Skip to content

Instantly share code, notes, and snippets.

.global _start
_start:
.org 0x20000
.org 0x20fa4
BR rfkill@l
.org 0x20faa
orig:
.org 0x234ea
gpio_out:
.org 0x24ee4
[134.140989] HW.GFX.GMA.Initialize
[134.141256] HW.GFX.GMA.Panel.Setup_PP_Sequencer
[134.141278] HW.GFX.GMA.Registers.Read: 0x0e200001 <- 0x000c7208:PCH_PP_ON_DELAYS
[134.141321] HW.GFX.GMA.Registers.Read: 0x13880001 <- 0x000c720c:PCH_PP_OFF_DELAYS
[134.141370] HW.GFX.GMA.Registers.Read: 0x0004af06 <- 0x000c7210:PCH_PP_DIVISOR
[134.141405] PP: Using preset POWER_UP_DELAY of 361600 us.
[134.141428] PP: Using preset POWER_UP_TO_BL_ON of 100 us.
[134.141448] PP: Using preset POWER_DOWN_DELAY of 500000 us.
[134.141471] PP: Using preset BL_OFF_TO_POWER_DOWN of 100 us.
[134.141491] PP: Using preset POWER_CYCLE_DELAY of 500000 us.
--- working 2019-07-20 14:25:07.373666717 -0700
+++ broken 2019-07-20 14:25:17.356411552 -0700
@@ -82,14 +82,14 @@
HW.GFX.GMA.Registers.Write: 0x80003015 -> 0x00064f08:DDI_BUF_TRANS_C_S9T1
HW.GFX.GMA.Registers.Write: 0x000000cd -> 0x00064f0c:DDI_BUF_TRANS_C_S9T2
HW.GFX.GMA.Registers.Unset_And_Set_Mask: DISPIO_CR_TX_BMU_CR0
-HW.GFX.GMA.Registers.Read: 0x00000000 <- 0x0006c00c:DISPIO_CR_TX_BMU_CR0
+HW.GFX.GMA.Registers.Read: 0x08800000 <- 0x0006c00c:DISPIO_CR_TX_BMU_CR0
HW.GFX.GMA.Registers.Write: 0x0036db00 -> 0x0006c00c:DISPIO_CR_TX_BMU_CR0
HW.GFX.GMA.Registers.Set_Mask: 0x80000000 .S CPU_VGACNTRL
HW.GFX.GMA.Initialize
HW.GFX.GMA.Panel.Setup_PP_Sequencer
HW.GFX.GMA.Registers.Read: 0x0e200064 <- 0x000c7208:PCH_PP_ON_DELAYS
HW.GFX.GMA.Registers.Read: 0x13880e20 <- 0x000c720c:PCH_PP_OFF_DELAYS
HW.GFX.GMA.Registers.Read: 0x0004af06 <- 0x000c7210:PCH_PP_DIVISOR
HW.GFX.GMA.Registers.Set_Mask: 0x00000002 .S PCH_PP_CONTROL
HW.GFX.GMA.Registers.Read: 0x00000008 <- 0x000c7204:PCH_PP_CONTROL
HW.GFX.GMA.Registers.Write: 0x0000000a -> 0x000c7204:PCH_PP_CONTROL
HW.GFX.GMA.Registers.Is_Set_Mask: DDI_BUF_CTL_A
HW.GFX.GMA.Registers.Read: 0x00000091 <- 0x00064000:DDI_BUF_CTL_A
HW.GFX.GMA.Initialize
HW.GFX.GMA.Panel.Setup_PP_Sequencer
HW.GFX.GMA.Registers.Read: 0x0e200064 <- 0x000c7208:PCH_PP_ON_DELAYS
HW.GFX.GMA.Registers.Read: 0x13880e20 <- 0x000c720c:PCH_PP_OFF_DELAYS
HW.GFX.GMA.Registers.Read: 0x0004af06 <- 0x000c7210:PCH_PP_DIVISOR
HW.GFX.GMA.Registers.Set_Mask: 0x00000002 .S PCH_PP_CONTROL
HW.GFX.GMA.Registers.Read: 0x00000008 <- 0x000c7204:PCH_PP_CONTROL
HW.GFX.GMA.Registers.Write: 0x0000000a -> 0x000c7204:PCH_PP_CONTROL
HW.GFX.GMA.Registers.Is_Set_Mask: DDI_BUF_CTL_A
HW.GFX.GMA.Registers.Read: 0x00000091 <- 0x00064000:DDI_BUF_CTL_A
[0.456363] HW.GFX.GMA.Panel.Setup_PP_Sequencer
[0.456370] HW.GFX.GMA.Registers.Read: 0x0e200064 <- 0x000c7208:PCH_PP_ON_DELAYS
[0.456378] HW.GFX.GMA.Registers.Read: 0x13880e20 <- 0x000c720c:PCH_PP_OFF_DELAYS
[0.456385] HW.GFX.GMA.Registers.Read: 0x0004af06 <- 0x000c7210:PCH_PP_DIVISOR
[0.456386] HW.GFX.GMA.Registers.Set_Mask: 0x00000002 .S PCH_PP_CONTROL
[0.456393] HW.GFX.GMA.Registers.Read: 0x00000008 <- 0x000c7204:PCH_PP_CONTROL
[0.456394] HW.GFX.GMA.Registers.Write: 0x0000000a -> 0x000c7204:PCH_PP_CONTROL
[0.456401] HW.GFX.GMA.Registers.Is_Set_Mask: DDI_BUF_CTL_A
[0.456402] HW.GFX.GMA.Registers.Read: 0x00000091 <- 0x00064000:DDI_BUF_CTL_A
[0.456403] HW.GFX.GMA.Registers.Unset_And_Set_Mask: SHOTPLUG_CTL
#include <signal.h>
#include <stdio.h>
#include <malloc.h>
#include <setjmp.h>
#include <stdbool.h>
static jmp_buf omg;
struct list {
char dummy[16384];
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /HNAP1/ HTTP/1.1" 404 204 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET / HTTP/1.1" 403 4655 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /cgi-bin/webcm?getpage=..%2Fhtml%2Findex.html HTTP/1.1" 404 211 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /Main_Login.asp HTTP/1.1" 404 212 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /login.html HTTP/1.1" 404 208 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /info/Login.html HTTP/1.1" 404 213 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /Docsis_system.asp HTTP/1.1" 404 215 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET / HTTP/1.1" 403 4655 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /ui/1.0.99.173728/dynamic/login.html HTTP/1.1" 404 233 "-" "-"
10.0.0.2 - - [01/Jul/2017:22:48:23 -0700] "GET /ubicom.js HTTP/1.1" 404 207 "-" "-"
#!/usr/bin/env python
# Copyright 2016 Mike Ryan
# Copyright 2016 Matthew Garrett
#
# This code will connect to a Bluetooth nuLock and reset the password to 123456
#
# This file is part of PyBT and is available under the MIT license. Refer to
# LICENSE for details.
0x26, 0x00, 0xa0, 0x00, 0x97, 0x91, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x0d, 0x13, 0x0e, 0x13, 0x2f, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x0e, 0x12, 0x0e, 0x13, 0x0f, 0x12, 0x0e, 0x13, 0x0f, 0x12, 0x0f, 0x12, 0x0d, 0x13, 0x91, 0x13, 0x2f, 0x13, 0x2f, 0x13, 0x2e, 0x13, 0x0f, 0x12, 0x0f, 0x12, 0x0f, 0x12, 0x0e, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x0e, 0x12, 0x0f, 0x12, 0x0f, 0x12, 0x2f, 0x13, 0x2f, 0x13, 0x2e, 0x13, 0x2f, 0x13, 0x2f, 0x13, 0x30, 0x12, 0x2e, 0x13, 0x2f, 0x13, 0x00, 0x07, 0x58, 0x96, 0x91, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x0f, 0x12, 0x0e, 0x13, 0x2e, 0x13, 0x0f, 0x12, 0x0e, 0x13, 0x0e, 0x12, 0x0f, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x0e, 0x12, 0x0f, 0x12, 0x0e, 0x13, 0x0e, 0x13, 0x90, 0x14, 0x2e, 0x13, 0x2f, 0x13, 0x2f, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x0d, 0x13, 0x0f, 0x12, 0x0e, 0x13, 0x0f, 0x12, 0x0e, 0x13, 0x0e, 0x13, 0x0e, 0x13, 0x2e, 0x13, 0x2f, 0x13, 0x2f, 0x13, 0x2f, 0x13, 0x2e, 0x13, 0x2f, 0x13, 0x2f, 0x13, 0x2e, 0x13, 0x00, 0x0d, 0x05, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00