Conversation

Notices

1. Embed this notice
   erin, witch of dumb (erin@coolmathgam.es)'s status on Monday, 24-Feb-2025 17:17:16 JST erin, witch of dumb

   any qualcomm hackers wanna help meraki eat an ass? i got a $10 claimed MR78 and managed to get board pics and UART on it. how the heck do i jtag? how in the fuck do i break secure boot? how do i take a crack at this?

   https://gist.github.com/nepeat/1a339c6ee9e08daaa6f6d767fcc872f3

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 24-Feb-2025 17:17:16 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     @erin

     WARNING! THIS CONSOLE IS LOGGED! UNAUTHORIZED ACCESS FORBIDDEN!

     Lol

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 24-Feb-2025 17:32:02 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     @erin what a bag of dicks

     Apparently they have a model that'll just brick itself if you try to use the console?

     Looks like it's an ipq60xx device, but maybe they have some models without secure boot and a hack similar to this will work:

     https://watchmysys.com/blog/2024/04/breaking-secure-boot-on-the-meraki-z3-and-meraki-go-gx20/

   • Embed this notice
     erin, witch of dumb (erin@coolmathgam.es)'s status on Monday, 24-Feb-2025 17:32:03 JST erin, witch of dumb

     in reply to

     • Ryan Castellucci :nonbinary_flag:

     @ryanc it gets better. any commands?

     "UNRECOGNIZED COMMAND LOGGED TO CLOUD SERVERS."