Posts

Onkyo TX-NR656 hacking - firmware decoding

Since writing my earlier post  about the TX-NR656 hacking Onkyo fixed the most blatant issue... open ssh port with known password. So the recent receivers cannot be super simple hacked as ssh is no longer available. Also the password has changed Still the Onkyo receivers are super leaky.... e.g. this URL will show you your configured wifi passwords... http://[your receiverip]:8080/..%2f..%2f..%2f..%2f..%2f..%2fmedia/settings/settings/network/profile While the web interface is still super leaky, I wanted to explore the filesystem in an easy way. For this I needed access to the file system in a simple way. This can be done by taking a firmware and mount the filesystem. The firmware can be downloaded from the Onkyo website. This file however can't be directly read. Decrypt the firmware  Compile  https://gist.github.com/marcelrv/4edcad9b63b34e1c30ac5758cc88ba9c Note: This is a fixed version from the original posted here http://divideoverflow.com/2014/04/decrypting-onkyo-...

Teardown & serial port on the Foscam C2

Afbeelding
As my Foscam camera died, I took it apart to see if I could somehow restore its working. As with these sort of devices, the first thing that breaks is typically the power circuit. In this case, the power unit still appeared to be delivering sufficient power... time to dig deeper and take the thing apart. See here some pictures of the device Note the brown coloring... seems the device gets bit hot during regular operations. This is the main PCB, in the right corner empty header. (Serial port) Main PCB Front Main PCB Back Networking PCB Wifi Antenna IR led Empty header detail On the main PCB there is some empty pins. When connecting a serial port, it spits out the linux boot output at 115200bps (at 3.3v): The booting process of my (broken) device:              ___  ___  _________                _             / _ \ |...

Onkyo TX-NR656 hacking

Afbeelding
Onkyo TX-NR656 Recently bought a  Onkyo TX-NR656   and obviously interested how I can integrate it in my Home Automation. Searching the internet I found this interesting link   where it was clear the amplifier was running Linux and could be accessed with a serial connection. Well... how much easier it seems now with my TX-NR656 ssh to your amp with putty or any other ssh client logon with userid:  root     password:   morimori Some details: Onkyo TX-NR656 System Details Main Chipset TI AM335x ARM® Cortex®-A8-based core Wifi/BT chipset   RTL8821A   802.11ac, BT 4.0 Linux Version Linux am335x-opt 3.19.0 #1 Mon Sep 12 12:10:29 JST 2016 armv7l GNU/Linux Memory Total 249348 kB BusyBox details BusyBox v1.22.1 (2015-08-07 20:03:25 JST) [, [[, addgroup, adduser, ar, ash, awk, basename, bunzip2, bzcat, cat, chattr, chgrp, chmod, chown, chroot, chvt, clear, cmp, cp, cpio, cut, date, dc, dd, deallocvt, delgr...