marcnewlin

#!/usr/bin/env python3

import bluetooth
import re
import struct
import sys

if __name__ == "__main__":

  if len(sys.argv) < 2:

marcnewlin

#!/usr/bin/env python3

import usb.core
import struct
from collections import namedtuple

APPLE_VID = 0x05ac

Target = namedtuple("Target", ["vid", "pid", "name", "model", "total_size"])

marcnewlin

#!/usr/bin/env python3

'''

Firmware updates for the Alienware AW920K keyboard (and dongle) are encrypted
using a key derived from the size of the update.

This tool extracts the unencrypted firmware images from the update packages.

Instructions:

marcnewlin

Internal error: Oops: 5 [#1] PREEMPT SMP ARM
Modules linked in: wportal(O) init_addr(  (null) -   (null)), core_addr(bfa7c000 - bfa7d8bc)
 domain_redirect(O) init_addr(  (null) -   (null)), core_addr(bfa77000 - bfa77d08)
 domain_dns(O) init_addr(  (null) -   (null)), core_addr(bfa73000 - bfa739cc)
 wl(P) init_addr(  (null) -   (null)), core_addr(bf3cc000 - bf6be5c4)
 bcmvlan(P) init_addr(  (null) -   (null)), core_addr(bf3af000 - bf3bca8c)
 bcm_enet init_addr(  (null) -   (null)), core_addr(bf389000 - bf39ccc8)
 domain_libs(O) init_addr(  (null) -   (null)), core_addr(bf385000 - bf3853d4)
 br_filter(O) init_addr(  (null) -   (null)), core_addr(bf381000 - bf381610)
 nf_conntrack_netlink init_addr(  (null) -   (null)), core_addr(bf378000 - bf37c500)

marcnewlin

Internal error: Oops: 5 [#1] PREEMPT SMP ARM
Modules linked in: wportal(O) init_addr(  (null) -   (null)), core_addr(bfa7c000 - bfa7d8bc)
 domain_redirect(O) init_addr(  (null) -   (null)), core_addr(bfa77000 - bfa77d08)
 domain_dns(O) init_addr(  (null) -   (null)), core_addr(bfa73000 - bfa739cc)
 wl(P) init_addr(  (null) -   (null)), core_addr(bf3cc000 - bf6be5c4)
 bcmvlan(P) init_addr(  (null) -   (null)), core_addr(bf3af000 - bf3bca8c)
 bcm_enet init_addr(  (null) -   (null)), core_addr(bf389000 - bf39ccc8)
 domain_libs(O) init_addr(  (null) -   (null)), core_addr(bf385000 - bf3853d4)
 br_filter(O) init_addr(  (null) -   (null)), core_addr(bf381000 - bf381610)
 nf_conntrack_netlink init_addr(  (null) -   (null)), core_addr(bf378000 - bf37c500)

marcnewlin

# 0. place this script in your ghidra_script directory
# 1. open the target nRF24LU1P binary in Ghidra
# 2. open the python shell in Ghidra
# 3. `import logitech; l = logitech.logitech(currentProgram); l.do_it()

import ghidra
from ghidra.program.model.symbol import SourceType

class logitech(object):
    def __init__(self, currentProgram):

marcnewlin

#!/usr/bin/env python

# sorry this is Python 2 -- the bootloader trigger breaks with Python 3 and I was too lazy to debug

import usb, time, struct

# Logitech Unifying dongle
class unifying_dongle:

  # constructor

marcnewlin

Keybase proof

I hereby claim:

• I am marcnewlin on github.
• I am marcnewlin (https://keybase.io/marcnewlin) on keybase.
• I have a public key ASAYVg2XbgHV-IGvrI7yQJk9Lh9W9F6BzZMOM47PDlS_Nwo

To claim this, I am signing this object: