firmware-sammelbecken wiki migration

This commit is contained in:
user 2022-07-29 11:36:10 +02:00
parent afb496dc73
commit c38f37121f
7 changed files with 230 additions and 1 deletions

37
DAB-usb-receiver.md Normal file
View File

@ -0,0 +1,37 @@
some chinese dab+ receiver:
`ID 1234:1111 Brain Actuated Technologies mvsiicon 026 usb audio`
```
[151974.121729] usb 2-2: new full-speed USB device number 44 using xhci_hcd
[151974.281931] usb 2-2: New USB device found, idVendor=1234, idProduct=1111, bcdDevice= 1.00
[151974.281939] usb 2-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[151974.281942] usb 2-2: Product: mvsiicon 026 usb audio
[151974.281944] usb 2-2: Manufacturer: MVSILICON
[151974.281947] usb 2-2: SerialNumber: 20151012
[151974.911246] usb-storage 2-2:1.0: USB Mass Storage device detected
[151974.911440] scsi host4: usb-storage 2-2:1.0
[151974.911553] usbcore: registered new interface driver usb-storage
[151974.918100] usbcore: registered new interface driver uas
[151975.922059] scsi 4:0:0:0: Direct-Access WRADIO DAB Stick V1.0 PQ: 0 ANSI: 2
[151975.922416] sd 4:0:0:0: Attached scsi generic sg2 type 0
[151975.925832] sd 4:0:0:0: [sdc] 335544320 512-byte logical blocks: (172 GB/160 GiB)
[151975.929340] sd 4:0:0:0: [sdc] Write Protect is off
[151975.929345] sd 4:0:0:0: [sdc] Mode Sense: 0b 00 00 08
[151975.929828] sd 4:0:0:0: [sdc] No Caching mode page found
[151975.929833] sd 4:0:0:0: [sdc] Assuming drive cache: write through
[151975.943407] sdc:
[151975.960879] sd 4:0:0:0: [sdc] Attached SCSI removable disk
```
Howeever, the device simulate a usb drive, which should contain some mp3 files. those files are names after the station. If this file gets opened the LED blinks red while tuning and is stable green if successfully tuned.
the file DAB_VER.TXT contains the string: 20190218
more information can be found here: https://github.com/AlbrechtL/AP8224-DAB-Dongle
and here: https://www.rundfunkforum.de/viewtopic.php?t=56487&start=30#p1507573
here: https://www.rtl-sdr.com/tysonpower-reviews-a-cheap-15e-dab-dab-usb-receiver-dongle-that-generates-an-mp3-stream/
there is one button
1. hold down and inserting stick: possible firmware update mechanism (4 files, Bootloader_Version.txt [M1BOOT20190403a], FIRMWARE.BIN, Readme.txt, Update_Done.ctl)

View File

@ -26,6 +26,8 @@ or prepare the file`/etc/systemd/journald.conf` and this value:`SystemMaxUse=50M
- reboot the system to check if anything is broken
- add secureboot https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Implementing_Secure_Boot
### git use credential store
https://gist.github.com/maelvls/79d49740ce9208c26d6a1b10b0d95b5e
## failure recovery
1. boot from archlinux usb stick

73
firmware_sammelbecken.md Normal file
View File

@ -0,0 +1,73 @@
Willkommen im Wiki.
Hier wird ein Sammelsurium angelegt, welches Snippets für alles enthält, was mir über den Weg läuft.
#### TS100 soldering iron
Hold B
v2.11.372F8E3
29-08-20
Hold A
DFU:3.45
New drive available: 7BA978B8
put hex file there, systems reboots, a file with the ending .RDY or .ERR is placed.
#### Moto X4
```
*#*#4636#*#* --> Telefonwartungsmenü
```
```
VoLTE sowie WiFiCall kann erst mit neuem Update kommen, da der APN von 07 auf 03 geändert wurde und die carrier-Datei muss in der Firmware abgeändert werden.
```
[Nachweis VoLTE](https://forums.lenovo.com/t5/Moto-X4/VoLTE-on-ALDI-TALK/m-p/4228082)
#### Odroid HC1 sdcard handling
Mirror second bootstage
dd if=/dev/mmcblk0 of=/dev/sdc bs=512 count=8192
partclone (maybe some resize due different sdcard size is required)
partclone.ext4 -N -b -s /dev/mmcblk0p1 -o /dev/sdc1
##### STM32 F103 clones
https://www.blaatschaap.be/?p=120
#### nrf51822 board
Das Board ist ein übliches nrf51822 board, welches mit der Waveshare BLE400 Platform zum SDK wird. Das Rastermaß scheint kleiner zu sein.
Mit einem ST-Link V2 konnte über die beiden Pins SWCLK und SWIO geflasht werden.
```
openocd -f interface/stlink-v2.cfg -f target/nrf51.cfg
telnet localhost 4444
Trying ::1...
Connection failed: Verbindungsaufbau abgelehnt
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Open On-Chip Debugger
> halt
target halted due to debug-request, current mode: Handler HardFault
xPSR: 0xc1000003 pc: 0xfffffffe msp: 0xffffffd8
> nrf51 mass_erase
> flash banks
#0 : nrf51.flash (nrf51) at 0x00000000, size 0x00040000, buswidth 1, chipwidth 1
#1 : nrf51.uicr (nrf51) at 0x10001000, size 0x00000100, buswidth 1, chipwidth 1
> flash write_image /home/koelner/Downloads/btlejack-firmware-ble400.hex
Padding image section 0 with 2112 bytes
Padding image section 1 with 5864 bytes
Padding image section 2 with 81204 bytes
Padding image section 3 with 908 bytes
using fast async flash loader. This is currently supported
only with ST-Link and CMSIS-DAP. If you have issues, add
"set WORKAREASIZE 0" before sourcing nrf51.cfg to disable it
target halted due to breakpoint, current mode: Handler HardFault
xPSR: 0x61000003 pc: 0x2000001e msp: 0xffffffd8
using fast async flash loader. This is currently supported
only with ST-Link and CMSIS-DAP. If you have issues, add
"set WORKAREASIZE 0" before sourcing nrf51.cfg to disable it
target halted due to breakpoint, current mode: Handler HardFault
xPSR: 0x61000003 pc: 0x2000001e msp: 0xffffffd8
wrote 261156 bytes from file /home/koelner/Downloads/btlejack-firmware-ble400.hex in 4.912921s (51.911 KiB/s)
> reset
```
Der CP2102 Adapter TTL kann wohl an P0.09 und P0.11 angeschlossen werden.
https://github.com/virtualabs/btlejack-firmware/blob/master/config/ble400.json

View File

@ -68,7 +68,47 @@ TBD
Transcend HUB2K USB3.1 Gen1 4-Port-Hub W/O:F10639 (Production Year: 2019)
idVendor=8564, idProduct=4100, bcdDevice=93.03
```
### wifi dongles
```
uname
5.6.4-arch1-1 #1 SMP PREEMPT Mon, 13 Apr 2020 12:21:19 +0000 x86_64 GNU/Linux
#TP-link
lsusb
ID 0bda:8179 Realtek Semiconductor Corp. RTL8188EUS 802.11n Wireless Network Adapter
dmesg
[ +3,206148] usb 2-2: USB disconnect, device number 18
[ +2,293722] usb 2-2: new high-speed USB device number 19 using xhci_hcd
[ +0,017037] usb 2-2: New USB device found, idVendor=0bda, idProduct=8179, bcdDevice= 0.00
[ +0,000006] usb 2-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ +0,000004] usb 2-2: Product: 802.11n NIC
[ +0,000003] usb 2-2: Manufacturer: Realtek
[ +0,000003] usb 2-2: SerialNumber: 00E04C0001
[ +0,001805] Chip Version Info: CHIP_8188E_Normal_Chip_TSMC_D_CUT_1T1R_RomVer(0)
[ +0,617239] r8188eu 2-2:1.0 wlp0s20u2: renamed from wlan0
[ +0,390733] MAC Address = 50:3e:aa:3e:52:ba
[ +0,003729] R8188EU: indicate disassoc
#Edimax
ID 7392:7811 Edimax Technology Co., Ltd EW-7811Un 802.11n Wireless Adapter [Realtek RTL8188CUS]
dmesg
[ +6,111277] usb 2-2: new high-speed USB device number 20 using xhci_hcd
[ +0,018769] usb 2-2: New USB device found, idVendor=7392, idProduct=7811, bcdDevice= 2.00
[ +0,000006] usb 2-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ +0,000004] usb 2-2: Product: 802.11n WLAN Adapter
[ +0,000003] usb 2-2: Manufacturer: Realtek
[ +0,000002] usb 2-2: SerialNumber: 00e04c000001
[ +0,002812] rtl8192cu: Chip version 0x10
[ +0,032281] rtl8192cu: Board Type 0
[ +0,000074] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1
[ +0,000037] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin
[ +0,000521] ieee80211 phy2: Selected rate control algorithm 'rtl_rc'
[ +0,596727] rtl8192cu 2-2:1.0 wlp0s20u2: renamed from wlan0
[ +0,018604] rtl8192cu: MAC auto ON okay!
[ +0,011186] rtl8192cu: Tx queue select: 0x05
[ +0,486535] rtl8192cu: MAC auto ON okay!
[ +0,010523] rtl8192cu: Tx queue select: 0x05
```
### gadgets
#### DAB+
https://github.com/AlbrechtL/AP8224-DAB-Dongle

View File

@ -15,4 +15,4 @@ My own system: https://linux-hardware.org/?probe=6dfbd97685
1. keyboard backlight https://wiki.archlinux.org/title/Keyboard_backlight#On_GNOME
2. keyboard FN keys
3. bluetooth daemon disabled by default
4. touchscreen not detected
4. touchscreen not detected - suddenly then it appears

View File

@ -0,0 +1,41 @@
# Philips 0819/10 Luftreiniger
## Preambel
Damit man vom Gleichen spricht
![](https://upload.wikimedia.org/wikipedia/commons/3/30/US_PM2.5_Standards_and_Air_Quality_Index.jpg)
Weil die Xiami Geräte Air Purifier 2C und 3H sich wohl den chinesischen GRenzwerten verbunden fühlen, ist die Wahl auf das Philips Gerät gefallen.
* DIY Kohlefilter möglich
## Gerät
### IC-Markierungen
```
tb6203af28
b943t00b3g2
utc
mc34063ag
```
### Zum Zerlegen:
1. 4 Schrauben an der Unterseite lösen
2. Bodenring abheben
3. schwarze Verblendung für Stromanschluss seitlich abziehen
3. 4 Schrauben am schwarzen Einsatz lösen
4. ggf. Schutzklappe des PM-Sensors entfernen
5. den schwarzen Einsatz nach unten hin entfernen (Verhakt sich leicht, Verkanten auf Y-Achse sowie leichtes Zusammendrücken des Gehäuses zum Spalt erzeugen)
6. Kappe am schwarzen Einsatz abheben
7. 2 Schrauben und 2 Haltenasen an der Platine lösen
8. 3 Schrauben an der Motorabdeckung lösen
9. N/A
### Platine und Bauteile
* 3 RGB LEDs für die Beleuchtung
* 1 LDR für Helligkeitsregeleung (?)
* 1 rote LED für Filterwechselmarker
* 1 Touchfeld (Spirale)
* I2C Anschluss (?) 5V, GND, SDA, SCK
* MC34063AG DC-DC Converter Control Unit [](http://www.unisonic.com.tw/datasheet/MC34063A.pdf)
* Nidec 42F704Q900 Motor (?)
* PM Sensor PPD42NJ ? (https://www.shinyei.co.jp/stc/eng/products/optical/ppd42nj.html ?) 5v, GND, P1 Pins genutzt

36
radio_sniffer.md Normal file
View File

@ -0,0 +1,36 @@
# radio sniffer
### CC2531 802.15.4/ZigBee
(https://github.com/andrewdodd/pyCCSniffer)
(https://github.com/riverloopsec/killerbee)
to parse directly to wireshark [V1.3]
(https://github.com/homewsn/whsniff)
As there exists a default key for linking add to wireshark after using
AES 128 bit Encryption /32bit MAC
| Key | Direction | Label |
| -------- | -------- | -------- |
| 5A:69:67:42:65:65:41:6C:6C:69:61:6E:63:65:30:39 | Normal | Zigbee Trust Center Link Key |
| 81:42:86:86:5D:C1:C8:B2:C8:CB:C5:2E:5D:65:D1:B8 | Normal | light link commissioning key |
| 9F:55:95:F1:02:57:C8:A4:69:CB:F4:2B:C9:3F:EE:31 | Normal | light link master key |
https://blog.jimmo.id.au/2017/02/25/zigbee-packet-capture.html
[Visualize mesh connection from pcap](https://github.com/mingqian/zigbee-viewer)
### CC2540 BLE4
BLE has got three announcement channels, therefore three devices needed to capture all needed protocol handling.
http://www.ti.com/tool/PACKET-SNIFFER
https://github.com/bertrik/cc2540
BBC micro:bit, nRF51822
https://github.com/virtualabs/btlejack
### CC26XX
https://github.com/nccgroup/Sniffle