Go to the data view and copy all the string addresses, and paste them into a Jupyter notebook with the code below
Sort and copy all the possible pointers (probably undefined4 type) similarly

Installing xdebug

Manually

apt install php7.4-debug

nano etc/php/7.4/apache2/php.ini

[Xdebug]
xdebug.mode = debug
xdebug.client_host = host.docker.internal

How to export messages from MQTT-Explorer to CSV

(copied from my comment here: thomasnordquist/MQTT-Explorer#632 (comment))

Open DevTools (should be an option in the file menu) Now in the JS Console

const reactRoot = document.querySelector('#app')._reactRootContainer;
const store = reactRoot._internalRoot.current.child.memoizedProps.store;
var tree = store.getState().connection.tree

	# Add this to your zshrc etc

	# modified from #http://broken-by.me/lazy-load-nvm/

	setup_nvm(){
	unset -f nvm node npm

	export NVM_DIR="$HOME/.nvm"
	[ -s "/opt/homebrew/opt/nvm/nvm.sh" ] && \. "/opt/homebrew/opt/nvm/nvm.sh" # This loads nvm
	[ -s "/opt/homebrew/opt/nvm/etc/bash_completion.d/nvm" ] && \. "/opt/homebrew/opt/nvm/etc/bash_completion.d/nvm" # This loads nvm bash_completion

	def find_and_extract_dex(file_path, output_path):
	try:
	with open(file_path, 'rb') as file:
	data = file.read()

	# DEX file header magic number and offset for file size
	dex_magic = b'dex\n'
	size_offset = 32
	size_length = 4


	// a more generalized version of https://gist.github.com/YSaxon/bdd00ce836dee657518d1937047e4ec6

	function createCriteriaFunction(propertyNames) {
	if (!Array.isArray(propertyNames)) {
	propertyNames = [propertyNames];
	}

	return function(obj) {
	if (!obj \|\| typeof obj !== 'object') return false;

	function isReduxStore(obj) {
	return obj && typeof obj === 'object' &&
	typeof obj.getState === 'function' &&
	typeof obj.dispatch === 'function' &&
	typeof obj.subscribe === 'function';
	}

	function isValidIdentifier(key) {
	return /^[a-zA-Z_$][a-zA-Z_$0-9]*$/.test(key);
	}

	import re
	from ghidra.program.model.data import Undefined
	from java.io import File
	from ghidra.app.util.exporter import CppExporter
	from ghidra.util.task import TaskMonitor
	from ghidra.app.util import Option
	from ghidra.program.model.listing import Function
	from ghidra.program.database.symbol import FunctionSymbol
	from ghidra.app.decompiler import DecompInterface
	from ghidra.program.model.listing import CodeUnit