Posts

Er worden posts getoond met het label TX-NR656

Onkyo TX-NR656 hacking - firmware decoding

Since writing my earlier post  about the TX-NR656 hacking Onkyo fixed the most blatant issue... open ssh port with known password. So the recent receivers cannot be super simple hacked as ssh is no longer available. Also the password has changed Still the Onkyo receivers are super leaky.... e.g. this URL will show you your configured wifi passwords... http://[your receiverip]:8080/..%2f..%2f..%2f..%2f..%2f..%2fmedia/settings/settings/network/profile While the web interface is still super leaky, I wanted to explore the filesystem in an easy way. For this I needed access to the file system in a simple way. This can be done by taking a firmware and mount the filesystem. The firmware can be downloaded from the Onkyo website. This file however can't be directly read. Decrypt the firmware  Compile  https://gist.github.com/marcelrv/4edcad9b63b34e1c30ac5758cc88ba9c Note: This is a fixed version from the original posted here http://divideoverflow.com/2014/04/decrypting-onkyo-...

Onkyo TX-NR656 hacking

Afbeelding
Onkyo TX-NR656 Recently bought a  Onkyo TX-NR656   and obviously interested how I can integrate it in my Home Automation. Searching the internet I found this interesting link   where it was clear the amplifier was running Linux and could be accessed with a serial connection. Well... how much easier it seems now with my TX-NR656 ssh to your amp with putty or any other ssh client logon with userid:  root     password:   morimori Some details: Onkyo TX-NR656 System Details Main Chipset TI AM335x ARM® Cortex®-A8-based core Wifi/BT chipset   RTL8821A   802.11ac, BT 4.0 Linux Version Linux am335x-opt 3.19.0 #1 Mon Sep 12 12:10:29 JST 2016 armv7l GNU/Linux Memory Total 249348 kB BusyBox details BusyBox v1.22.1 (2015-08-07 20:03:25 JST) [, [[, addgroup, adduser, ar, ash, awk, basename, bunzip2, bzcat, cat, chattr, chgrp, chmod, chown, chroot, chvt, clear, cmp, cp, cpio, cut, date, dc, dd, deallocvt, delgr...