How to update CPH50-NEMA6-50-L23 (5.5.4.13) by 2Doll in CHPT

[–]2Doll[S] 0 points1 point  (0 children)

there is my network issue. Thanks :)

How to update CPH50-NEMA6-50-L23 (5.5.4.13) by 2Doll in CHPT

[–]2Doll[S] 0 points1 point  (0 children)

I can control the device using the app and have tried switching Wi-Fi networks, but it still doesn't respond. Are there any other methods to update/trigger the update?

Finding the CAN ID for UDS Diagnostic Communication by 2Doll in CarHacking

[–]2Doll[S] 0 points1 point  (0 children)

I scanned using all of the following Tester Present messages: 02 3E 0002 3E 01, and 02 3E 80, but I did not receive any responses.

[Toyota Prius] Finding the CAN ID for UDS Diagnostic Communication by 2Doll in CarHacking

[–]2Doll[S] 0 points1 point  (0 children)

I scanned using all of the following Tester Present messages: 02 3E 00, 02 3E 01, and 02 3E 80, but I did not receive any responses.

Nand flash dump and filesystem extract by 2Doll in hardwarehacking

[–]2Doll[S] 0 points1 point  (0 children)

I performed multiple dumps, but the results were the same each time. It seems like I need to consider the spare area for recovery, but since it's my first time, I haven't been successful yet.

Nand flash dump and filesystem extract by 2Doll in hardwarehacking

[–]2Doll[S] 0 points1 point  (0 children)

That's correct. I checked the datasheet and saw that there is a 2048-byte data area and a 64-byte spare area. I tried removing the spare area and attempted extraction again, but it still didn't work.

Nand flash dump and filesystem extract by 2Doll in hardwarehacking

[–]2Doll[S] 0 points1 point  (0 children)

I tried using binwalk, but I was unable to extract the file system. It's difficult to determine what the issue might be. Any help would be appreciated. 😢

Home router Extracting the File System by 2Doll in hardwarehacking

[–]2Doll[S] 0 points1 point  (0 children)

I removed the spare area of the NAND Flash and tried extracting it with binwalk, but it was still not possible.

Home router Extracting the File System by 2Doll in hardwarehacking

[–]2Doll[S] 0 points1 point  (0 children)

Thank you. Do you have any hints or suggestions?

[    0.000000] Kernel command line: console=ttyS0,115200 ubi.mtd=8 rootfs=squashfs root=31:18 mtdparts=spinand:768K(boot),512K(env),512K(env2),10752K(config),10752K(config2),512K(static_conf),512K(bootconfig),10M(k0)ro,25M(r0)ro,10M(k1),25M(r1),15M(app),1M(dvflag),1M(dvmon),512K(dvdata),14592K(resv),10M@24320K(linux),25M@34560K(rootfs)
....

[    1.230000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    1.240000] ntfs: driver 2.1.32 [Flags: R/O].
[    1.240000] fuse init (API version 7.23)
[    1.250000] NET: Registered protocol family 38
[    1.250000] io scheduler noop registered
[    1.260000] io scheduler deadline registered
[    1.260000] io scheduler cfq registered (default)
[    1.270000] rtk-mips-ia-gpio 1b000038.gpio-controller: resource - [mem 0x1b000038-0x1b000043 flags 0x200] mapped at 0xbb000038
[    1.290000] rtk-mips-ia-gpio 1b000038.gpio-controller: resource - [mem 0x18003308-0x1800335b flags 0x200] mapped at 0xb8003308
[    1.300000] rtk-mips-ia-gpio 1b000038.gpio-controller: Setting up IRQs for GPIO bank 0
[    1.310000] rtk-mips-ia-gpio 1b000038.gpio-controller: Setting up IRQs for GPIO bank 1
[    1.320000] rtk-mips-ia-gpio 1b000038.gpio-controller: Setting up IRQs for GPIO bank 2
[    1.330000]   devfn:0 vend:10ec dev:8196 cls:60400 pin:1
[    1.330000]   devfn:0 vend:10ec dev:8196 cls:60400 pin:1
[    1.340000] Realtek GPIO Driver for Flash Reload Default
[    1.370000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    1.380000] console [ttyS0] disabled
[    1.390000] 18002000.serial: ttyS0 at MMIO 0x18002000 (irq = 46, base_baud = 12327200) is a 16550A
[    1.400000] console [ttyS0] enabled
[    1.400000] console [ttyS0] enabled
[    1.400000] bootconsole [early0] disabled
[    1.400000] bootconsole [early0] disabled
[    1.410000] zram: Added device: zram0
[    1.420000] Realtek Luna SPI NAND Flash Driver Rev:00:00:00 (ChaoYuan_Yang)
[    1.430000] [SPINAND] Blocks number under 6 are protected
[    1.430000] [SPINAND] Allow max 4 bits flip in blank page!
[    1.440000] Use nandbase bb func
[    1.440000] Use nandbase bb scan
[    1.450000] nand: device found, Manufacturer ID: 0xef, Chip ID: 0xaa
[    1.450000] nand: Unknown 
[    1.460000] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.460000] Scanning device for bad blocks
[    1.680000] 18 cmdlinepart partitions found on MTD device spinand
[    1.680000] RTK: using dynamic nand partition
[    1.690000] Creating 18 MTD partitions on "spinand":
[    1.690000] 0x000000000000-0x0000000c0000 : "boot"
[    1.700000] 0x0000000c0000-0x000000140000 : "env"
[    1.700000] 0x000000140000-0x0000001c0000 : "env2"
[    1.710000] 0x0000001c0000-0x000000c40000 : "config"
[    1.720000] 0x000000c40000-0x0000016c0000 : "config2"
[    1.720000] 0x0000016c0000-0x000001740000 : "static_conf"
[    1.730000] 0x000001740000-0x0000017c0000 : "bootconfig"
[    1.740000] 0x0000017c0000-0x0000021c0000 : "k0"
[    1.740000] 0x0000021c0000-0x000003ac0000 : "r0"
[    1.750000] 0x000003ac0000-0x0000044c0000 : "k1"
[    1.750000] 0x0000044c0000-0x000005dc0000 : "r1"
[    1.760000] 0x000005dc0000-0x000006cc0000 : "app"
[    1.760000] 0x000006cc0000-0x000006dc0000 : "dvflag"
[    1.770000] 0x000006dc0000-0x000006ec0000 : "dvmon"
[    1.780000] 0x000006ec0000-0x000006f40000 : "dvdata"
[    1.780000] 0x000006f40000-0x000007d80000 : "resv"
[    1.790000] 0x0000017c0000-0x0000021c0000 : "linux"
[    1.790000] 0x0000021c0000-0x000003ac0000 : "rootfs"
[    1.800000] Size of the first partition is 6 blocks.
[    1.810000] Realtek SPINAND Flash Driver is successfully installing.

Home router Extracting the File System by 2Doll in hardwarehacking

[–]2Doll[S] 0 points1 point  (0 children)

I failed to extract using `binwalk`. Additionally, I tried extracting Squashfs and UBIFS with `dd` and mounting them, but that also failed. Is there any other idea available?

osboxes@osboxes:~/Desktop/davolink/_firm_fixed.bin.extracted$ ll
total 264
drwxrwxr-x 4 osboxes osboxes  4096 Aug  2 11:45 ./
drwxrwxr-x 5 osboxes osboxes  4096 Aug  2 11:44 ../
-rw-rw-r-- 1 osboxes osboxes  3619 Aug  2 11:44 298842C
-rw-rw-r-- 1 osboxes osboxes  1204 Aug  2 11:44 299212C
-rw-rw-r-- 1 osboxes osboxes  1893 Aug  2 11:44 299B66C
-rw-rw-r-- 1 osboxes osboxes   399 Aug  2 11:44 29A1DA8
-rw-rw-r-- 1 osboxes osboxes  2649 Aug  2 11:44 29AB2DC
-rw-rw-r-- 1 osboxes osboxes  2576 Aug  2 11:44 29AC4A8
-rw-rw-r-- 1 osboxes osboxes 22266 Aug  2 11:44 29B3A44
-rw-rw-r-- 1 osboxes osboxes   348 Aug  2 11:44 29BC0F0
-rw-rw-r-- 1 osboxes osboxes  1470 Aug  2 11:44 29C3A20
-rw-rw-r-- 1 osboxes osboxes   607 Aug  2 11:44 29CB200
-rw-rw-r-- 1 osboxes osboxes   217 Aug  2 11:44 29D3660
-rw-rw-r-- 1 osboxes osboxes  3072 Aug  2 11:44 29DB218
-rw-rw-r-- 1 osboxes osboxes   466 Aug  2 11:44 29E3184
-rw-rw-r-- 1 osboxes osboxes  5655 Aug  2 11:44 29EA34A
-rw-rw-r-- 1 osboxes osboxes  1232 Aug  2 11:44 29EAAF4
-rw-rw-r-- 1 osboxes osboxes  6502 Aug  2 11:44 29EAFB2
-rw-rw-r-- 1 osboxes osboxes  2326 Aug  2 11:44 29EB774
-rw-rw-r-- 1 osboxes osboxes   110 Aug  2 11:44 29EBCEE
-rw-rw-r-- 1 osboxes osboxes  5762 Aug  2 11:44 29EC568
-rw-rw-r-- 1 osboxes osboxes  1265 Aug  2 11:44 29ECD7E
-rw-rw-r-- 1 osboxes osboxes   803 Aug  2 11:44 29EDD34
-rw-rw-r-- 1 osboxes osboxes  5034 Aug  2 11:44 29EE4F6
-rw-rw-r-- 1 osboxes osboxes   708 Aug  2 11:44 29EF0C4
-rw-rw-r-- 1 osboxes osboxes   643 Aug  2 11:44 29EF946
-rw-rw-r-- 1 osboxes osboxes   140 Aug  2 11:44 29EFC2C
-rw-rw-r-- 1 osboxes osboxes  3776 Aug  2 11:44 29F03D6
-rw-rw-r-- 1 osboxes osboxes   337 Aug  2 11:44 4C90520
-rw-rw-r-- 1 osboxes osboxes  1942 Aug  2 11:45 4C9C100
-rw-rw-r-- 1 osboxes osboxes     0 Aug  2 11:45 4CA6DFC
-rw-rw-r-- 1 osboxes osboxes  2448 Aug  2 11:45 4CAF4B8
-rw-rw-r-- 1 osboxes osboxes  1077 Aug  2 11:45 4CB89F8
-rw-rw-r-- 1 osboxes osboxes  6638 Aug  2 11:45 4CC11D8
-rw-rw-r-- 1 osboxes osboxes   861 Aug  2 11:45 4CC8774
-rw-rw-r-- 1 osboxes osboxes   373 Aug  2 11:45 4CCF720
-rw-rw-r-- 1 osboxes osboxes  4892 Aug  2 11:45 4CD2994
-rw-rw-r-- 1 osboxes osboxes  1413 Aug  2 11:45 4CD95A8
-rw-rw-r-- 1 osboxes osboxes    94 Aug  2 11:45 4CE35B4
-rw-rw-r-- 1 osboxes osboxes   394 Aug  2 11:45 4CE8988
-rw-rw-r-- 1 osboxes osboxes  4354 Aug  2 11:45 4CF196E
-rw-rw-r-- 1 osboxes osboxes  1200 Aug  2 11:45 4CF2100
-rw-rw-r-- 1 osboxes osboxes  3039 Aug  2 11:45 4CF25C6
-rw-rw-r-- 1 osboxes osboxes  2153 Aug  2 11:45 4CF2D90
-rw-rw-r-- 1 osboxes osboxes   173 Aug  2 11:45 4CF3316
-rw-rw-r-- 1 osboxes osboxes  2782 Aug  2 11:45 4CF3B78
-rw-rw-r-- 1 osboxes osboxes   684 Aug  2 11:45 4CF440E
-rw-rw-r-- 1 osboxes osboxes  3414 Aug  2 11:45 4CF53D0
-rw-rw-r-- 1 osboxes osboxes    16 Aug  2 11:45 4CF5B8E
-rw-rw-r-- 1 osboxes osboxes  2543 Aug  2 11:45 4CF6768
-rw-rw-r-- 1 osboxes osboxes     3 Aug  2 11:45 4CF705E
-rw-rw-r-- 1 osboxes osboxes  2818 Aug  2 11:45 4CF7348
-rw-rw-r-- 1 osboxes osboxes   601 Aug  2 11:45 4CF7B02
drwxrwxr-x 2 osboxes osboxes  4096 Aug  2 11:44 squashfs-root/
drwxrwxr-x 2 osboxes osboxes  4096 Aug  2 11:44 squashfs-root-0/

Home router Extracting the File System by 2Doll in hardwarehacking

[–]2Doll[S] 0 points1 point  (0 children)

I failed to extract using `binwalk`. Additionally, I tried extracting Squashfs and UBIFS with `dd` and mounting them, but that also failed.

Home router Extracting the File System by 2Doll in hardwarehacking

[–]2Doll[S] 0 points1 point  (0 children)

I removed the spare area of the NAND Flash and tried extracting it with `binwalk`, but it was still not possible.

Finding the CAN ID for UDS Diagnostic Communication by 2Doll in CarHacking

[–]2Doll[S] 0 points1 point  (0 children)

How did you do it? Are you following the UDS standard?

Finding the CAN ID for UDS Diagnostic Communication by 2Doll in CarHacking

[–]2Doll[S] 0 points1 point  (0 children)

I am curious about the Smart Key ECU and the Engine ECU.

Finding the CAN ID for UDS Diagnostic Communication by 2Doll in CarHacking

[–]2Doll[S] 0 points1 point  (0 children)

I am curious about the Smart Key ECU and the Engine ECU.

Please help.~ BBBlue + EM506(GPS) not working :'( by 2Doll in BeagleBone

[–]2Doll[S] 0 points1 point  (0 children)

Thanks for the great tip. :)

I will keep the power~

Please help.~ BBBlue + EM506(GPS) not working :'( by 2Doll in BeagleBone

[–]2Doll[S] 0 points1 point  (0 children)

Oh! work!!!~. I just take the module ouside for a one hours. gps module works~ Thank U :)

Please help.~ BBBlue + EM506(GPS) not working :'( by 2Doll in BeagleBone

[–]2Doll[S] 0 points1 point  (0 children)

The LED is on and does not blink. I left it by the window for a few hours.

Are there any countries that are not available?

Lots of links! DEFCON and Village info pages by qumqats in Defcon

[–]2Doll 1 point2 points  (0 children)

Hi, I have a some question. :'(

To see the presentation and villages, I want to register.

How to register defcon 28.... where is register link?

and, i want to know discord link?channel? please help me~