Similar to the second model, just different WiFi SSID: HG-WIFI_XXXXXX<- MAC and not Hidden
So if an attacker Sniffs and spoof its MAC It could drop in to a nearby WalkieTalkie Session and have full access
Stock Protocol description:
Basically a WiFi connection and data exchanged via UDP
2 Bound devices only work with each other.
One is an WiFi AP
(Hidden SSID: AT_TEST Pwd:12345678)
and one STA
MAC Based connection control
On connection it used the SDK Intercom UDP example
For sure the lately "trending" and super cheap Video Walkie Talkies are now also Doomed 🥳
Full video now on YouTube:
https://youtu.be/5aRQLHLls0k
Source code and Precompiled firmware is available here:
https://github.com/atc1441/TXW818_WalkieTalkie_Doom
When Multiplayer?😅
Fun fact, a web upload trigger gives you root read access on the Tolino Vision Color, but im not even sure if they are in general just more open for tinkering.
7" Full Color Linux eink reader for 200€ is anyway more on the expensive side
Just finished an new E-Paper firmware SoC port🥳
The long hated Realtek RTL8762ESL and RTL8752HJL now got a fully featured ATC_RTL_BLE_OEPL Firmware and so have full OpenEpaperLink Support
Released on GitHub:
https://github.com/atc1441/ATC_RTL_BLE_OEPL
Sadly a bit to simple to pull off^^
Doom running on the GL-iNet Slate 7 Pro Travel Router
New toy,
Pudu Food delivery Robot.
Doom runs fine on its internal Android RK3399 NanoPC-T4
Basically an over engineered Hoverboard with two RealSense D435 3D Cameras and Lidar
Longer video on YouTube:
https://youtu.be/cBzTto2OIDQ
Finally there is DOOM on a Cooking Pot...
Nice hacking challenge of a way over-engineered "Smart-device"!
Inside we can find 4 SoC's from 4 companies:
Heat control via STM32F031
Input button via PIC18F8..
Wifi via ESP32
Main FW Renesas 400Mhz ARM A9
Full video on YouTube: https://youtu.be/V5Jtc7wTbQ8
Aha! Mystery solved, the mentioned chip is actually the Display driver
The main SoC is the one next
The DA14535 with a 24 Pin case
https://renesas.com/en/products/da14535
This explains why the firmware is so similar to the DA14585^^ Not a clone
This opens up everything for a custom firmware
