cfsworks / nimue Goto Github PK

Some more recent Bravia TV's don't have port 12345 open, but they have Opera Browser and they have port 80 open in them. Maybe it is possible do modify nimue to work with those tv's too.

I been trying to get intouch with you but your a busy person can you please provide a readme file or some basic instructions on how to use it you said if no one else provides instructions you will provide so please thanks.

It would be nice if Nimue could accept configuration files (YAML? JSON? XML?) containing parameters (return address, stack size, etc.) for different versions of firmware, as opposed to hard-coding them in the .py... This would mean that supporting a newer version of the firmware only requires a config file update. The script itself should accept the version of the firmware as a command-line argument and load the necessary parameters.

https://github.com/LIznzn/CVE-2019-2215

Or at least a link to a how-to-use

How to I make sure that the TV doesn't phone home while I'm testing the possibility of installing Kodi on it?

Hi!
The board of 2012 series named Ayu, which runs linux kernel 2.6.
The TV itself supports widgets written in JavaScript (modified by Sony) and those widgets can be executed from a folder on USB device.
Widgets written by Sony(signed but found a way to skip it) can execute some apps on TV(Sony calls them native apps).
Example:
var appId = appStateManager.getAppID("Upgrader");
var param = "-s -r Upgrader -m RequestByX2";
appStateManager.startUp(appId, false, param);
This is how the TV opens the system upgrader.
I tried to execute some Linux commands by changing app names or param but failed.
By the way, the port 80 is under libmicrohttpd(0.4.6)'s control, which has security issue.
I hope this can be helpful
@CFSworks

Sam, incidentally I go by the name Sam too. I'm a pretty experienced Linux user and hacker myself and I'm very much interest to have this done on my KDL-55EX720. I would like to work with you and see if we can get this awesome hack further. I would appreciate some help to try this as there are no instructions available. On my bravia port 12345 is not open but I have telnet access to port 80. This is what I get when I telnet.

root@ePad:~# telnet 192.168.1.142 80
Trying 192.168.1.142...
Connected to 192.168.1.142.
Escape character is '^]'.

Appreciate your response. Cheers.

I think a list of confirmed working bravia models would help.

| Bravia Model | Firmware | Exploid working | Comment |