{"id":34,"date":"2019-02-14T03:16:14","date_gmt":"2019-02-14T03:16:14","guid":{"rendered":"http:\/\/robertmccallum.nl\/?p=34"},"modified":"2019-02-15T01:23:42","modified_gmt":"2019-02-15T01:23:42","slug":"35c3ctf-box-of-blink","status":"publish","type":"post","link":"http:\/\/robertmccallum.nl\/index.php\/2019\/02\/14\/35c3ctf-box-of-blink\/","title":{"rendered":"Terminal led matrix emulator."},"content":{"rendered":"\n

35C3CTF – box of blink<\/h1>\n\n\n\n

provided is a 400MB .csv file and a photo of an oscilloscope with logic inputs connected on to data bus between a raspberry pi and 2 chained led matrix boards.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
Recon<\/h5>\n\n\n\n

after quick examination i realized the csv file was a log of the measurements from the oscilloscope. <\/p>\n\n\n\n

the beginning of the file looked like this.<\/p>\n\n\n\n

Model,MDO3014
 Firmware Version,1.26
 #
 Waveform Type,DIGITAL,,,,,,,,,,,,,
 Point Format,Y,,,,,,,,,,,,,
 Horizontal Units,s,,,,,,,,,,,,,
 Horizontal Scale,0.004,,,,,,,,,,,,,
 ,,,,,,,,,,,,,,
 Sample Interval,4e-09,,,,,,,,,,,,,
 Record Length,1e+07,,,,,,,,,,,,,
 Gating,0.0% to 100.0%,,,,,,,,,,,,,
 ,,,,,,,,,,,,,,
 Vertical Units,V,V,V,V,V,V,V,V,V,V,V,V,V,V
 Threshold Used,1.65,1.65,1.65,1.65,1.65,1.65,1.65,1.65,1.65,1.65,1.65,1.65,1.65,1.65
 ,,,,,,,,,,,,,,
 ,,,,,,,,,,,,,,
 ,,,,,,,,,,,,,,
 ,,,,,,,,,,,,,,
 ,,,,,,,,,,,,,,
 Label,OE,LAT,CLK,E,D,C,B,A,B2,B1,G2,G1,R2,R1
 TIME,D13,D12,D11,D10,D9,D8,D7,D6,D5,D4,D3,D2,D1,D0
 -1.0000000e-03,0,0,0,0,1,0,0,0,0,0,0,1,0,1<\/pre>\n\n\n\n
and continued with 400MB worth of lines like<\/p>\n\n\n\n
-1.0000000e-03,0,0,0,0,1,0,0,0,0,0,0,1,0,1<\/pre>\n\n\n\n
I’ve worked a lot with digital oscilloscopes in the past so no need to look up any Information on this, since it’s still in my head.<\/p>\n\n\n\n
but the only led matrix I’ve ever worked with was a home build one made from some cheap xmas-lights and a IR-strobe light for a industrial sheet metal inspection line.<\/p>\n\n\n\n
After some googeling i found a nice tutorial on how to connect a led matrix to a arduino. with some explanation on what each pin is used for. https:\/\/learn.adafruit.com\/32×16-32×32-rgb-led-matrix\/connecting-with-jumper-wires<\/a> <\/p>\n\n\n\n
and since the labels are in the header of the blink.csv file are the same as the pin names. i can conclude that this it the same type of data bus.<\/p>\n\n\n\n
so we have the following signal:\n\noutput enable bit - - to enable output.\nlatch bit         - - to indicate end of data\nclock puls        - - to tell the board to read new data from the bus\nA,B,C,D,E         - - to select what line(s) to send the output to.\nR1,G1,B1          - - color data for the firs row.   \nR2,G2,B2          - - color data for the second row.\n\n\n                     \/------- OUTPUT ENABLE (TURNS ALL LEDS OFF OR ON)\n                    \/   \/------LATCH (INDICATED END OF DATASTREAM)\n                   \/   \/   \/-- CLOCK PULSE\n                  |   |   \/  [    select rows   ][ blues][greens][reds  ]\nLabel,         | OE |LAT|CLK|E  |D  |C  |B  |A  |B2 |B1 |G2 |G1 |R2 |R1 |\n-1.0000000e-03 | 0  | 0 | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 0 | 1 |<\/pre>\n\n\n\n
The board ‘writes’ the color data from left to right to the selected line, latch resets the write Postion to the beginning of the line.<\/p>\n\n\n\n
There are 2 lines writen at the same time its a 5bit adress so that means the first line is some were between 0 and 32 and the second is the same as the first+33<\/p>\n\n\n\n
looking at the photo of the matrix broad that seemed to be right.<\/p>\n\n\n\n
Now i know what im looking at, i just need to find a way to reproduce what was displayed on the matrix board.<\/p>\n\n\n\n
cleaning up file.<\/h5>\n\n\n\n
There were a lot of dupplicate measurements because the sample rate of the oscilloscope was much higher than the bus speed. <\/p>\n\n\n\n
So i decided to write a script cleaning out duplicate measurements to reduce file size. while i was doing this i was brain stroming on how to parse the data and display it.<\/p>\n\n\n\n
Solution<\/h5>\n\n\n\n
I decided it would be fun to output it in a terminal screen. write block Charterers and display and use v100 esacpe codes for color.<\/p>\n\n\n\n
This is the code i came up with to pars the oscilloscope log file.<\/p>\n\n\n\n
#!\/usr\/bin\/python\n# -*- coding: utf-8 -*-\n'''''''''''''''''''''''''''''''' ' ' ' '''''''''''''''''''''''''''''''''''''''''\n\n    \u2584\u2584\u2584\u2584    \u2584\u2584\u2584       \u2588     \u2588\u2591 \u2588\u2588\u2593      \u2588\u2588\u2588\u2588\u2588\u2588 \u2593\u2588\u2588\u2588\u2588\u2588  \u2584\u2588\u2588\u2588\u2588\u2584\n    \u2593\u2588\u2588\u2588\u2588\u2588\u2584 \u2592\u2588\u2588\u2588\u2588\u2584    \u2593\u2588\u2591 \u2588 \u2591\u2588\u2591\u2593\u2588\u2588\u2592    \u2592\u2588\u2588    \u2592 \u2593\u2588   \u2580 \u2592\u2588\u2588\u2580 \u2580\u2588\n    \u2592\u2588\u2588\u2592 \u2584\u2588\u2588\u2592\u2588\u2588  \u2580\u2588\u2584  \u2592\u2588\u2591 \u2588 \u2591\u2588 \u2592\u2588\u2588\u2591    \u2591 \u2593\u2588\u2588\u2584   \u2592\u2588\u2588\u2588   \u2592\u2593\u2588    \u2584\n    \u2592\u2588\u2588\u2591\u2588\u2580  \u2591\u2588\u2588\u2584\u2584\u2584\u2584\u2588\u2588 \u2591\u2588\u2591 \u2588 \u2591\u2588 \u2592\u2588\u2588\u2591      \u2592   \u2588\u2588\u2592\u2592\u2593\u2588  \u2584 \u2592\u2593\u2593\u2584 \u2584\u2588\u2588\u2592\n    \u2591\u2593\u2588  \u2580\u2588\u2593 \u2593\u2588   \u2593\u2588\u2588\u2592\u2591\u2591\u2588\u2588\u2592\u2588\u2588\u2593 \u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2592\u2592\u2588\u2588\u2588\u2588\u2588\u2588\u2592\u2592\u2591\u2592\u2588\u2588\u2588\u2588\u2592\u2592 \u2593\u2588\u2588\u2588\u2580 \u2591\n    \u2591\u2592\u2593\u2588\u2588\u2588\u2580\u2592 \u2592\u2592   \u2593\u2592\u2588\u2591\u2591 \u2593\u2591\u2592 \u2592  \u2591 \u2592\u2591\u2593  \u2591\u2592 \u2592\u2593\u2592 \u2592 \u2591\u2591\u2591 \u2592\u2591 \u2591\u2591 \u2591\u2592 \u2592  \u2591\n    \u2592\u2591\u2592   \u2591   \u2592   \u2592\u2592 \u2591  \u2592 \u2591 \u2591  \u2591 \u2591 \u2592  \u2591\u2591 \u2591\u2592  \u2591 \u2591 \u2591 \u2591  \u2591  \u2591  \u2592\n    \u2591    \u2591   \u2591   \u2592     \u2591   \u2591    \u2591 \u2591   \u2591  \u2591  \u2591     \u2591   \u2591\n    \u2591            \u2591  \u2591    \u2591        \u2591  \u2591      \u2591     \u2591  \u2591\u2591 \u2591\n      \u2591                                            \u2591\n                       -=Bawling since 2017=-           \u2592\u2591\n        \u2592                                       \u2591\n              \u2592\u2591        By: M42D                                \u2591\n            \u2591          CTF: 35c3ctf\n                  challege: box of blink                 \u2591\n            \u2591                                         \u2591\n                      date: 27-12-2018\n\n              usage : cat blink.csv | .\/blink.py\n\n              notes : for best cinematic experiance adjust\n                      your termial window to display a\n                      resolution of 265x64 charcters\n\n                      it's a damm shame the output wasn't\n                      more animated and colorfull.\n\n'''''''''''''''''''''''''''''''' ' ' ' '''''''''''''''''''''''''''''''''''''''''\n\nB,A,W,L='',' ',' ',open(__file__).readlines()\nfor S in range(3,30):\n    B+=L[S]\n    if S>7 and S<13:\n        A=L[S]+A\n        W+=L[S]\nprint '\\033[94m'+B+'\\033[0m'\nPB='\\033[94m'+A+W+'\\033[0m'\nprint \"         sit back 'n enjoy\"\nprint \" \"*40+\"-xXx- M42D\"\nprint PB\nfrom time import sleep\nsleep(5)\n#-------------------------------------------------------------------------------\n# END OF HEADER\n#-------------------------------------------------------------------------------\n\nfile_out = 'catme.txt'\nf = open(file_out, \"w\")\n\nlast_clk = '1'\nlast_oe  = '1'\nlast_lat = '1'\n\ni=0 #string in counter\no=0 #string out counter\n\nx=5 #knowing me x is probebly y\nwhile 1:\n    try:\n        input = raw_input()\n    except:\n        f.close()\n        print 'done..'\n        print 'results saved to catme.txt'\n        break\n    #input skip the whole header section of the file\n    i +=1\n    if i > 24:\n        if input == '' or input[0] == '#':\n            continue\n\n        tt = input.split(',')\n        '''\n        0  = TIMESTAMP\n        1  = OUTPUT ENABLE    --- i guess to select matrix board 1 or 2\n        2  = LATCH                               but we can ignore this\n        3  = CLOCK\n        4  = E    MSB --\\\n        5  = D           \\\n        6  = C            >-- ROW ADDRESS\n        7  = B           \/\n        8  = A    LSB --\/\n        9  = B2  ---\\\n        10 = B1      \\\n        11 = G2       \\____RGB COLORS\n        12 = G1       \/                B1,G1,R1 = top half of matrix\n        13 = R2      \/                 B2,G2,R2 = bottom half of matrix\n        14 = R1  ---\/\n        '''\n        if tt[3] != last_clk :\n            last_clk = tt[3]\n            last_lat = tt[2]\n            last_oe = tt[1]\n\n            adr_1 = int(''.join(tt[4:9]),2)\n            adr_2 = adr_1+32\n\n            '''\n    ive used ansi-vt100 escape sequences to move cursor and change color.\n    for a nice overview check: http:\/\/www.termsys.demon.co.uk\/vtansi.htm\n\n\n            '''\n            color1 = (int(tt[10])*4)+(int(tt[12])*2)+(int(tt[14])*1)\n            color2 = (int(tt[9])*4)+(int(tt[11])*2)+(int(tt[13])*1)\n\n            line1 = \"\\033[\"+str(adr_1)+\";\"+str(x)+\"H\" #place cursor top half\n            line1 +='\\x1b[6;3'+str(color1)+';40m'+'\u2588' #print a colored block\n            line2 = \"\\033[\"+str(adr_2)+\";\"+str(x)+\"H\" #place cursor bottom half\n            line2 +='\\x1b[6;3'+str(color2)+';40m'+'\u2588' #print a colored block\n            print line1+line2\n            f.write(line1+line2) # i know this slows it al down for now\n                                 # but we can just cat the output later on\n                                 # and hopefully see a nice animation in an\n                                 # resonable frame rate.\n            x +=1\n        if tt[2] == \"1\":  #end of line\n                x= 5\n<\/pre>\n\n\n\n
output<\/h5>\n\n\n\n