vt1200/dwt/tcpip/run/final2_jump.log at master - vt1200 - Gitea: Git with a cup of tea

arti/vt1200

0 Fork 1

mirror of https://git.k-space.ee/arti/vt1200.git synced 2026-10-30 12:03:54 +02:00

Files

T

SDD 01923ecb69 dwt/tcpip: map the socket API and fetch a file over TFTP into RAM

The firmware's tftp_open hangs in its resolver from the rdebug process, so
the payload speaks RFC 783 over the firmware socket API: socket(2,2,0),
sendto(RRQ), recvfrom(DATA)/ACK into a malloc'd buffer, close. Verified
live: 600 B fetched from 192.168.99.1 into the malloc buffer, server RRQ
logged, and rdebug peek matches probe.bin byte-for-byte.

Notes: dwt/notes/TCPIP.md (function table, ABI, limits) and the
loader/transport hand-off in dwt/notes/LOADER_CROSS.md.

2026-10-18 15:24:34 +03:00

6 lines

282 B

Plaintext

Raw Permalink Blame History

 [+] challenge f8 74 7d 75 00 00 7c 61 02 63 a8 c0 f8 6c 7d 76
 [+] reply     08 66 31 7f 4f 55 f3 c9 62 d3 c9 6a 13 2e d8 3d
 opcode 7 -> flag=0x00 payload=44 6f 6e 65 0a 00 (b'Done\n\x00')
 [.] jump returned 0x00000000 (0)
 jump 0x01870000: returned 0x00000000 (0) payload=00 00 00 00