updates

azimut · azimut · commit c3b8ec0c0b2c · 2025-05-19T10:42:03.000-03:00
diff --git a/bootloader/u-boot.org b/bootloader/u-boot.org
@@ -11,36 +11,79 @@
 - supports booting: linux, android, chromeos...
 
 * commands
-|-------------------+-----------------------------------+-----------------|
-|        <c>        |                                   |                 |
-|        env        | print                             | see environment |
-|      setenv       | VARIABLE VALUE                    |                 |
-|      saveenv      | -                                 |                 |
-| sunxi_card0_probe |                                   | detect sdcard   |
-|      mmcinfo      |                                   |                 |
-|       fatls       | mmc 0:1                           |                 |
-|        mmc        | part                              |                 |
-|     fatwrite      | mmc 0:1 45000000 boot.img 4000000 |                 |
-|     fastboot      | flash boot patched.img            |                 |
-|-------------------+-----------------------------------+-----------------|
+|-------------------+-----------------------------------+--------------------------------|
+|        <c>        |                <c>                |                                |
+|        env        |               print               | see environment                |
+|     printenv      |             VARIABLE              |                                |
+|      setenv       |          VARIABLE VALUE           |                                |
+|       reset       |                 -                 |                                |
+|      saveenv      |                 -                 | makes the changes permanent    |
+| sunxi_card0_probe |                                   | detect sdcard                  |
+|       fatls       |              mmc 0:1              |                                |
+|       tftp        |             ADDR FILE             | writes tftp FILE in given ADDR |
+|        mmc        |               part                |                                |
+|      mmcinfo      |                                   |                                |
+|       nand        |              page N               | dumps N page in hex            |
+|     fatwrite      | mmc 0:1 45000000 boot.img 4000000 |                                |
+|     fastboot      |      flash boot patched.img       |                                |
+|-------------------+-----------------------------------+--------------------------------|
 * environment
 |-----------------+---------------------------------+-------------------|
-|                 |               <c>               |                   |
-| ipaddr          |               IP                |                   |
-| serverip        |               IP                |                   |
-| ethact          |            usb_ether            | active iface      |
+|       <c>       |               <c>               |                   |
+|     ipaddr      |               IP                |                   |
+|    serverip     |               IP                |                   |
+|     ethact      |            usb_ether            | active iface      |
 | usbnet_devaddr  |               MAC               |                   |
 | usbnet_hostaddr |               MAC               |                   |
-| bootdelay       |                0                |                   |
-| bootcmd         |                                 | runs at boot time |
-| bootargs        |                                 | kernel cmdline    |
-| boot_normal     | sunxi_flash read 45000000 boot; | boot sequence?    |
+|    bootdelay    |                0                |                   |
+|    bootargs     |                                 | kernel cmdline    |
+|     bootcmd     |                                 | runs at boot time |
+|   boot_normal   | sunxi_flash read 45000000 boot; | boot sequence?    |
 |                 |              bootm              |                   |
 |-----------------+---------------------------------+-------------------|
+** boot steps
+
+#+begin_src conf
+tftp 0x81000000 zImage;
+tftp 0x82000000 am335x-boneblack-wireless.dtb;
+bootz 0x81000000 - 0x82000000
+#+end_src
+
+** cmdline
+
+#+CAPTION: for NFS
+#+begin_src conf
+root=/dev/nfs
+rw
+ip=192.168.1.100:::::usb0
+console=ttyO0,115200n8
+g_ether.dev_addr=f8:dc:7a:00:00:02
+g_ether.host_addr=f8:dc:7a:00:00:01
+nfsroot=192.169.1.1:/home/kmu/ws/nfsroot,nfsvers=3
+#+end_src
+
+* image header
+
+#+CAPTION: u-boot image header in 0-31 bits
+[[https://i.imgur.com/BHaEoL4.png]]
+
 * video
 
 - https://www.youtube.com/playlist?list=PLM6hZ9mOhBWuWBz7REa_Gg3HZPbwHad-f
 - 12 [[https://www.youtube.com/watch?v=pteHg54WBbQ][Linux as a Boot Loader]] by Peter Chubb
 - 13 [[https://www.youtube.com/watch?v=RCTRSK45bS4][DIY Using Trust to Secure Embedded Projects]]
 - 14 [[https://www.youtube.com/watch?v=6QKBy-7qLyM][Linux Bootloaders & Kernel Configuration]]
 - 17 [[https://www.youtube.com/watch?v=2-Y4X81QHys][I Boot when U-Boot]] by Bernardo Maia Rodrigues & Vincent Ruijter
+
+* build example
+
+#+begin_src sh
+  $ git clone git://github.com/u-boot/u-boot.git
+  $ cd u-boot
+  $ export ARCH=arm
+  $ export CROSS_COMPILE=arm-linux-guneabi-
+  $ make am335x_evm_defconfig
+  $ make menuconfig # manual setup of other config
+  $ make -j 8
+  $ ls -l u-boot.img MLO # MLO = first stage in-memory bootloader, that loads u-boot.img
+#+end_src
diff --git a/hardware/analog/components/passive/fuse.org b/hardware/analog/components/passive/fuse.org
@@ -1,5 +1,5 @@
 - https://en.wikipedia.org/wiki/Fuse_(electrical)
 - test them with a continiuty tester
 - types
-  - glass
+  - glass (with/out sand)
   - ceramic
diff --git a/hardware/analog/components/passive/transformers.org b/hardware/analog/components/passive/transformers.org
@@ -1,5 +1,8 @@
 - An inductor wound with +1 coil of wire
 - Changes in voltage between wires change the current
+- split transformers return +/- voltage
+  - making 4diode rectifiers not necessary, no voltage drop
+  - instead using 2 diodes, 1 for each polarity
 
 |----------+---------------------+-----------------------|
 | toroidal | ferrite donut, coil | stepping +/- voltages |
diff --git a/hardware/digital/components/cpu/32/raspberry.org b/hardware/digital/components/cpu/32/raspberry.org
@@ -22,6 +22,7 @@
 - freebsd https://wiki.freebsd.org/arm/Raspberry%20Pi
 - openwrt https://openwrt.org/toh/raspberry_pi_foundation/raspberry_pi
 - raspbian https://www.raspberrypi.com/software/operating-systems/
+  - systemd disable: wpa_supplicant, ModemManager, avahi-daemon[.socket]
 - Gentoo
   - https://wiki.gentoo.org/wiki/Raspberry_Pi
   - https://wiki.gentoo.org/wiki/Raspberry_Pi/Installation
@@ -36,6 +37,7 @@ rootfstype=ext4
 elevator=deadline
 fsck.repair=yes
 rootwait
+ipv6.disable=1
 #+end_src
 
 * Founders
@@ -80,6 +82,7 @@ rootwait
 - SPI
 - Serial
 - GPIO: 3.3v, 18mA max
+  - https://www.pi4j.com/1.2/pins/model-2b-rev1.html
   - you will likely need a transistor
   - with a resistor in base calculated with Ohm's Law
 
diff --git a/hardware/digital/components/cpu/32/stm32.org b/hardware/digital/components/cpu/32/stm32.org
@@ -1 +1,2 @@
+- https://www.youtube.com/watch?v=vznYVh5ugnk
 - https://github.com/cpq/bare-metal-programming-guide
diff --git a/hardware/digital/components/cpu/8/arduino/self.org b/hardware/digital/components/cpu/8/arduino/self.org
@@ -1,3 +1,4 @@
+- https://wiki.archlinux.org/title/Arduino
 - https://bitwisecmd.com/
 - wiki https://en.wikipedia.org/wiki/Arduino
 - reversing https://github.com/thomasbbrunner/arduino-reverse-engineering
diff --git a/hardware/digital/components/pld.org b/hardware/digital/components/pld.org
@@ -81,6 +81,7 @@ https://en.wikipedia.org/wiki/Field-programmable_gate_array
   - 21 article https://dev.to/taw/100-languages-speedrun-episode-28-verilog-18jp
 ** Videos
 *** Playlist
+- [[https://www.youtube.com/playlist?list=PLEBQazB0HUyT1WmMONxRZn9NmQ_9CIKhb][Intro to FPGA]] by digikey
 - 17 https://www.youtube.com/playlist?list=PLKcjQ_UFkrd7UcOVMm39A6VdMbWWq-e_c
 - 20 DE1-SoC FPGA Lectures
   - https://www.youtube.com/playlist?list=PLDqMkB5cbBA4OW0fDTu1FY6aw4uBWOpBa
diff --git a/hardware/digital/connector/hardware.org b/hardware/digital/connector/hardware.org
@@ -1,28 +1,38 @@
-- https://github.com/Aodrulez/blueTag
-  - jtagulator alternative on RPI zero/pico
 - https://hydrabus.com/hydranfc-v2-sniffer-decoder-specifications/?v=c582dec943ff
 - logic analyzer https://www.saleae.com/
-- FlashcatUSB https://www.embeddedcomputers.net/products/FlashcatUSB/
-- FT232H
-  - High Speed RS-232
-  - FTDI
-  - 8 wires of data
-  - 30Mbps
 - CH341a https://github.com/boseji/CH341-Store
   - I2C/SPI flash/bios programmer
   - to dump a ROM
+
+* jtag
+
+** speaks
+
+- GoodFET https://goodfet.sourceforge.net/ MSP430 based
+- FlashcatUSB https://www.embeddedcomputers.net/products/FlashcatUSB/
+- Bus Pirate v4 http://dangerousprototypes.com/docs/Bus_Pirate_v4_design_overview
+  - PIC based
+  - speaks JTAG, I2C, SPI, UART
 - J-Link https://www.segger.com/products/debug-probes/j-link/models/j-link-base/
 - Shikra DISCONTINUED https://www.blackhillsinfosec.com/hardware-hacking-with-shikra/
   - MX25L6406E/MX25L6408E
+
+*** ft2232h
+
 - Bus Blaster http://dangerousprototypes.com/docs/Bus_Blaster
-- Bus Pirate v4 jhttp://dangerousprototypes.com/docs/Bus_Pirate_v4_design_overview
-  - Old?
-  - PIC based
-  - speaks I2C, SPI, UART
-- https://github.com/tigard-tools/tigard
-  - An FTDI FT2232H-based multi-protocol tool for hardware hacking.
+- TIAO USB https://www.tiaowiki.com/w/TIAO_USB_Multi_Protocol_Adapter_User%27s_Manual
+- tigard https://github.com/tigard-tools/tigard
+
+** enumerator
+
+- https://github.com/Aodrulez/blueTag
+  - jtagulator alternative on RPI zero/pico
+
 - JTAGULATOR
+  - jtag discovery
   - home https://grandideastudio.com/portfolio/security/jtagulator/
   - source https://github.com/grandideastudio/jtagulator
   - bom https://grandideastudio.com/wp-content/uploads/jtagulator_bom.pdf
     - P8X32A-Q44
+- https://github.com/cyphunk/JTAGenum
+  - arduino based jtag discovery
diff --git a/hardware/digital/connector/irda.org b/hardware/digital/connector/irda.org
@@ -1,5 +1,6 @@
 - https://en.wikipedia.org/wiki/Infrared_Data_Association
 - https://www.sbprojects.net/knowledge/ir/
+- argentina codes https://github.com/estebanramos/Flipper-ArgentinaIRDB
 
 - there is a *carrier frequency* of 38kHz
 - 4 byte packet
diff --git a/hardware/digital/connector/jtag.org b/hardware/digital/connector/jtag.org
@@ -22,6 +22,12 @@
     - daisy chain multiple ics
   - https://en.wikipedia.org/wiki/Boundary_scan_description_language
 
+* registers
+
+- identification: chip id
+- instruction
+- boundary scan
+
 * pins
 |------+----+-----------------------+----------------------|
 | TCK  | -> | Test Clock            |                      |
@@ -62,5 +68,10 @@
 - 2 pins: CLOCK, IO
 
 * videos
-
+- https://hackyourmom.com/en/osvita/english-chastyna-7-zlom-aparatnoyi-chastyny-systemy-uraznosti-portiv-uart-jtag-i-swd/
+- 13 [[https://www.youtube.com/watch?v=I27NX8uTJNY][Hard disks: More than just block devices]]
+  - article https://spritesmods.com/?art=hddhack&page=1
+  - 20 article - https://habr.com/en/articles/532672/
+    - different author
+- 11 [[https://www.youtube.com/watch?v=k3ac5iBcfnQ][DEFCON 17: An Open JTAG Debugger]]
 - 11 [[https://www.youtube.com/watch?v=TlWlLeC5BUs][EEVblog #499 - What is JTAG and Boundary Scan?]]
diff --git a/hardware/digital/connector/rs232.org b/hardware/digital/connector/rs232.org
@@ -49,24 +49,43 @@
 
 * tools
 
+- https://github.com/cyphunk/RS232enum
 - http://kt8216.unixcab.org/elek/serterm.html
 - sniffer - jpnevulator [[https://jpnevulator.snarl.nl/][home]] [[https://github.com/snarlistic/jpnevulator][source]] [[https://jpnevulator.snarl.nl/src/current/manual.html][man]]
   #+begin_src sh
     sudo jpnevulator --ascii --timing-print --tty /dev/ttyUSB0 --read
   #+end_src
-- stty
+
+- stty - set baudrate
   #+begin_src sh
     $ stty -F /dev/ttyUSB0 9600
   #+end_src
-- cu (OLD)
+
+- connecting
   #+begin_src sh
-    $ cu -l /dev/ttyUSB0 -s 9600
+    $ minicom                    # new
+    $ picom -b 9600 /dev/ttyUSBO # nice (works with default scroll)
+    $ cu -l /dev/ttyUSB0 -s 9600 # old
+    $ screen /dev/ttyUSB0 9600   # classic
   #+end_src
-- gnu screen (CLASSIC)
+
+* snippets
+
+- dumping NAND using u-boot's "nand page N"
+  https://github.com/digiampietro/hacking-gemtek/blob/master/serial-flash-dump.expect
+  https://github.com/digiampietro/hacking-gemtek/blob/master/hexdump2bin.pl
+  #+begin_src sh
+    $ ./serial-flash-dump.expect /dev/ttyUSB0 | tee eeprom.txt
+    # 10 hours later...
+    $ ./hexdump2bin.pl -v eeprom.txt > eeprom.bin
+    # 5 seconds later...
+    $ binwalk eeprom.bin
+  #+end_src
+
+- dumping blob
   #+begin_src sh
-    $ screen /dev/ttyUSB0 9600
+    $ openssl enc -base64 -in BLOB
   #+end_src
-- minicom (NEW?)
 
 * ics
 
diff --git a/hardware/digital/embedded.org b/hardware/digital/embedded.org
@@ -4,6 +4,48 @@
 - 20 [[https://www.youtube.com/playlist?list=PLoFdAHrZtKkhcd9k8ZcR4th8Q8PNOx7iU][Hardware Hacking Tutorial]]
   - https://github.com/digiampietro/hacking-gemtek
 
+- tool: helpfun when extracting firmwares https://wiki.debian.org/FakeRoot
+- TIP: there is a "factory mode" on the init scripts of many devices (HHT)
+
+- video course
+  - [[https://www.youtube.com/playlist?list=PLEBQazB0HUyTpoJoZecRK6PpDG31Y7RPB][Introduction to Embedded in Linux]] by digikey
+  - [[https://www.youtube.com/playlist?list=PLPW8O6W-1chwyTzI3BHwBLbGQoPFxPAPM][Modern Embedded Systems Programming Course]]
+- course
+  - https://bootlin.com/doc/training/embedded-linux/
+  - https://bootlin.com/doc/training/linux-kernel/
+  - https://bootlin.com/doc/training/yocto/
+  - https://bootlin.com/doc/training/buildroot/
+  - https://bootlin.com/doc/training/graphics/
+  - https://bootlin.com/doc/training/debugging/
+  - https://bootlin.com/doc/training/preempt-rt/
+  - https://bootlin.com/training/networking/
+
+* article
+
+** 20 [[https://krinkinmu.github.io/2020/07/05/beaglebone-software-update.html][Updating kernel and bootloader on BeagleBone Black Wireless]]
+
+- kernel:
+  - enable usb gadget for networking
+  - we get a "device tree" once build
+- u-boot:
+  - enable "emmc boot"
+  - enable nand support
+  - we get small MLO as a "first stage" bootloader loaded in memory
+  - we get "u-boot.img" loaded by MLO
+- busybox
+  - config: buils static binary
+  - config: prefix ../rootfs as the destination path
+- tftp
+  - serves the kernel (zImage) and the .dtb (device tree)
+- sdcard
+  - holds the MLO and u-boot.img
+- u-boot boot
+  #+begin_src sh
+    tftp 0x81000000 zImage # load zImage from ftp and store it there
+    setenv bootargs root=/dev/nfs rw ip=192.168.1.100:::::usb0 console=ttyO0,115200n8 g_ether.dev_addr=f8:dc:7a:00:00:02 g_ether.host_addr=f8:dc:7a:00:00:01 nfsroot=192.169.1.1:/home/kmu/ws/nfsroot,nfsvers=3
+    setenv bootcmd 'tftp 0x81000000 zImage; tftp 0x82000000 am335x-boneblack-wireless.dtb; bootz 0x81000000 - 0x82000000'
+  #+end_src
+
 * distros
 
 - https://www.gargoyle-router.com/
@@ -12,7 +54,18 @@
 - https://code.google.com/archive/p/snake-os/
 
 * toolchains
+
+#+CAPTION: k=kernel r=rootfs p=packages
+|-----------+---+---+---|
+|           | k | r | p |
+|-----------+---+---+---|
+| [[https://www.yoctoproject.org/][yocto]]     | x | x | x |
+| [[https://buildroot.org/][buildroot]] | x | x |   |
+| openwrt   | x | x |   |
+|-----------+---+---+---|
+
 - https://crosstool-ng.github.io/
-- https://buildroot.org/ (glibc,uclibc)
-  https://buildroot.org/downloads/manual/manual.html
-- https://www.yoctoproject.org/
+
+** buildroot
+- man https://buildroot.org/downloads/manual/manual.html
+- https://wiki.in-circuit.de/index.php5?title=Category:Buildroot
diff --git a/hardware/digital/systems/pic1mm.org b/hardware/digital/systems/pic1mm.org
@@ -15,7 +15,7 @@
 - Audio:
   - RealTek ALC203 - Audio Decodec
   - 20bit DAC, 18bit ADC
-- Photos https://radagast.ca/linux/dectop/opening_the_dectop.html
+- Photos https://radagtast.ca/linux/dectop/opening_the_dectop.html
 - power consumption idle:
   - [[https://blog.codinghorror.com/the-cost-of-leaving-your-pc-on/][4W with SSD]]
 
@@ -31,5 +31,7 @@
 
 * articles
 - building linux https://docs.ampnuts.ru/eevblog.docs/AMD/32089_gxlinuximage.pdf
+- https://github.com/cellularmitosis/amd-pic-linux
+- 07 [[https://jsco.org/dectop/][Installing Ubuntu on the decTOP (AMD PIC)]]
 - 07 [[https://mozy.org/amd-pic/][Unlocking WindowsCE and switching to Linux]]
 - 08 [[https://archive.md/20121217195107/http://users.xplornet.com/~coyoterun/crc/DecTOP.html][24/7 Information Using a decTOP as a Server]]
diff --git a/hardware/digital/systems/pir.org b/hardware/digital/systems/pir.org
@@ -0,0 +1 @@
+- https://en.wikipedia.org/wiki/Passive_infrared_sensor
diff --git a/hardware/hacking.org b/hardware/hacking.org
@@ -0,0 +1,4 @@
+- https://github.com/ufrisk/pcileech-fpga
+- https://github.com/ufrisk/pcileech
+- https://github.com/thunderclap-io
+  https://thunderclap.io/
diff --git a/languages/web/js/node/node.org b/languages/web/js/node/node.org
diff --git a/languages/web/js/node/tools/npm.org b/languages/web/js/node/tools/npm.org
diff --git a/os/android.org b/os/android.org
diff --git a/sec/password/cracking.org b/sec/password/cracking.org
diff --git a/terminal/tools/binutils.org b/terminal/tools/binutils.org
diff --git a/terminal/tools/binwalk.org b/terminal/tools/binwalk.org

Original file line number	Diff line number	Diff line change
`@@ -1 +1,2 @@`
	`1`	`+- https://www.youtube.com/watch?v=vznYVh5ugnk`
`1`	`2`	`- https://github.com/cpq/bare-metal-programming-guide`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+- https://wiki.archlinux.org/title/Arduino`
`1`	`2`	`- https://bitwisecmd.com/`
`2`	`3`	`- wiki https://en.wikipedia.org/wiki/Arduino`
`3`	`4`	`- reversing https://github.com/thomasbbrunner/arduino-reverse-engineering`