Linux Based Zsun WiFi Card Reader Has Been Hacked Too…

A little while ago, I purchased Zsun SD111 W-Fi USB flash drive, and after several tentatives, I finally found a way to access the device’s serial console. Since then the company announced another wireless storage device with Zsun Wi-Fi card reader, and Zoobab decided to try to hack it too. Since the device is pretty hard to open without damaging the enclosure, connecting the serial pin was not really an option, and the first exploit was to input shell commands in the web interface SSID field… For example, entering reboot there, would indeed reboot the device. However, this would still not allow full shell access, and finally after a broader port scan, it was found out that TCP port 11880 was open for telnet daemon. You can then access the shell as root with the same password as SD111: “zsun1188”. For some reasons, telnet can’t work with the device, and […]

Domino Core Wi-Fi Module Powers an Arduino Yun Compatible Board (Crowdfunding)

The makers of GL.iNet OpenWRT compatible router have decided to build a module and two development boards based on Qualcomm Atheros AR9331 WiSoC. Domino.IO is composed of a Domino Core Wi-Fi module that can be used in your own project, but if also part of Domino Pi, a breadboard-friendly board featuring the module, and Domino Qi mini, a similar board with an Atmel ATMEga32U MCU making it compatible with Arduino Yun board. Domino Core specifications: SoC – Qualcomm Atheros AR9331 MIPS processor @ 400MHz with System Memory – 64MB DDR3 Storage – 16MB flash Connectivity – 802.11 b/g/n Wi-Fi with u.FL connector I/Os via half through holes – USB 2.0 host/slave, 3x Ethernet, 29 IOs including UART, SPI, I2S, SLIC, etc… Dimensions – 41 x 25 x 3.8 mm Domino Pi and Qi mini summarized specifications are shown in the table below. Domino Pi Domino Qi Mini Wi-Fi Module Domino […]

RaidSonic Releases Firmware and Source Code for Atheros AR9331 Wi-Fi Audio Streamers

RaidSonic is a German company releasing products such as media players and multimedia accessories under their ICY BOX brand. One of those products is ICY Box IB-MP401Air music streaming received based on Atheros AR9331, and that looks very similar to SoundMate M2 I reviewed last year. But if you look on their product page, you’ll find out a few download links: ICY BOX IB-MP401Air  (multilang) – The Quick Start Guide and User’s manual in English and German IB-MP401Air (Source code) – a 648 MB rar file with source code for U-boot and OpenWRT IB-MP401Air (Firmware) – The firmware IB-MP401Air (Open Source Software) – Just the open source licenses So I’ve downloaded the source code file (IB-MP401Air_Sources_and%20License_Terms.rar) to have a look. It has two compressed files, one with the license, and IB-MP401Air_Sources.tar.gz with the source code.

The file showing how to build the firmware (OpenWRT) explains you should not use […]

Onion Omega is an Atheros AR9331 Wi-Fi Module Supporting Various Docks and Add-on Boards (Crowdfunding)

There are so many inexpensive Wi-Fi modules running Linux that it would be easy to discard Onion Omega as yet another Wi-Fi module based on Atheros AR9331 WiSoC. However, the developers have tried to bring some added value by making programming easier for web developers, integrating it with a cloud platform (free for non-commercial use), and providing basicor Arduino dock, and add-on boards for Ethernet, OLED, Relay… to make building hardware projects easier too. Let’s go through the hardware first, starting with the module specifications: SoC –  Atheros AR9331 400MHZ MIPS 24K System Memory – 64MB DDR2 400MHz Storage – 16MB Flash Connectivity – 10/100 Mbps Ethernet + 802.11b/g/n Wi-Fi up to 150Mbps with PCB antenna w/ uFL connector I/Os –  18 GPIOs USB – 1x USB 2.0 Power Supply – 3.3V; Typ. consumption: 0.6W Dimensions – 28.2mm x 52mm (1.1″ x 2.0″) Since this type of module is not […]

Zsun Wifi Card Reader Adds up to 64GB to Your Smartphone

I’ve previously covered Zsun SD11x USB flash drives with 8 to 128 GB internal flash, a battery, and Wi-Fi connectivity in order to easily add storage to devices without micro SD slots. The company has now launched a new Wi-Fi card reader to do the same, but with your own micro SD card instead allowing up to 64GB extra storage, and easy replacement. Zsun card reader specifications: SoC – Qualcomm Atheros AR9331 WiSoC System Memory – 256 Mbit RAM (32 MB) Storage – Internal flash for firmware (capacity TBD), micro SD slot up to 64GB Connectivity – 802.11 b/g/n Wi-Fi @ 150 Mbps USB – 1x USB 2.0 port for power and use as standard USB card reader Dimensions – 33 x 30 x 13 mm There’s no battery, so you’d have to connect the dongle to a power bank, PC, car charger etc.. to power it. If you connect […]

Black Swift is a Tiny OpenWRT Wi-Fi Board Powered by Atheros AR9331 (Crowdfunding)

In case you thought there were not enough Wi-Fi board in the market already, here’s another one with Black Swift. The board runs OpenWRT, is a little larger than Vocore, and quite smaller than WRTnode, is powered by Atheros AR9331, provides access to I/Os via headers, and comes with two micro USB ports which should make it easy to use, and allow some interesting applications with USB devices. Black Swift specifications: SoC – Qualcomm Atheros AR9331 32-bit MIPS 24K CPU core @ 400 MHz, or 200 MHz in energy-saving mode selectable by software System Memory – 64 MB DDR2 SDRAM Storage – 16 MB NOR flash Connectivity – 802.11 b/g/n Wi-Fi (1×1, up to 150 Mbps) with PCB antenna USB –  1 x microUSB for power, 1x microUSB 2.0 port Expansion –  Headers for 26x GPIO, 2x Fast Ethernet, SPI, I²C, 1x 16550 UART, 1x USB 2.0 Misc – Factory reset […]

Zsun SD111 Is Now “Officially” an Hackable Wireless Flash Drive

Zsun SD11x are Wi-Fi flash drives for 8 to 128 GB eMMC, alternative to Sandisk or Kingston. Yesterday, I soldered the UART pins to Zsun SD111 (8GB) flash drive to access the serial console, but I did not manage to enter the terminal as it was password-protected. I posted my results anyway, as I was convinced I would get some clever ideas from my readers, some of which appeared to be a little time consuming, but Zoobab offered a simple solution that consisted in changing the boot parameters, by replacing /sbin/init by /bin/sh. The first step is to interrupt the boot by pressing space or another key, in order to access U-boot. Now we can check the U-boot environment ar7240> printenv bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 rw init=/sbin/init mtdparts=ar7240-nor0:64k(u-boot),64k(u-boot-env),6720k(rootfs),1216k(uImage),64k(NVRAM),64k(ART) bootcmd=bootm 0x9f6B0000 bootdelay=4 baudrate=115200 ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee ipaddr=10.168.168.1 serverip=10.168.168.10 stdin=serial stdout=serial stderr=serial ethact=eth0 Environment size: 361/65532 bytes Let’s keep everything the same, except the init, […]

Zsun SD111 Wi-Fi Flash Drive Hacking Tentative

Two days ago, I reviewed Zsun SD111 a 8GB Wi-Fi flash drive based on Atheros AR9331, and I discovered the telnet port was open, but I could not access it because none of the standard username and password combinations (root/root, admin/admin, root/admin, etc…) would work, which is actually a good thing. However, as I opened the stick, the serial pins were clearly marked, so today I’ve soldered some Dupont wires to access the serial console. In order to open the stick, you need a rigid sharp object to push the top cover via the neck strap hole, as shown below, and another tool (mine looks similar to a scalpel) to help popping the cover up. Then I connected the three wires to a USB to TLL debug board, connected it to my PC, started minicom (115200 8N1), and pressed the power button. I could see U-Boot 1.1.4 message, so it […]