{"id":13800757,"url":"https://github.com/Comsecuris/shannonRE","last_synced_at":"2025-05-13T09:31:53.735Z","repository":{"id":135247250,"uuid":"63725471","full_name":"Comsecuris/shannonRE","owner":"Comsecuris","description":"Helpful scripts for various tasks performed during reverse engineering the Shannon Baseband with the goal to exploit the Samsung Galaxy S6","archived":false,"fork":false,"pushed_at":"2020-06-22T03:22:31.000Z","size":37,"stargazers_count":240,"open_issues_count":1,"forks_count":70,"subscribers_count":16,"default_branch":"master","last_synced_at":"2024-11-18T15:54:51.926Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Comsecuris.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2016-07-19T20:21:43.000Z","updated_at":"2024-11-09T21:33:34.000Z","dependencies_parsed_at":null,"dependency_job_id":"4d910cc4-4cd9-44f5-b3f6-65b3572537d2","html_url":"https://github.com/Comsecuris/shannonRE","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Comsecuris%2FshannonRE","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Comsecuris%2FshannonRE/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Comsecuris%2FshannonRE/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Comsecuris%2FshannonRE/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Comsecuris","download_url":"https://codeload.github.com/Comsecuris/shannonRE/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253913231,"owners_count":21983279,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T00:01:16.002Z","updated_at":"2025-05-13T09:31:52.150Z","avatar_url":"https://github.com/Comsecuris.png","language":"Python","funding_links":[],"categories":["Setup"],"sub_categories":[],"readme":"Helpful scripts for various tasks performed during reverse engineering the Shannon Baseband with the goal to exploit the Samsung Galaxy S6.\nSpecifically, this is the code release for [https://comsecuris.com/slides/recon2016-breaking_band.pdf](https://comsecuris.com/slides/recon2016-breaking_band.pdf)\n\nPlease reach out to us for patches or future research in this direction!\n\nStructure of this repository:\n```\n├── 010\n│   └── sam.bt [010 template for Shannon's TOC header format]\n├── android\n│   ├── collect-ramdump.sh [Collect ramdumps using cbd directly, requires root]\n│   └── download-dump.sh [Collect ramdumps using the menu, does not require root]\n├── idapython\n│   ├── loader\n│   │   └── sam_modem_ramdump.py [IDA loader for the Shannon MAIN image]\n│   ├── misc\n│   │   └── clean-IDC.sh [Clean up an IDC by removing {comments, filenames, *_something named labels, deletes}]\n│   │   └── typeinfo.idc [Structure definitions for a Shannon idb]\n│   └── plugins\n│       ├── def_arm32_functions.py [Auto-find more functions by scanning for prologues]\n│       ├── find_mcr.py [Find and label all the mcr instructions in an idb]\n│       ├── label_functions.py [Label function names automatically using string references]\n│       ├── name_msg_handlers.py [Name an L3 task's message handlers in its dispatch table automatically]\n│       ├── parse_mpu.py [Parse the modem's MPU config table and pretty print all the configuration rules]\n│       ├── pseudocomments.py [Save/Restore pseudocode comments from/to an idb. This is useful because IDCs lack these.]\n│       ├── register_map.py [Label the register map inside a modem ramdump]\n│       ├── stackscan.py [Identify possible stackframes inside a modem ramdump]\n│       └── taskscan.py [Walk the task linked list in a modem ramdump to enumerate and label tasks]\n└── modem\n    ├── memdump.py [Dump memory ranges live from the modem]\n    ├── readmem.py [Read memory from a modem address]\n    ├── unpack_modem.py [Split up a modem image into its TOC parts (Boot, Main, etc)]\n    └── writemem.py [Write memory to a modem address]\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FComsecuris%2FshannonRE","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FComsecuris%2FshannonRE","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FComsecuris%2FshannonRE/lists"}