Skip to content
This projects is about the analysis and modification of the firmware of the Analog Devices AD6900 (LeMans) Baseband processor used in the Inmarsat IsatPhone Pro satellite terminal.
Python Assembly Shell
Branch: master
Clone or download
Fernando Russ
Fernando Russ Update README.md
fix formatting.
Latest commit 6e973a9 Mar 13, 2013
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
bfpatch Initial commit. Mar 13, 2013
src Initial commit. Mar 13, 2013
.gitignore Initial commit Mar 13, 2013
README.md Update README.md Mar 13, 2013
decodepackets.py Initial commit. Mar 13, 2013
dopatch_IO.sh Initial commit. Mar 13, 2013
dopatch_custom_frame.sh Initial commit. Mar 13, 2013
dumpIO.py Initial commit. Mar 13, 2013
isat_hax.py Initial commit. Mar 13, 2013
isat_hax_echo_arm.py Initial commit. Mar 13, 2013
isat_hax_echo_bf.py Initial commit. Mar 13, 2013
isat_hook_bf_call.py Initial commit. Mar 13, 2013

README.md

Inmarsat IsatPhone demos-eko2012

This projects is about the analysis and modification of the firmware of the Analog Devices AD6900 (LeMans) Baseband processor used in the Inmarsat IsatPhone Pro satellite terminal.

Techniques for code ex- ecution in both the CPU and the DSP are documented, the main result being the instrumentation of functions inside the blackfin DSP with the objective of control, monitoring and emission of Layer-1 GEO- Mobile Radio interface packets.

Content

  • bfpatch : Directory containing blackfin binary patches
  • src : Directory containing sources
  • decodepackets.py : GMR-2 python parser
  • dopatch_custom_frame.sh : Serial patcher of IsatPhone Pro 4.0.0 firmware, inject custom frame
  • patch_IO.sh : Serial patcher of IsatPhone Pro 4.0.0 firmware, dump packets
  • dumpIO.py : Python script that decodes and show packets in real-time. Needs to execute dopatch_custom_frame.sh or dopath_IO.sh first.
  • isat_hax_echo_arm.py : Insert custom shellcode into ARM AT command "echo" (first stage)
  • isat_hax_echo_bf.py : Use AT command "echo" to insert a custom shellcode into blackfin code
  • isat_hax.py : Insert custom shellcode into ARM (thumb version)
  • isat_hook_bf_call.py : Upload a blackfin binary to the provided pointer. Additionally, this function insert a call to the binary into a second address provided.
You can’t perform that action at this time.