Discover gists

A small Device Tree Bringup Guide

Introduction

So, you guys might be wondering, how do these "Developers" get your favourite Custom roms, such as LineageOS, Paranoid Android etc., to their own devices. Well I'm here to Guide you on how to do it, specifically on how to bringup or make your own device tree from scratch or adapting.

Gist of this Guide: This is for people with genuine interest in Android OS porting/development. After going through this guide, you should be able to do a total device tree bringup on your own.

Prerequisite: Certain requirements are to be met before you start with this amazing journey.

The list below is compiled to inform, guide, and inspire budding security researchers. Oh and to pick something for bedtime reading too.

Included in the list are works on the following topics related to MCU/SoC security:

Secure boot
Fault injection
Side channel attacks

At the end of the list, there is also a section with links to articles of potential general interest, not addressing vulnerabilities in any specific device.

This article proved to be a decent starting point, but I was particularly interested in allowing password-based logins to OpenVPN using a username/password backed by FreeIPA (opposed to client certificates) as the identity provider.

IPA join your VPN machine: ipa-client-install --mkhomedir
Get a kerberos ticket: kinit
Create a Kerberos service principle and HBAC rule for openvpn access:

ipa service-add openvpn/`hostname`

Create new hbacrule in console, mark host as the VPN host, and whatever group you want to restrict access to:

Complete Recent Discord Quest

Note

This no longer works in browser!

Note

This no longer works if you're alone in vc! Somebody else has to join you!

How to use this script:

Accept the quest under User Settings -> Gift Inventory

LSA Whisperer

Thank you to SpecterOps for supporting this research, to Elad for helping draft this blog, and to Sarah, Daniel, and Adam for proofreading and editing! Crossposted on the SpecterOps Blog.

What follows is the culmination of two years of research with funding by SpecterOps and contributions from many of my coworkers.

Special thanks are needed to Elad, Lee, Will, Daniel, and Kai. Elad, Lee, and Will have contributed several ideas to the project, which are documented here, and have each spent multiple days testing the tool. Daniel has answered all of my inevitable questions about AzureAD (whoops, now Ent

Install Arch Linux in a Virtual Machine

Video tutorial

A video is available that introduces Arch Linux and covers OS configuration steps if you would prefer that format:

Arch Linux: Base Install in Virtual Machine

References

I used the following references to learn how to install Arch Linux in a virtual machine:

Arch Wiki: Installation guide

	/**
	* Force directed graph layout algorithm according to Fruchterman and Reingold's principle.
	* The algorithm can be summarized as follows:
	* algorithm SPRING(G:graph);
	* place vertices of G in random locations;
	* repeat N times
	* calculate the force on each vertex;
	* move the vertex c4
	* draw graph on canvas, plotter or any drawing tool.
	*

	public class Perlin {

	public int repeat;

	public Perlin(int repeat = -1) {
	this.repeat = repeat;
	}

	public double OctavePerlin(double x, double y, double z, int octaves, double persistence) {
	double total = 0;

	// 3D Dom viewer, copy-paste this into your console to visualise the DOM as a stack of solid blocks.
	// You can also minify and save it as a bookmarklet (https://www.freecodecamp.org/news/what-are-bookmarklets/)
	(() => {
	const SHOW_SIDES = false; // color sides of DOM nodes?
	const COLOR_SURFACE = true; // color tops of DOM nodes?
	const COLOR_RANDOM = false; // randomise color?
	const COLOR_HUE = 190; // hue in HSL (https://hslpicker.com)
	const MAX_ROTATION = 180; // set to 360 to rotate all the way round
	const THICKNESS = 20; // thickness of layers
	const DISTANCE = 10000; // ¯\\_(ツ)_/¯

	# finds all .js files that have either `</` or `/>` tags in them and renames them to .jsx
	find ./src -type f -name '.js' -not -name '.jsx' -not -name '*.ejs' -exec bash -c 'grep -l -E "</\|/>" "$0"' {} \; -exec bash -c 'mv "$0" "${0%.js}.jsx"' {} \;