+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Exploiting an mp3 or jpg files to run code ... Possible ? (/showthread.php?tid=5411924)
Exploiting an mp3 or jpg files to run code ... Possible ? - mrgoodcat - Sep 21, 2016
Hello guys, the title says it all but I'll explain. I own a Peugeot 108 that mounts a unit Pioneer AVH-7148ZC; Needless to say, I have searched far and wide to find information about this unit, and the only thing I could find is that the S.O. installed is a distro (proprietary of course) Linux (but it ?!). That said, I would like to get something more from this unit, or I'd love to be able to use the 7 "display to see movies. Now I wondered: How can I have access to some additional features? The only way to" interact "USB is the entrance from which the drive reads the mp3 file to listen to music, and up to a maximum of four images in jpg to use as wallpaper on power thereof. Hence my question: i can" mask "one script that allows me to start a live distro (for example) "simply" by renaming the script .mp3 / jpg?
I apologize in advance if I said nonsense, and if that were the case, I would be pleased to receive advice on how to do to reach my goal.
P.S. While writing I thought from the USB stick updates are also installed. Update the topic with links to the firmware so that someone more experienced than me, which felt like it, can analyze it.
Thank you.
Edit: here is the link to download the update https://mypeugeot-it.peugeot.com/resources/content/mirror-screen/upgrade/1.1/13TPDAEU-EA01_0001.kwi
The file is in kwi format.
Edit2: opening the update file (218MB) with Notepad ++ to line 105 and 106 I found this:
- System halted Attempting division by 0! Uncompressing Linux ... done, booting the kernel.
NULL pointer output and no flush function provided input NULL pointer and missing positions or fill pointer function invalid header dest len longer than block size Compressed corrupted data file violation ‰ LZO
Confirmed then the use of a Linux distribution.