Crazy-flie

Crazy-flie

with mini cam onboard

HORNET U-BOARD X2 64/16 aka UB64

original ub64 files if someone need that

[ ] ART.bin 2016-05-18 03:54 64K  
[ ] NVRAM.bin 2016-05-18 03:54 64K  
[ ] rootfs.bin 2016-05-18 03:54 14M  
[ ] u-boot-env.bin 2016-05-18 03:54 64K  
[ ] u-boot.bin 2016-05-18 03:54 256K  
[ ] uImage.bin 2016-05-18 03:54 1.6M  

http://dl.raimond.at/hornet-ux2/

tftpboot 0x80600000 kernel.bin
erase 0x9fe50000 +0x190000
cp.b 0x80600000 0x9fe50000 120000

tftp 0x80600000 rootfs.bin
erase 0x9f050000 +0xE00000
cp.b 0x80600000 0x9f050000 240000

 

pineapple

Lost my pineapple mark5 alias mk5 in peru

so i wanted to get a new one and saw there is an pienapple nano and tera avaible at hak5

i grabbed  the firmware, binwalked it .
(get it from github or via apt)

cut kernel, rootfs etc out from the upgrade file and here ist the roofs  as bin just swquah it with or get it extraced her:

http://dl.raimond.org

bought me an hornet board with 64 named x2

there is also the original hornet x board firmware avaiable in all parts  rootfs kernel etc also from firmware udprage file

http://dl.raimond.at/hornet-ux2/

HORNET UBOARD ALFA + USBHUB+ RTL8187

ea6200

linksys ea6200

lets download the original fw from linksys
binwalk  FW_EA6200_1.1.41.164830_prod.img
i renamed it to ea6200_direct.img
lets binwalk a lil bit

http://www.devttys0.com/tag/binwalk/

we see

DECIMAL       HEXADECIMAL     DESCRIPTION
——————————————————————————–
0             0x0             TRX firmware header, little endian, header size: 28 bytes, image size: 14577664 bytes, CRC32: 0xF1AEBE86 flags: 0x0, version: 1
28            0x1C            LZMA compressed data, properties: 0x5D, dictionary size: 65536 bytes, uncompressed size: 4867904 bytes
1990256       0x1E5E70        Squashfs filesystem, little endian, version 4.0, compression:lzma (non-standard type definition), size: 12585799 bytes,  2986 inodes, blocksize: 131072 bytes, created: Mon Dec 22 10:14:57 2014

lets cut the trx header out
cli:
dd if=ea6200_direct.img of=trx_header.bin bs=1 count=28

we get n file called trx_header.bin
next lets cut the lzma out
cli:
dd if=ea6200_direct.img of=lzma.bin bs=1 skip=28 count=1990256
we get an file called lzma.bin out
so last is the rootfs
dd if=ea6200_direct.img of=squashfs_rootfs.bin bs=1 skip=1990256

rpi-tx over gpio

Data transmission overgpio pins without any network interface 

https://github.com/F5OEO/rpitx

Hornet-uboard

Available through pineapple repository from hak5

some missing  packages in normal openwrt

 

Helmut Wagner has been killed 2007 by local mobs as middleman of 100Kg Cocaine

%d Bloggern gefällt das:
Visit Us On Google PlusVisit Us On YoutubeVisit Us On FacebookVisit Us On TwitterVisit Us On PinterestVisit Us On InstagramVisit Us On LinkedinCheck Our Feed