espes / Slave-in-the-Magic-Mirror

Open source implementation of AirPlay Mirroring. WIP.
610 stars 122 forks source link

Newer firmware #3

Open davidlawson opened 9 years ago

davidlawson commented 9 years ago

Have you tried using newer Apple TV firmware? It looks like we can decrypt Sochi 11D258, though the airtunesd file is only 10KB...

espes commented 9 years ago

In recent versions the airplay functionality was moved out to AirPlayReceiver.framework

I use that ancient airtunesd because it's the only one that doesn't use any thumb mode instructions (which aren't implemented in the emulator yet).

Note that as far as I know so far the authentication is version independent - we could implement newer revisions of the protocol while still using the old airtunesd for authentication, so it's not a big priority.

stonexing commented 9 years ago

How to get "airtunesd" from firmware the "get_airtunesd.py" cannot run on my computer

Noiled commented 8 years ago

@espes can you share your method how to find below address 0x435B4 0xEB00C 0xEB964 self.fp_initsap = 0x435B4 self.fp_challenge = 0xEB00C self.fp_decryptkey = 0xEB964

espes commented 8 years ago

v

Jimmy-Z commented 8 years ago

Too bad there is no like button!