vt1200/dwt/tcpip/run/inject_tftpc.log at master - vt1200 - Gitea: Git with a cup of tea

arti/vt1200

0 Fork 1

mirror of https://git.k-space.ee/arti/vt1200.git synced 2026-10-30 12:03:54 +02:00

Files

T

SDD 01923ecb69 dwt/tcpip: map the socket API and fetch a file over TFTP into RAM

The firmware's tftp_open hangs in its resolver from the rdebug process, so
the payload speaks RFC 783 over the firmware socket API: socket(2,2,0),
sendto(RRQ), recvfrom(DATA)/ACK into a malloc'd buffer, close. Verified
live: 600 B fetched from 192.168.99.1 into the malloc buffer, server RRQ
logged, and rdebug peek matches probe.bin byte-for-byte.

Notes: dwt/notes/TCPIP.md (function table, ABI, limits) and the
loader/transport hand-off in dwt/notes/LOADER_CROSS.md.

2026-10-18 15:24:34 +03:00

6 lines

282 B

Plaintext

Raw Permalink Blame History

 [+] challenge ff fc 5d d5 00 00 5d c4 02 63 a8 c0 ff fc 5d d6
 [+] reply     72 61 60 45 bf bb 0d 01 f0 17 9e b1 87 a0 fd 32
 opcode 7 -> flag=0x00 payload=44 6f 6e 65 0a 00 (b'Done\n\x00')
 [.] jump returned 0x00000000 (0)
 jump 0x01870000: returned 0x00000000 (0) payload=00 00 00 00