Thursday, October 08, 2015

Broken, Abandoned, and Forgotten Code, Part 13

›
In the first twelve parts of this series , we identified an unauthenticated firmware update feature in the Netgear R6200 wireless router. U...
Thursday, September 17, 2015

Broken, Abandoned, and Forgotten Code, Part 12

›
In the previous part , I described how to strip out all but the most essential services and libraries in the stock firmware in order to get ...
Thursday, July 16, 2015

Broken, Abandoned, and Forgotten Code, Part 11

›
In the previous part, we moved away from emulation to working with physical hardware. We identified a UART header inside the Netgear R6200 t...
Thursday, July 09, 2015

Broken, Abandoned, and Forgotten Code, Part 10

›
Debugging and De-bricking the Netgear R6200 via UART Update: I forgot to credit my former colleague, Tim ( @bjt2n3904 ), for helping me l...
Thursday, June 25, 2015

Broken, Abandoned, and Forgotten Code, Part 9

›
In the previous part , we switched gears back to the Netgear R6200 upnpd after spending some time analyzing httpd . The HTTP daemon provide...
Thursday, June 18, 2015

Broken, Abandoned, and Forgotten Code, Part 8

›
In the previous few posts , we spent time reversing how the Netgear R6200's HTTP daemon parses a firmware header before writing the fi...
Monday, June 08, 2015

Broken, Abandoned, and Forgotten Code, Intermission

›
We're about halfway through the Broken, Abandoned series, so this is a good time to pause for a minute and take stock. At this point, t...
Thursday, June 04, 2015

Broken, Abandoned, and Forgotten Code, Part 7

›
In the previous post , I finished discussing the abCheckBoardID() function. I called attention to a checksum in the header generated by an ...