Develop (#20)

* increase patch buffer * Add "Null certificate Paths" patch
toniebox-reverse-engineering · Feb 5, 2021 · 42d3219 · 42d3219
1 parent 2399ce1
commit 42d3219
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 3 deletions.
diff --git a/sd-bootloader-ng/bootmanager/patch.c b/sd-bootloader-ng/bootmanager/patch.c
@@ -118,14 +118,14 @@ void Patch_Read(char* name) {
     uint32_t allBytesRead = 0;
 
     jsmn_stream_init(&parser, &cbs, NULL);
-    char buffer[128];
+    char buffer[512];
     while (allBytesRead<filesize)
     {
       ffs_result = f_read(&ffile, buffer, COUNT_OF(buffer), &bytesRead);
       if (ffs_result != FR_OK)
         break;
 
-      for (uint32_t i = 0; i < bytesRead; i++)
+      for (uint16_t i = 0; i < bytesRead; i++)
       {
         jsmn_stream_parse(&parser, buffer[i]);
       }

diff --git a/sd-bootloader-ng/bootmanager/sd/revvox/boot/ngCfg.json b/sd-bootloader-ng/bootmanager/sd/revvox/boot/ngCfg.json
@@ -21,7 +21,7 @@
         "hashFile": false,
         "watchdog": true,
         "ofwFix": true,
-        "patches": ["blockCheck.308", "noChargWake.305", "noPass.305", "noPrivacy.305", "uidCheck.305"]
+        "patches": ["blockCheck.308", "noCerts.305", "noChargWake.305", "noPass.305", "noPrivacy.305", "uidCheck.305"]
     },
     "cfw1": {
         "checkHash": true,

diff --git a/sd-bootloader-ng/bootmanager/sd/revvox/boot/patch/noCerts.305.json b/sd-bootloader-ng/bootmanager/sd/revvox/boot/patch/noCerts.305.json
@@ -0,0 +1,11 @@
+{
+    "general": {
+        "_desc": "Removes paths to /certs/ which disables communitcation with boxine servers (Code: Owl)",
+        "_memPos": "",
+        "_fwVer": "3.0.5+"
+    },
+    "searchAndReplace": [{
+        "search":  ["2f", "63", "65", "72", "74", "2f", "70", "72", "69", "76", "61", "74", "65", "2e", "64", "65", "72", "00", "2f", "63", "65", "72", "74", "2f", "63", "6c", "69", "65", "6e", "74", "2e", "64", "65", "72", "00", "2f", "63", "65", "72", "74", "2f", "63", "61", "2e", "64", "65", "72", "00"],
+        "replace": ["00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00", "00"]
+    }]
+}
diff --git a/wiki/OFWPatches.md b/wiki/OFWPatches.md
@@ -1,4 +1,9 @@
 # HackieboxNG original firmware patches
+## Offline / Privacy
+It is recommended to keep the toniebox offline if you are using a patched firmware. Using the offline mode is recommended. In addition you should enable the Null certificate patch.
+
+### Null certificate Paths ([noCerts.305.json](https://github.com/toniebox-reverse-engineering/hackiebox_cfw_ng/blob/master/sd-bootloader-ng/bootmanager/sd/revvox/boot/patch/noCerts.305.json))
+This patch clears the paths to the certificates. This way the box will abort the https connection as it can't check if the boxine server is a valid one. 
 
 ## Alternative Tags (SLIX / SLIX2)
 If you want to use alternative tags those patches will help you. Even other iso15693 tags may work.