[App] samyGOso for D55xx/57xx/69xx MIPS/MSTAR

[zoelechat]

Bruno, you should learn quoting instead of reporting (twice)

Report reason: Warez

Reported by brunogts77 ? Sat 14 Nov 2015, 20:33
Hi, telnet doesn't work on MSTAR!
TO WORK WITH SHELL PLEASE: "http://yOUR IP/phpsysinfo/shell.php"
LOGIN=USER
PASSWORD=PASS

[Spoza]

Tried to use this on my D6900, but it segfaults:

Code: Select all

@ bin $ samyGOso -d -D -B -r -l /mtd_rwdata/widgets/user/SamyGO/SamyGO/opt/privateer/usr/libso/libSpeedUpGUI.so
Segmentation fault

Actualy it seems that "samyGOso" itself doesn't work as expected... but its thread is locked, so I can't report it there.

Executing just samyGOso seems to work:

Code: Select all

@ bin $ samyGOso
usage: samyGOso -p PID {-c CONFIG | -l /full/path/to/inject.so [-r (=resident)]} [-d (=debug on)] [-a (=add libc addressoffset )] [arg0,...,argN]
samyGOso v1.2.4 (c) bugficks 2013, sectroyer 2014

...but even trying to load the test lib fails

Code: Select all

@ bin $ samyGOso -d -D -B -r -l /tmp/lib_test.so
Segmentation fault

No log is created in /dtv...
(I suppose I have the -D switch correct - my TV uses exexDSP... it didn't work with -A or -T either)

[zoelechat]

Post moved, topic unlocked (I think I had locked it due to some spamming moron long time ago, forgot then )
Your problem is only samyGOso related, nothing to do with lib. Don't you already use samyGOso for other stuff?? You tested much IIRC...
Btw, -D is enough, no need for -B which is "fallback to exeDSP if exeTV/exeAPP is not found". Actually -B shouldn't be used with -D (maybe the problem?)

[sectroyer]

you can try using :
-p `pidof exeDSP` maybe helps.
Also try up/downgrading your fw to bruno version

[Spoza]

Bingo! Thanks!
Both options are correct - either using "-D" only, or using "-p `pidof exeSDP'" leads to success:

Code: Select all

@ phpsysinfo $ samyGOso -d -D -r -l /mtd_rwdata/widgets/user/SamyGO/SamyGO/opt/privateer/usr/libso/libSoftPowerOff.so
samyGOso v1.2.4 (c) bugficks 2013, sectroyer 2014
Injecting '/mtd_rwdata/widgets/user/SamyGO/SamyGO/opt/privateer/usr/libso/libSoftPowerOff.so' resident: '1'
mprotect: 0x2cd9beac
dlopen: 0x2d280c10
dlclose: 0x2d280dcc
dlsymaddr: 0x2d280e30
pc=2d24f120 gp=2d24f120 ra=2d22bce4 sp=7fe9bb88 fp=0
status=1008c13 hi=2 lo=22eea600 badvaddr=49e094d0 cause=10800020 pc=2d22bd08
at=1 v0=200 v1=2aab3b20
a0=7213ca4 a1=80 a2=1 a3=1
stack: 0x7fe88000-0x7fe9d000 length = 0x15000
executing injection code at 0x7fe9b92c
library injection completed!
Succeeded.

[blue4you]

I there any way to get root without waiting for smurt-hub on every start?

I use samyGOso 1.24 with a oscam server.
Thanks