exeDSP from SWU_T-ECPAKUC_001012_I03_ES000KS000RS000_120308

[arris69]

feel free to dig into

http://uploaded.to/file/3ohusxhb

[juzis]

Little by little

[arris69]

Little by little

sorry, forgot the original link: http://www.samsung.com/us/support/owner ... ES8000FXZA

[prairie]

Do you have secret key to share for T-ECPAKUC?

[arris69]

Do you have secret key to share for T-ECPAKUC?

there is no key here, this time we didn't needed to search and try around. nice tehnician did some hardware stuff like this.

[nobody]

lol! you are so funny!

[maxprasak]

Do you have secret key to share for T-ECPAKUC?

there is no key here, this time we didn't needed to search and try around. nice tehnician did some hardware stuff like this.

So can we decrypt ES firmware or not ???

[arris69]

...

So can we decrypt ES firmware or not ???

it was a dump of the mmc-chip -> already decrypted during software update. -> no need to decrypt it

but what you need from the firmware?

[maxprasak]

it was a dump of the mmc-chip -> already decrypted during software update. -> no need to decrypt it

Aha, good job !

but what you need from the firmware?

I think this question is probably useless there at somygo forum

Generally I want to look how it works and if I can help us to bring that to be more useful for masses...

[juzis]

Generally I want to look how it works and if I can help us to bring that to be more useful for masses...

Then you came to right place
Power on IDA and feed the decrypted exeDSP for it. Reverse engineering is the only way to make something usefull (except geting root and use comon linux features like nfs and samba mou nts et cetera.)

Firtst goal - to execute arbitrary code, get shell access.
Second and all further - depends from requests and imagination.

What i did if i was you - checked methods who already works on D series... like widgets, unsigned games, some kind of channel import/export to different formatted usb dongles. Yes, most holes are closed, but i think if they
close one door, here should be another backdoor to get in

Not much for the beginning, but...