hardsploit_gui 2.2 → 2.3

data/lib/class/spi/Spi_settings.rb

@@ -0,0 +1,108 @@
+#===================================================
+#  Hardsploit GUI - By Opale Security
+#  www.opale-security.com || www.hardsploit.io
+#  License: GNU General Public License v3
+#  License URI: http://www.gnu.org/licenses/gpl.txt
+#===================================================
+
+require_relative '../../gui/gui_spi_settings'
+class Spi_settings < Qt::Widget
+  slots 'save_settings()'
+
+  def initialize(chip)
+    super()
+    @view = Ui_Spi_settings.new
+    centerWindow(self)
+    @view.setupUi(self)
+    @view.lbl_chip.setText(chip.reference)
+    inputRestrict(@view.lie_total_size,         0)
+    inputRestrict(@view.lie_page_size,          0)
+    inputRestrict(@view.lie_write_page_latency, 0)
+    inputRestrict(@view.lie_cmd_read,           0)
+    inputRestrict(@view.lie_cmd_write,          0)
+    inputRestrict(@view.lie_cmd_write_enable,   0)
+    inputRestrict(@view.lie_cmd_erase,          0)
+    inputRestrict(@view.lie_erase_time,         0)
+    @chip = chip
+    feed_settings_form unless chip.spi_setting.nil?
+  end
+
+  def save_settings
+    @chip.spi_setting.nil? ? create : update
+    @chip.reload
+  end
+
+  def feed_settings_form
+    @view.cbx_mode.setCurrentIndex(@view.cbx_mode.findText(@chip.spi_setting.mode.to_s))
+    @view.cbx_frequency.setCurrentIndex(@view.cbx_frequency.findText(@chip.spi_setting.frequency))
+    @view.lie_cmd_read.setText(@chip.spi_setting.command_read.to_s)
+    @view.lie_cmd_write.setText(@chip.spi_setting.command_write.to_s)
+    @view.lie_write_page_latency.setText(@chip.spi_setting.write_page_latency.to_s)
+    @view.lie_cmd_write_enable.setText(@chip.spi_setting.command_write_enable.to_s)
+    @view.lie_cmd_erase.setText(@chip.spi_setting.command_erase.to_s)
+    @view.lie_erase_time.setText(@chip.spi_setting.erase_time.to_s)
+    @view.lie_page_size.setText(@chip.spi_setting.page_size.to_s)
+    @view.lie_total_size.setText(@chip.spi_setting.total_size.to_s)
+    @view.rbn_no.setChecked(true) if @chip.spi_setting.is_flash.zero?
+  rescue Exception => msg
+    ErrorMsg.new.unknow(msg)
+  end
+
+  def is_flash?
+    return 0 if @view.rbn_no.isChecked
+    return 1
+  end
+
+  def create
+    chip_settings = SpiSetting.create(
+      mode:                 @view.cbx_mode.currentText.to_i,
+      frequency:            @view.cbx_frequency.currentText,
+      write_page_latency:   @view.lie_write_page_latency.text,
+      command_read:         @view.lie_cmd_read.text,
+      command_write:        @view.lie_cmd_write.text,
+      command_write_enable: @view.lie_cmd_write_enable.text,
+      command_erase:        @view.lie_cmd_erase.text,
+      erase_time:           @view.lie_erase_time.text,
+      page_size:            @view.lie_page_size.text,
+      total_size:           @view.lie_total_size.text,
+      is_flash:             is_flash?,
+      chip_id:              @chip.id
+    )
+    unless check_for_errors(chip_settings)
+      Qt::MessageBox.new(
+        Qt::MessageBox::Information,
+        'Succes',
+        'SPI settings saved'
+      ).exec
+      close
+    end
+  rescue Exception => msg
+    ErrorMsg.new.unknown(msg)
+  end
+
+  def update
+    @chip.spi_setting.update(
+      mode:                 @view.cbx_mode.currentText.to_i,
+      frequency:            @view.cbx_frequency.currentText,
+      write_page_latency:   @view.lie_write_page_latency.text,
+      command_read:         @view.lie_cmd_read.text,
+      command_write:        @view.lie_cmd_write.text,
+      command_write_enable: @view.lie_cmd_write_enable.text,
+      command_erase:        @view.lie_cmd_erase.text,
+      erase_time:           @view.lie_erase_time.text,
+      page_size:            @view.lie_page_size.text,
+      total_size:           @view.lie_total_size.text,
+      is_flash:             is_flash?
+    )
+    unless check_for_errors(@chip.spi_setting)
+      Qt::MessageBox.new(
+        Qt::MessageBox::Information,
+        'Succes',
+        'SPI settings updated'
+      ).exec
+      close
+    end
+  rescue Exception => msg
+    ErrorMsg.new.unknown(msg)
+  end
+end

data/lib/class/spi/Spi_sniffer.rb

@@ -0,0 +1,101 @@
+#===================================================
+#  Hardsploit GUI - By Opale Security
+#  www.opale-security.com || www.hardsploit.io
+#  License: GNU General Public License v3
+#  License URI: http://www.gnu.org/licenses/gpl.txt
+#===================================================
+
+require_relative '../../gui/gui_spi_sniffer'
+require_relative '../../HardsploitAPI/Modules/SPI_SNIFFER/HardsploitAPI_SPI_SNIFFER'
+
+class Spi_sniffer < Qt::Widget
+  slots 'start()'
+  slots 'stop()'
+  slots 'update()'
+
+  def initialize(chip)
+    super()
+    @view = Ui_Spi_sniffer.new
+    centerWindow(self)
+    @view.setupUi(self)
+    @chip = chip
+    resize_to_content
+  end
+
+  def start
+    @view.btn_stop.setEnabled(true)
+    @view.btn_start.setEnabled(false)
+    @view.cbx_type.setEnabled(false)
+    Firmware.new('SPI_SNIFFER')
+    case @view.cbx_type.currentIndex
+    when 0; type = HardsploitAPI::SPISniffer::MISO_MOSI
+    when 1; type = HardsploitAPI::SPISniffer::MOSI
+    when 2; type = HardsploitAPI::SPISniffer::MISO
+    end
+    return ErrorMsg.new.spi_mode_missing if @chip.spi_setting.mode.nil?
+    @spi = HardsploitAPI_SPI_SNIFFER.new(
+      mode: @chip.spi_setting.mode,
+      sniff: type
+    )
+    @spi.spi_SetSettings
+    sleep(0.5)
+    @timer = Qt::Timer.new
+    Qt::Object.connect(@timer, SIGNAL('timeout()'), self, SLOT('update()'))
+    @timer.start(1000)
+  end
+
+  def update
+    result = @spi.spi_receive_available_data
+    unless result.empty?
+      if @spi.sniff == HardsploitAPI::SPISniffer::MISO_MOSI
+        result[0].each_with_index do |elem, i|
+          @view.tbl_result.insertRow(i)
+          @view.tbl_result.setItem(i, 0, Qt::TableWidgetItem.new(i.next.to_s))
+          @view.tbl_result.setItem(i, 1, Qt::TableWidgetItem.new("0x#{elem.to_s(16).rjust(2, "0").upcase}"))
+          @view.tbl_result.setItem(i, 2, Qt::TableWidgetItem.new("0x#{result[1][i].to_s(16).rjust(2, "0").upcase}"))
+        end
+      else # MOSI OR MISO
+        if @spi.sniff == HardsploitAPI::SPISniffer::MISO
+        result.each_with_index do |elem, i|
+          @view.tbl_result.insertRow(i)
+          @view.tbl_result.setItem(i, 0, Qt::TableWidgetItem.new(@view.tbl_result.rowCount.next.to_s))
+          @view.tbl_result.setItem(i, 1, Qt::TableWidgetItem.new('-'))
+          @view.tbl_result.setItem(i, 2, Qt::TableWidgetItem.new("0x#{elem.to_s(16).rjust(2, "0").upcase}"))
+        end
+        else
+          result.each_with_index do |elem, i|
+            @view.tbl_result.insertRow(i)
+            @view.tbl_result.setItem(i, 0, Qt::TableWidgetItem.new(@view.tbl_result.rowCount.next.to_s))
+            @view.tbl_result.setItem(i, 1, Qt::TableWidgetItem.new("0x#{elem.to_s(16).rjust(2, "0").upcase}"))
+            @view.tbl_result.setItem(i, 2, Qt::TableWidgetItem.new('-'))
+          end
+        end
+        resize_to_content
+      end
+    end
+  rescue HardsploitAPI::ERROR::HARDSPLOIT_NOT_FOUND
+		ErrorMsg.new.hardsploit_not_found
+  rescue HardsploitAPI::ERROR::USB_ERROR
+	  p "Checking..."
+  rescue Exception => msg
+    ErrorMsg.new.unknown(msg)
+  end
+
+  def stop
+    @view.btn_start.setEnabled(true)
+    @view.cbx_type.setEnabled(true)
+    @view.btn_stop.setEnabled(false)
+    @timer.killTimer(@timer.timerId)
+    @timer = nil
+  end
+
+  def closeEvent(event)
+    @timer.killTimer(@timer.timerId) unless @timer.nil?
+  end
+
+  def resize_to_content
+    @view.tbl_result.resizeColumnsToContents
+    @view.tbl_result.resizeRowsToContents
+    @view.tbl_result.horizontalHeader.stretchLastSection = true
+  end
+end

data/lib/class/swd/Swd.rb

@@ -0,0 +1,125 @@
+#===================================================
+#  Hardsploit API - By Opale Security
+#  www.opale-security.com || www.hardsploit.io
+#  License: GNU General Public License v3
+#  License URI: http://www.gnu.org/licenses/gpl.txt
+#===================================================
+
+require_relative '../../HardsploitAPI/Modules/SWD/HardsploitAPI_SWD'
+
+class Swd
+
+  def initialize(chip, console)
+    if HardsploitAPI.getNumberOfBoardAvailable > 0
+      @console = console
+      @chip = chip
+    else
+      Qt::MessageBox.new(
+        Qt::MessageBox::Critical,
+        "Error",
+        "Hardsploit not plugged. Operation canceled"
+      ).exec
+    end
+  rescue HardsploitAPI::ERROR::HARDSPLOIT_NOT_FOUND
+    ErrorMsg.new.hardsploit_not_found
+    return false
+  rescue HardsploitAPI::ERROR::USB_ERROR
+    ErrorMsg.new.usb_error
+    return false
+  rescue Exception => msg
+    ErrorMsg.new.unknow(msg)
+    return false
+  end
+
+  def do_swd_action(action, option = {})
+    Firmware.new('SWD')
+    api = HardsploitAPI_SWD.new(
+      memory_start_address: @chip.swd_setting.memory_start_address,
+      memory_size_address:  @chip.swd_setting.memory_size_address,
+      cpu_id_address:       @chip.swd_setting.cpu_id_address,
+      device_id_address:    @chip.swd_setting.device_id_address
+    )
+    return 0 if api.nil?
+    case action
+    when 'detect'
+      return api.obtainCodes
+    when 'export'
+      $pgb = Progress_bar.new("SWD: #{action}...")
+      $pgb.show
+      api.dumpFlash(option)
+    when 'import'
+      $pgb = Progress_bar.new("SWD: #{action}...")
+      $pgb.show
+      api.writeFlash(option)
+    when 'erase'
+      api.eraseFlash
+    end
+  rescue HardsploitAPI::ERROR::HARDSPLOIT_NOT_FOUND
+    ErrorMsg.new.hardsploit_not_found
+    return false
+  rescue HardsploitAPI::ERROR::USB_ERROR
+    ErrorMsg.new.usb_error
+    return false
+  rescue HardsploitAPI::ERROR::SWD_ERROR
+    ErrorMsg.new.swd_not_found
+    return false
+  rescue Exception => msg
+    ErrorMsg.new.unknown(msg)
+    return false
+  end
+
+  def detect
+    code = do_swd_action('detect')
+    unless code == false
+      @console.print('New action: SWD Detect')
+        Qt::MessageBox.new(
+          Qt::MessageBox::Information,
+          "SWD detection",
+          "Detected:\n"+
+            "DP.IDCODE:  #{code[:DebugPortId].to_s(16)}\n"+
+            "AP.IDCODE:  #{code[:AccessPortId].to_s(16)}\n"+
+            "CPU ID:     #{code[:CpuId].to_s(16)}\n"
+        ).exec
+    end
+  end
+
+  def export(filepath)
+    unless do_swd_action('export', filepath) == false
+      Qt::MessageBox.new(
+        Qt::MessageBox::Information,
+        "SWD Export Action",
+        "Dump finished"
+      ).exec
+      $pgb.close
+    end
+  end
+
+  def import(filepath)
+    unless do_swd_action('import', filepath) == false
+      Qt::MessageBox.new(
+        Qt::MessageBox::Information,
+        "SWD Import Action",
+        "Import finished"
+      ).exec
+      $pgb.close
+    end
+  end
+
+  def erase
+    msg = Qt::MessageBox.new
+    msg.setWindowTitle("Delete the data")
+    msg.setText("You are going to delete all the data. Continue?")
+    msg.setIcon(Qt::MessageBox::Information)
+    msg.setStandardButtons(Qt::MessageBox::Cancel | Qt::MessageBox::Ok)
+    msg.setDefaultButton(Qt::MessageBox::Cancel)
+    if msg.exec == Qt::MessageBox::Ok
+      unless do_swd_action('erase') == false
+        Qt::MessageBox.new(
+          Qt::MessageBox::Information,
+          "SWD Erase Action",
+          "Erase finished"
+        ).exec
+      end
+    end
+  end
+end

data/lib/class/swd/Swd_scanner.rb

@@ -0,0 +1,121 @@
+#===================================================
+#  Hardsploit GUI - By Opale Security
+#  www.opale-security.com || www.hardsploit.io
+#  License: GNU General Public License v3
+#  License URI: http://www.gnu.org/licenses/gpl.txt
+#===================================================
+
+require_relative '../../gui/gui_signal_scanner'
+require_relative '../../HardsploitAPI/Modules/SWD/HardsploitAPI_SWD'
+
+class Swd_scanner < Qt::Widget
+  slots 'scan()'
+  slots 'autowiring()'
+  slots 'update_tbl(QString)'
+  slots 'update_cbx(QString)'
+
+  def initialize
+    super()
+    @view = Ui_Signal_scanner.new
+    centerWindow(self)
+    @view.setupUi(self)
+    update_cbx('B0')
+  end
+
+  def scan
+    @view.cbx_start.setEnabled(false)
+    @view.cbx_stop.setEnabled(false)
+    @view.btn_scan.setEnabled(false)
+    update_tbl(@view.cbx_stop.currentText)
+    Firmware.new('SWD')
+    swd = HardsploitAPI_SWD.new(
+    	memory_start_address: '0x08000000',
+    	memory_size_address:  '0x1FFFF7E0',
+    	cpu_id_address:		    '0xE000ED00',
+    	device_id_address:	  '0x1FFFF7E8'
+    )
+    @result = swd.find(
+      start_from: @view.cbx_start.currentText[1].to_i + 9,
+      stop_to:    @view.cbx_stop.currentText[1].to_i + 9
+    )
+    unless @result[1].is_a? Array
+      @view.tbl_result.setItem(@result.index(0), 1, Qt::TableWidgetItem.new('CLK'))
+      @view.tbl_result.setItem(@result.index(1), 1, Qt::TableWidgetItem.new('IO'))
+    end
+    @view.cbx_start.setEnabled(true)
+    @view.cbx_stop.setEnabled(true)
+    @view.btn_scan.setEnabled(true)
+  rescue HardsploitAPI::ERROR::HARDSPLOIT_NOT_FOUND
+    ErrorMsg.new.hardsploit_not_found
+    return false
+  rescue HardsploitAPI::ERROR::USB_ERROR
+    ErrorMsg.new.usb_error
+    return false
+  rescue HardsploitAPI::ERROR::SWD_ERROR
+    return ErrorMsg.new.swd_error
+  rescue Exception => msg
+    ErrorMsg.new.unknown(msg)
+    return false
+  end
+
+  def autowiring
+    signal_found = false
+    @view.tbl_result.rowCount.times do |i|
+      if @view.tbl_result.item(i, 1).text == 'IO'
+        signal_found = true
+        current_signal = Signall.find_by(name: 'SWD_IO')
+        current_signal.update(pin: @view.tbl_result.item(i, 0).text)
+      elsif @view.tbl_result.item(i, 1).text == 'CLK'
+        signal_found = true
+        current_signal = Signall.find_by(name: 'SWD_CLK')
+        current_signal.update(pin: @view.tbl_result.item(i, 0).text)
+      else
+        # Next row
+      end
+    end
+    if signal_found
+      Qt::MessageBox.new(
+  			Qt::MessageBox::Information,
+  			'Hardsploit Autowiring',
+  			'Wiring saved. To change it, go to Menu > Signal mapper'
+  		).exec
+    else
+      Qt::MessageBox.new(
+  			Qt::MessageBox::Information,
+  			'Hardsploit Autowiring',
+  			'No signals found in the array'
+  		).exec
+    end
+  rescue Exception => msg
+    ErrorMsg.new.unknown(msg)
+    return false
+  end
+
+  def update_tbl(pin)
+    unless @view.cbx_stop.count.zero?
+      @view.tbl_result.setRowCount(0)
+      nbr = pin[1].to_i - (@view.cbx_start.currentText[1].to_i) + 1
+      nbr.times do |i|
+        @view.tbl_result.insertRow(i)
+        @view.tbl_result.setItem(i, 0, Qt::TableWidgetItem.new("B#{(i + @view.cbx_start.currentText[1].to_i)}"))
+        @view.tbl_result.setItem(i, 1, Qt::TableWidgetItem.new('-'))
+      end
+      resize_to_content
+    end
+  end
+
+  def resize_to_content
+    @view.tbl_result.resizeColumnsToContents
+    @view.tbl_result.resizeRowsToContents
+    @view.tbl_result.horizontalHeader.stretchLastSection = true
+  end
+
+  def update_cbx(pin)
+    @view.cbx_stop.clear
+    start_at = pin[1].to_i
+    end_at = 7
+    (end_at - start_at).times do |i|
+      @view.cbx_stop.addItem("B#{(i + start_at) + 1}")
+    end
+  end
+end