Skip to content

Commit 57ada64

Browse files
author
surge
committed
color changes
1 parent 1ecda7b commit 57ada64

File tree

2 files changed

+19
-10
lines changed

2 files changed

+19
-10
lines changed

_posts/2022-03-10-enabot_series_part_2.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ With this in mind, we opened up wireshark and began looking at the stream of pac
6565

6666
After looking at the data of some of the packets, we noticed this one.
6767

68-
![charlie](/assets/enabot_part2/charlie_capture.png)
68+
<p style="text-align:center;"><img src="/assets/enabot_part2/charlie_capture.png" alt="charlie" style="height: 60%; width: 60%;"/></p>
6969

7070
At the end of the packet it say "Charlie is". There is no way this is some coincidence of randomly generated data. There is probably some XOR encryption going on and those bytes were null bytes. We opened up the firmware in wireshark and checked if there were any strings with "Charlie is".
7171

@@ -158,11 +158,11 @@ for ref in refs:
158158
print(f"Finished. Renamed: {rename_count} functions")
159159
```
160160

161-
<img src="/assets/enabot_part2/log_functions_renamed.png" alt="log_functions_renamed" style="height: 60%; width: 60%;"/>
161+
<p style="text-align:center;"><img src="/assets/enabot_part2/log_functions_renamed.png" alt="log_functions_renamed" style="height: 60%; width: 60%;"/></p>
162162

163163
The second renaming script we used was for functions that were called, and then an error was printed if it returned an error code.
164164

165-
<img src="/assets/enabot_part2/err_rename.png" alt="err_rename" style="height: 60%; width: 60%;"/>
165+
<p style="text-align:center;"><img src="/assets/enabot_part2/err_rename.png" alt="err_rename" style="height: 60%; width: 60%;"/></p>
166166

167167
An example is in the image above. A function was called and a branch was taken based off the function's return value. If it wasn't 0, it printed the name of the function and and error message. We could use that print to rename the function called. It's renamed already because we had already run the script when the image was taken
168168

@@ -274,7 +274,7 @@ print(f"Len of unnamed functions {len(unnamed_functions)}")
274274
</pre>
275275
</details>
276276

277-
<img src="/assets/enabot_part2/err_rename_number.png" alt="err_rename_number" style="height: 60%; width: 60%;"/>
277+
<p style="text-align:center;"><img src="/assets/enabot_part2/err_rename_number.png" alt="err_rename_number" style="height: 60%; width: 60%;"/></p>
278278

279279
Both these scripts combined allowed us to know the name of about 1600 function calls which was very nice to have when reversing.
280280
# Packet Reversing
@@ -322,9 +322,9 @@ Note: Since we don't actually know what each branch was when we started reversin
322322

323323
Every packet going to or from the device started with this:
324324

325-
<img src="/assets/enabot_part2/ebo_msg_hdr.png" alt="Ebo Msg Hdr" style="height: 50%; width: 50%;"/>
325+
<p style="text-align:center;"><img src="/assets/enabot_part2/ebo_msg_hdr.png" alt="Ebo Msg Hdr" style="height: 50%; width: 50%;"/></p>
326326

327-
<img src="/assets/enabot_part2/ebo_packet_type.png" alt="Ebo Packet Type" style="height: 100px; width:320px;"/>
327+
<p style="text-align:center;"><img src="/assets/enabot_part2/ebo_packet_type.png" alt="Ebo Packet Type" style="height: 100px; width:320px;"/></p>
328328

329329

330330
1. The first two bytes are always `0x0402`

_sass/dash/_layout.scss

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -136,21 +136,24 @@
136136
text-align: left;
137137
margin-bottom: 0.2em;
138138
@include themed() {
139-
color: t('list-primary');
139+
color: 0xffffff;
140140
}
141141
}
142142

143143
ul > li {
144144
text-align: left;
145145
margin-bottom: 0.2em;
146146
@include themed() {
147-
color: t('list-primary');
147+
color: 0xffffff;
148148
}
149149
list-style: none;
150150
margin-left: 0em;
151151

152152
&:before {
153153
content: $icon-check;
154+
@include themed() {
155+
color: t('list-primary');
156+
}
154157
@include font-awesome-icon;
155158
margin-left: 0;
156159
margin-right: 0.5em;
@@ -161,13 +164,16 @@
161164
text-align: left;
162165
margin-bottom: 0.2em;
163166
@include themed() {
164-
color: t('list-primary');
167+
color: 0xffffff;
165168
}
166169
list-style: none;
167170
margin-left: 0.5em;
168171

169172
&:before {
170173
content: $icon-chevron-right;
174+
@include themed() {
175+
color: t('list-primary');
176+
}
171177
@include font-awesome-icon;
172178
margin-right: 0.5em;
173179
}
@@ -178,13 +184,16 @@
178184
text-align: left;
179185
margin-bottom: 0.2em;
180186
@include themed() {
181-
color: t('list-primary');
187+
color: 0xffffff;
182188
}
183189
list-style: none;
184190
margin-left: 0;
185191

186192
&:before {
187193
content: $icon-flask;
194+
@include themed() {
195+
color: t('list-primary');
196+
}
188197
@include font-awesome-icon;
189198
margin-right: 0.5em;
190199
}

0 commit comments

Comments
 (0)