let me just copy pasta from my reddit thread for a sec....
http://github.com/DacoTaco/YASDU
( gbatemp, your link detection is a bit...flawed. i shouldn't be able to post a link, yet here it is. )
tl;dr : i wanted to dump NAND & keys but SD was to small. other options dumped wrong and didn't provide a hash to check if it was ok. i made my own and NAND, boot0,boot1 and TSEC fw dumping are complete and working perfectly (and provide hashes), however YASDU is not complete, and if you can help with the key dumping or accessing TSEC from linux, please do!
Long Version
ok, so. YASDU. ive been wanting to get my hands dirty with the switch and linux for a while now and ive finally found a bit of time to play around.
as any normal person i wanted to dump my NAND and keys but the NAND flashing needs a big SD card to dump to, which i dont have. so i started looking around and found httpnand but it dumped the nand & boot0 incorrectly so i made my own tool in python (hoozah, my first python script xD)
it was at first only intended to be a personal script for nand dumping as it doesn't bring anything new to the scene, but i though, why not add the tsec fw in there together with the keys so they could be dumped from linux and throw it online for everyone to hopefully learn as i have learned from naehrwert's code?
though i never got the key dumping to work, i put it online none the less hoping somebody could help.
the current problem is that i can't seem to access the TSEC or clock registers needed to either reset & start the Falcon cpu or the system freezes trying to access them (both through opening /dev/mem or devmem2 ).
if anyone could help or tell me the actual interface in linux to access TSEC , that would be great!
(i saw tsec code was in the linux build from f0f but i didn't find it when running it besides some read only stuff :/ )
so here you go, YASDU.
if you would like to see any functionality additions to this script/application or want to help improve it, feel free to poke me.
Current functions/tools in YASDU :
enjoy!
http://github.com/DacoTaco/YASDU
( gbatemp, your link detection is a bit...flawed. i shouldn't be able to post a link, yet here it is. )
tl;dr : i wanted to dump NAND & keys but SD was to small. other options dumped wrong and didn't provide a hash to check if it was ok. i made my own and NAND, boot0,boot1 and TSEC fw dumping are complete and working perfectly (and provide hashes), however YASDU is not complete, and if you can help with the key dumping or accessing TSEC from linux, please do!
Long Version
ok, so. YASDU. ive been wanting to get my hands dirty with the switch and linux for a while now and ive finally found a bit of time to play around.
as any normal person i wanted to dump my NAND and keys but the NAND flashing needs a big SD card to dump to, which i dont have. so i started looking around and found httpnand but it dumped the nand & boot0 incorrectly so i made my own tool in python (hoozah, my first python script xD)
it was at first only intended to be a personal script for nand dumping as it doesn't bring anything new to the scene, but i though, why not add the tsec fw in there together with the keys so they could be dumped from linux and throw it online for everyone to hopefully learn as i have learned from naehrwert's code?
though i never got the key dumping to work, i put it online none the less hoping somebody could help.
the current problem is that i can't seem to access the TSEC or clock registers needed to either reset & start the Falcon cpu or the system freezes trying to access them (both through opening /dev/mem or devmem2 ).
if anyone could help or tell me the actual interface in linux to access TSEC , that would be great!
(i saw tsec code was in the linux build from f0f but i didn't find it when running it besides some read only stuff :/ )
so here you go, YASDU.
if you would like to see any functionality additions to this script/application or want to help improve it, feel free to poke me.
Current functions/tools in YASDU :
- D.a.n (decrypted access of nand) : a tool to access encrypted nand partitions like they are normal partitions using FUSE in linux. can work with dumps or the actual nand in linux on the switch
- R.n.d (Random Nand Decryptor) : a tool to decrypt encrypted partition dumps
- NandFileServer : python based webserver that allows the downloading/dumping of Nand & its partitions. future planned to allow browsing and dumping of certain files of the nand using D.a.n
enjoy!
Last edited by DacoTaco,
