Noisebridge - User contributions [en]

File:Laser cutter class part 3 40.jpg

2016-12-18T22:35:48Z

H4X0R: H4X0R uploaded a new version of "File:Laser cutter class part 3 40.jpg"

PRTG

2016-12-18T05:14:23Z

H4X0R: bot alert #909

Some sort of wiki attacking malware/bot is running on machines presenting to teh interwebs as a PRTG NETWORK MONITOR. There are a number of these devices presumably using a windows exploit for access. They seem to be clustered in certain ranges of IP's such as the following.
 
They seem to be on a persistent mission to sell viagra and such boner pills, and they probably aren't doctors even!
 
<pre>
Starting Nmap 6.00 ( http://nmap.org ) at 2016-12-18 06:58 EET
NSE: Loaded 17 scripts for scanning.
Initiating SYN Stealth Scan at 06:58
Scanning systemip.example.com (91.200.12.74) [100 ports]
Discovered open port 445/tcp on 91.200.12.74
Discovered open port 80/tcp on 91.200.12.74
Discovered open port 49154/tcp on 91.200.12.74
Discovered open port 135/tcp on 91.200.12.74
Discovered open port 3389/tcp on 91.200.12.74
Completed SYN Stealth Scan at 06:58, 2.09s elapsed (100 total ports)
Initiating Service scan at 06:58
</pre>
 
✨

User:H4X0R

2016-12-18T04:00:52Z

H4X0R: ✨ #909

== ''Sorry nobodies home right now, plz leave ur msg in teh '''discussion''' tab.'' ==

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 06:45, 1 September 2016 (UTC)

Talk:Noisebridge

2016-10-12T00:03:04Z

H4X0R: Undo revision 54460 by 155.133.82.112 (talk)

== How a'boot some 5MoF? ==

Can a section be added to the front page that shows active projects and new wiki entries being developed? Perhaps based on a category tag?

== <h2>New stuffs</h2> ==
*Make circuit boards [[PCB_Etching_Tutorial]]
*DefCon group [[DC415]]
*Router hacking [[WRT]]
*Basic use of [[NTP]]
*Flexible etching
**http://www.insulectro.com/content_media/file/Dupont_FRclad_H-73233.pdf
**https://www.noisebridge.net/pipermail/noisebridge-discuss/2016-August/048114.html
**http://imgur.com/gallery/TbzsP
**https://www.adafruit.com/products/1894
**http://www.ebay.com/sch/items/?_nkw=pyralux&_sacat=&_ex_kw=&_mPrRngCbx=1&_udlo=&_udhi=&_sop=12&_fpos=&_fspt=1&_sadis=&LH_CAds=&rmvSB=true
*Kali linux (live usb)
**http://docs.kali.org/downloading/kali-linux-live-usb-install
**http://docs.kali.org/downloading/kali-linux-live-usb-persistence

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:10, 8 September 2016 (UTC)

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 02:19, 3 October 2016 (UTC)

[[User:Thex|thex]] ([[User talk:Thex|talk]]) 17:03, 11 October 2016 (UTC)

<center>空</center>

File:Circuit.jpg

2016-10-06T01:38:36Z

H4X0R: H4X0R uploaded a new version of "File:Circuit.jpg"

Talk:Noisebridge

2016-10-06T01:32:32Z

H4X0R: #040

== How a'boot some 5MoF? ==

Can a section be added to the front page that shows active projects and new wiki entries being developed? Perhaps based on a category tag?

== <h2>New stuffs</h2> ==
*Make circuit boards [[PCB_Etching_Tutorial]]
*DefCon group [[DC415]]
*Router hacking [[WRT]]
*Basic use of [[NTP]]
*Flexible etching
**http://www.insulectro.com/content_media/file/Dupont_FRclad_H-73233.pdf
**https://www.noisebridge.net/pipermail/noisebridge-discuss/2016-August/048114.html
**http://imgur.com/gallery/TbzsP
**https://www.adafruit.com/products/1894
**http://www.ebay.com/sch/items/?_nkw=pyralux&_sacat=&_ex_kw=&_mPrRngCbx=1&_udlo=&_udhi=&_sop=12&_fpos=&_fspt=1&_sadis=&LH_CAds=&rmvSB=true
*Kali linux (live usb)
**http://docs.kali.org/downloading/kali-linux-live-usb-install
**http://docs.kali.org/downloading/kali-linux-live-usb-persistence

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:10, 8 September 2016 (UTC)

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 02:19, 3 October 2016 (UTC)

<center>空</center>

Talk:Noisebridge

2016-10-03T02:20:30Z

H4X0R: < seizures

== How a'boot some 5MoF? ==

Can a section be added to the front page that shows active projects and new wiki entries being developed? Perhaps based on a category tag?

== <h2>New stuffs</h2> ==
*Make circuit boards [[PCB_Etching_Tutorial]]
*DefCon group [[DC415]]
*Router hacking [[WRT]]
*Basic use of [[NTP]]
*Flexible etching
**http://www.insulectro.com/content_media/file/Dupont_FRclad_H-73233.pdf
**https://www.noisebridge.net/pipermail/noisebridge-discuss/2016-August/048114.html
**http://imgur.com/gallery/TbzsP
**https://www.adafruit.com/products/1894
**http://www.ebay.com/sch/items/?_nkw=pyralux&_sacat=&_ex_kw=&_mPrRngCbx=1&_udlo=&_udhi=&_sop=12&_fpos=&_fspt=1&_sadis=&LH_CAds=&rmvSB=true
*Kali linux (live usb)
**http://docs.kali.org/downloading/kali-linux-live-usb-install
**http://docs.kali.org/downloading/kali-linux-live-usb-persistence

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:10, 8 September 2016 (UTC)

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 02:19, 3 October 2016 (UTC)

<center>空</center>

Talk:Noisebridge

2016-10-03T02:19:36Z

H4X0R: Undo revision 54149 by 185.3.135.42 (talk) #555

[[File:IPRC_Seized_2016_noisebridge.jpg]]
== How a'boot some 5MoF? ==

Can a section be added to the front page that shows active projects and new wiki entries being developed? Perhaps based on a category tag?

== <h2>New stuffs</h2> ==
*Make circuit boards [[PCB_Etching_Tutorial]]
*DefCon group [[DC415]]
*Router hacking [[WRT]]
*Basic use of [[NTP]]
*Flexible etching
**http://www.insulectro.com/content_media/file/Dupont_FRclad_H-73233.pdf
**https://www.noisebridge.net/pipermail/noisebridge-discuss/2016-August/048114.html
**http://imgur.com/gallery/TbzsP
**https://www.adafruit.com/products/1894
**http://www.ebay.com/sch/items/?_nkw=pyralux&_sacat=&_ex_kw=&_mPrRngCbx=1&_udlo=&_udhi=&_sop=12&_fpos=&_fspt=1&_sadis=&LH_CAds=&rmvSB=true
*Kali linux (live usb)
**http://docs.kali.org/downloading/kali-linux-live-usb-install
**http://docs.kali.org/downloading/kali-linux-live-usb-persistence

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:10, 8 September 2016 (UTC)

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 02:19, 3 October 2016 (UTC)

<center>空</center>

Vizio

2016-09-28T04:58:56Z

H4X0R: buzz, reset

Ground score hacking...

Service manual https://www.manualslib.com/download/913811/Vizio-Vx42l-Hdtv10a.html (no mention of service port)

This from explorations of a Vizio VW42L HDTV10A found on teh sidewalk.

The unit came with a power cord, when plugged in the vizio logo lights up amber, and then turns white when the power button is pressed. The screen remains dark however the backlight turns on within a couple of seconds. Also the optical audio link starts to glow red indicating some life. Otherwise the device seems to be non-functional, loose link/chip between CPU and LCD?

'''''CAUTION! The 120 AC mains connection is directly next to the service port, and leaning on it with a sweaty arm will result in a shock!'''''

There's a RJ-11 jack on the back that is labeled SERVICE. This appears to be a TTL Serial interface, with Pin 5 as Tx. Connecting Pin 5 and a ground with serial configured at 115,200 bps yields the following on power up.

<pre>
SYSPLL now is 324000000 Hz

DMPLL is set as 378.0 MHz
The memory is DDR-I 2 Chips
DQS 0 - (0 ~ 42) set 21[0x15 - 0x28](0xed)
DRAM is set as 32 bits
Set PSPLL to 148500000 Hz...
Set VPLL to 81000000 Hz...
Set ADCPLL to 81000000 Hz...
Set B2RPLL to 148352000 Hz...
Calibrate APLL1 to 270950400 Hz...
Calibrate APLL2 to 294912000 Hz...

MT5371 Boot Loader v0.2

Booting...
Decompression image to 0x02b00000...OK!
Image size: 5112656 bytes (0x02b00000 - 0x02fe034f)
Starting image...

Before IRRX State: 0
After IRRX State: 0
DRAM_CLK: 189000000
bApiTunerInitInUSA
ch1 calibration start
input offset calibration is 1
Transition point is 14
ch1 calibration is done
input offset calibration is 1
Transition point is 15

DTV>
</pre>

There is also a unpopulated spot for a tactile button, labeled SW1, just above the port on the pcb. Bridging the contacts (goes to ground) creates a reset and the boot loader runs without initializing the firmware image.

Vizio

2016-09-28T04:31:42Z

H4X0R: manual

Ground score hacking...

Service manual https://www.manualslib.com/download/913811/Vizio-Vx42l-Hdtv10a.html (no mention of service port)

This from explorations of a Vizio VW42L HDTV10A found on teh sidewalk.

The unit came with a power cord, when plugged in the vizio logo lights up amber, and then turns white when the power button is pressed. The screen remains dark however the backlight turns on within a couple of seconds. Also the optical audio link starts to glow red indicating some life. Otherwise the device seems to be non-functional, loose link/chip between CPU and LCD?

There's a RJ-12 jack on the back that is labeled SERVICE. This appears to be a TTL Serial interface, with Pin 5 as Tx. Connecting Pin 5 and a ground with serial configured at 115,200 bps yields the following on power up.

<pre>
SYSPLL now is 324000000 Hz

DMPLL is set as 378.0 MHz
The memory is DDR-I 2 Chips
DQS 0 - (0 ~ 42) set 21[0x15 - 0x28](0xed)
DRAM is set as 32 bits
Set PSPLL to 148500000 Hz...
Set VPLL to 81000000 Hz...
Set ADCPLL to 81000000 Hz...
Set B2RPLL to 148352000 Hz...
Calibrate APLL1 to 270950400 Hz...
Calibrate APLL2 to 294912000 Hz...

MT5371 Boot Loader v0.2

Booting...
Decompression image to 0x02b00000...OK!
Image size: 5112656 bytes (0x02b00000 - 0x02fe034f)
Starting image...

Before IRRX State: 0
After IRRX State: 0
DRAM_CLK: 189000000
bApiTunerInitInUSA
ch1 calibration start
input offset calibration is 1
Transition point is 14
ch1 calibration is done
input offset calibration is 1
Transition point is 15

DTV>
</pre>

Vizio

2016-09-28T04:17:43Z

H4X0R: tv hacking #050

Ground score hacking...

This from explorations of a Vizio VW42L HDTV10A found on teh sidewalk.

The unit came with a power cord, when plugged in the vizio logo lights up amber, and then turns white when the power button is pressed. The screen remains dark however the backlight turns on within a couple of seconds. Also the optical audio link starts to glow red indicating some life. Otherwise the device seems to be non-functional, loose link/chip between CPU and LCD?

There's a RJ-12 jack on the back that is labeled SERVICE. This appears to be a TTL Serial interface, with Pin 5 as Tx. Connecting Pin 5 and a ground with serial configured at 115,200 bps yields the following on power up.

<pre>
SYSPLL now is 324000000 Hz

DMPLL is set as 378.0 MHz
The memory is DDR-I 2 Chips
DQS 0 - (0 ~ 42) set 21[0x15 - 0x28](0xed)
DRAM is set as 32 bits
Set PSPLL to 148500000 Hz...
Set VPLL to 81000000 Hz...
Set ADCPLL to 81000000 Hz...
Set B2RPLL to 148352000 Hz...
Calibrate APLL1 to 270950400 Hz...
Calibrate APLL2 to 294912000 Hz...

MT5371 Boot Loader v0.2

Booting...
Decompression image to 0x02b00000...OK!
Image size: 5112656 bytes (0x02b00000 - 0x02fe034f)
Starting image...

Before IRRX State: 0
After IRRX State: 0
DRAM_CLK: 189000000
bApiTunerInitInUSA
ch1 calibration start
input offset calibration is 1
Transition point is 14
ch1 calibration is done
input offset calibration is 1
Transition point is 15

DTV>
</pre>

OpenSimulator

2016-09-14T22:11:12Z

H4X0R: #070

[[File:Noisebrdge-VR.jpg]]

http://opensimulator.org

See also:
*[[HyperSpace]]
*[[HyperGrid]]

Linux binary distro (requires <code>mono-complete</code>):
http://opensimulator.org/dist/opensim-0.8.2.1.tar.gz

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 22:11, 14 September 2016 (UTC)

User:Gnusosa

2016-09-14T19:17:11Z

H4X0R:

==Carlos Ivan Sosa==

http://gnusosa.net/

I'm aka gnusosa everywhere in the net, 
this include noisebridge irc channel, 
and other freenode channels. 

I'm a crazy mexican who writes code in
most popular languages. 
Hack on {arduino,atmel} kits. 
Rebuilt old computers. 
Hack on weird architectures like PegasusPPC or SPARC64. 

<pre>
code.lang
├── haskell
├── perl
├── python
├── ruby
└── scala
</pre>
<pre>
unix
├── debian
├── freebsd
├── gentoo
└── openbsd
</pre>

==Ongoing==

*Work with Noisebridge features and its APIs.
*NES/SNES/PSX-to-USB testing framework.
*Oscilloscope kit.
*XBee + LinuxLCD

==Semicomplete==

*Famiclone Controllers-to-parport.
*NES/SNES/PSX-to-parport testing framework.

==My .vimrc==
<pre style="overflow: auto; padding: .5em;">
colorscheme solarized
let g:solarized_termcolors=256
set background=dark
if has('gui_running')
set background=light
endif
set smartindent
set tabstop=4
set shiftwidth=4
set expandtab
set nocompatible
set autoindent
set showmatch
set guioptions-=T
set vb t_vb=
set ruler
set nohls
set incsearch
set virtualedit=all
autocmd FileType python set omnifunc=pythoncomplete#Complete
autocmd FileType javascript set omnifunc=javascriptcomplete#CompleteJS
autocmd FileType html set omnifunc=htmlcomplete#CompleteTags
autocmd FileType css set omnifunc=csscomplete#CompleteCSS
autocmd FileType xml set omnifunc=xmlcomplete#CompleteTags
autocmd FileType php set omnifunc=phpcomplete#CompletePHP
autocmd FileType perl set omnifunc=perlcomplete#CompletePerl
autocmd FileType c set omnifunc=ccomplete#Complete
set ft=on
set gfn=Menlo\ Regular:h15
syn on
setlocal spell spelllang=en_us
let g:netrw_ftp_cmd= 'ssh'
set number
filetype plugin on
filetype plugin indent on
set listchars=eol:$,tab:>-,trail:~,extends:>,precedes:<
set list
if has("gui_macvim")
" Fullscreen takes up entire screen
set fuoptions=maxhorz,maxvert
endif
set guioptions-=T
if has('gui_running')
autocmd VimEnter * NERDTree
autocmd VimEnter * wincmd p
endif
</pre>

==SSH PubKey==
<pre style="overflow: auto; padding: .5em;">
ssh-dss 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 gnusosa
</pre>

==adduser stanza==
<pre style="overflow: auto; padding: .5em;">
adduser -s /bin/bash -c 'Carlos Ivan Sosa' gnusosa
</pre>

User:Sharonahobbs

2016-09-14T17:13:14Z

H4X0R: Blanked the page

User:JimmyFMyers

2016-09-14T17:12:57Z

H4X0R: Blanked the page

Talk:Noisebridge

2016-09-14T17:12:38Z

H4X0R:

== How a'boot some 5MoF? ==

Can a section be added to the front page that shows active projects and new wiki entries being developed? Perhaps based on a category tag?

== <h2>New stuffs</h2> ==
*Make circuit boards [[PCB_Etching_Tutorial]]
*DefCon group [[DC415]]
*Router hacking [[WRT]]
*Basic use of [[NTP]]
*Flexible etching
**http://www.insulectro.com/content_media/file/Dupont_FRclad_H-73233.pdf
**https://www.noisebridge.net/pipermail/noisebridge-discuss/2016-August/048114.html
**http://imgur.com/gallery/TbzsP
**https://www.adafruit.com/products/1894
**http://www.ebay.com/sch/items/?_nkw=pyralux&_sacat=&_ex_kw=&_mPrRngCbx=1&_udlo=&_udhi=&_sop=12&_fpos=&_fspt=1&_sadis=&LH_CAds=&rmvSB=true
*Kali linux (live usb)
**http://docs.kali.org/downloading/kali-linux-live-usb-install
**http://docs.kali.org/downloading/kali-linux-live-usb-persistence

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:10, 8 September 2016 (UTC)

<center>空</center>

User talk:Scottcrney

2016-09-14T17:11:56Z

H4X0R: Blanked the page

User:Maaritmaarlee

2016-09-13T16:47:42Z

H4X0R: Blanked the page

User:KathyiBeadles

2016-09-13T16:46:54Z

H4X0R: Blanked the page

User:StephanieoMora

2016-09-13T16:46:31Z

H4X0R: Blanked the page

Talk:Kitchen

2016-09-12T18:32:04Z

H4X0R: Blanked the page

Talk:Noisebridge

2016-09-12T18:29:36Z

H4X0R: Undo revision 53942 by 37.130.227.133 (talk)

== How a'boot some 5MoF? ==

Can a section be added to the front page that shows active projects and new wiki entries being developed? Perhaps based on a category tag?

== <h2>New stuffs</h2> ==
*Make circuit boards [[PCB_Etching_Tutorial]]
*DefCon group [[DC415]]
*Router hacking [[WRT]]
*Basic use of [[NTP]]
*Flexible etching
**http://www.insulectro.com/content_media/file/Dupont_FRclad_H-73233.pdf
**https://www.noisebridge.net/pipermail/noisebridge-discuss/2016-August/048114.html
**http://imgur.com/gallery/TbzsP
**https://www.adafruit.com/products/1894
**http://www.ebay.com/sch/items/?_nkw=pyralux&_sacat=&_ex_kw=&_mPrRngCbx=1&_udlo=&_udhi=&_sop=12&_fpos=&_fspt=1&_sadis=&LH_CAds=&rmvSB=true
*Kali linux (live usb)
**http://docs.kali.org/downloading/kali-linux-live-usb-install
**http://docs.kali.org/downloading/kali-linux-live-usb-persistence

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:10, 8 September 2016 (UTC)

<center>空</center>

Talk:Noisebridge

2016-09-11T01:00:18Z

H4X0R: /* New stuffs */ kali #808

== How a'boot some 5MoF? ==

Can a section be added to the front page that shows active projects and new wiki entries being developed? Perhaps based on a category tag?

== <h2>New stuffs</h2> ==
*Make circuit boards [[PCB_Etching_Tutorial]]
*DefCon group [[DC415]]
*Router hacking [[WRT]]
*Basic use of [[NTP]]
*Flexible etching
**http://www.insulectro.com/content_media/file/Dupont_FRclad_H-73233.pdf
**https://www.noisebridge.net/pipermail/noisebridge-discuss/2016-August/048114.html
**http://imgur.com/gallery/TbzsP
**https://www.adafruit.com/products/1894
**http://www.ebay.com/sch/items/?_nkw=pyralux&_sacat=&_ex_kw=&_mPrRngCbx=1&_udlo=&_udhi=&_sop=12&_fpos=&_fspt=1&_sadis=&LH_CAds=&rmvSB=true
*Kali linux (live usb)
**http://docs.kali.org/downloading/kali-linux-live-usb-install
**http://docs.kali.org/downloading/kali-linux-live-usb-persistence

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:10, 8 September 2016 (UTC)

<center>空</center>

Talk:Noisebridge

2016-09-09T05:26:19Z

H4X0R: #088

== How a'boot some 5MoF? ==

Can a section be added to the front page that shows active projects and new wiki entries being developed? Perhaps based on a category tag?

== <h2>New stuffs</h2> ==
*Make circuit boards [[PCB_Etching_Tutorial]]
*DefCon group [[DC415]]
*Router hacking [[WRT]]
*Basic use of [[NTP]]
*Flexible etching
**http://www.insulectro.com/content_media/file/Dupont_FRclad_H-73233.pdf
**https://www.noisebridge.net/pipermail/noisebridge-discuss/2016-August/048114.html
**http://imgur.com/gallery/TbzsP
**https://www.adafruit.com/products/1894
**http://www.ebay.com/sch/items/?_nkw=pyralux&_sacat=&_ex_kw=&_mPrRngCbx=1&_udlo=&_udhi=&_sop=12&_fpos=&_fspt=1&_sadis=&LH_CAds=&rmvSB=true

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:10, 8 September 2016 (UTC)

<center>空</center>

Electronic Design Automation

2016-09-08T19:43:33Z

H4X0R:

Electronic Design Automation is commonly used to describe software for 3 major stops working with electronics hardware design and analysis:

The following options are a sample of Free Libre EDA packages:
* Schematic Capture
*# [http://geda-project.org gEDA]
*# [https://kicad-pcb.org kiCAD-EDA]
* Simulation and Analysis
*# [http://bwrcs.eecs.berkeley.edu/Classes/IcBook/SPICE/ SPICE]
*# [http://qucs.sourceforge.net/ qucs]
* Layout
*# [http://repo.hu/projects/pcb-rnd/ pcb-rnd]
*# [http://kicad-pcb.org/discover/pcbnew/ pcbnew](part of KiCAD)

Additional helper programs exist -- for digital design, simulation of specialized purpose, and more.

...add http://fritzing.org ?

DC415

2016-09-08T19:41:16Z

H4X0R: ascii in progress? #088

<center> == '''The ''DefCon'' 415 User Group San Francisco Bay area''' == </center>
<center>[[File:Dc415-logo.png]]</center>

<center>
__oooo00000ooooo__
oOOOOOOOOOOOOOOOOOOOo
oOOOOOOOOOOOOOOOOOOOOOOOOOOOo
oOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOo
oOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOo
oOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOo
oOOOOOOOOOOO\ /OOOOOOOOOOOO* *OOOOOOOOOOOOo
oOOOOOOOOOOO XX OOOOOOOOOO OOOOOOOOOOOOo
oOOOOOOOOOOOO/ \OOOOOOOOOOOOo oOOOOOOOOOOOOOo
oOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOo
oOOOO OOOOOOOOOOOOOOOOOOOOOOOOOOOOO OOOOo
oOOOOOO OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO OOOOOOo
*OOOOO OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO OOOOO*
*OOOOOO *OOOOOOOOOOOOOOOOOOOOOOOOOOO* OOOOOO*
*OOOOOO *OOOOOOOOOOOOOOOOOOOOOOOOO* OOOOOO*
*OOOOOOo *OOOOOOOOOOOOOOOOOOOOO* oOOOOOO*
*OOOOOOOo *OOOOOOOOOOOOOOO* oOOOOOOO*
*OOOOOOOOo *OOOOOOOOO* oOOOOOOOO*
*OOOOOOOOo oOOOOOOOO*
*OOOOOOOOOOOOOOOOOOO*
""ooooooo""
XXX XXX
XXXXX XXXXX
XXXXXXXXXXX XXXXXXXXXXXX
XX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XX
XXXXXXXXXXXXXXXXXXXXXXXXXXX
XX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XX
XXXXXXXXX XXXXXXXXXX
XXXXX XXXXX
XXX XXX 
00001101 00001100 00110100 00110001 00110101
</center>
----

We have form the DC415 group is 415 just because is the main city area code, but all bay area residents are invited to join.
We meet in noisebridge, see bellow for more info.
'''We meet two times a month, second and fourth Wednesday of the month at 7 PM/19:00 hours until you have to go or they kick us out.'''
'''For official events check:'''
[[https://www.meetup.com/es/defcon415/ Our meetup.com group]]

==== We are finally listed as an official DefCon Group for the 415 area code ====
'''Unfortunately''' ''we have to email again to update the info they have...''. lol

Everyone is welcome but now our topics are focus on hacking, this overlaps with infosec but we are a hacker group not a infosec group..
this means we do speak our minds and talk progressive politics and are focus on hacktivists and fixing the world we live on by the means of technology
and digital/electrical means.

We are a DefCon group but we are not limited to defcon, we participate in 2600/HOPE/CCC and Bsides conferences as well, you may see us on infosec conferences like RSA
but is not in our interests to support commercial and corporate conferences, this is one of the reasons we meet at NoiseBridge instead of some capitalist corporate office...

<pre>DC415

Location: San Francisco, California USA
Point of Contact: rek2
POC Email: cfernandez@linux.com
Backup Point of Contact: m113s
Backup POC Email: richard@cobalt.io
Website: https://noisebridge.net/wiki/DC415
DC415 Meets: Friday after work twice a month at Noisebridge
Languages: English, some members speak Spanish
Description: Hacking, computer security, Digital Rights, Privacy, Decentralization, Anarchism, etc.''</pre>

* come '''chat''' to our ''mattermost'' irc 2.0 server [https://chat.binaryfreedom.info/dc415 chat.binaryfreedom.info/dc415] and help with the organization of the group('''is invite only so email me for invite''')
* for info contact cfernandez [a] linux [dot] com

* on [https://freenode.net/ freenode] join channel #dc415 (there but not active, better if you join us on mattermost above)

== '''Agenda Items for 27/08/2016''' ==

*Presentations
**give a brief intro about what you like and give us one name(does not have to be your real name, any nick hacker name etc is ok just dont change it going forward lol)
**you do not have to give personal information, is your choice.
*Plan Defcon 2017
**Badge
**Suite
**who is going to be in charge of getting the money from us?
**calculate how much money each have to add to the jar each month to make this happen.
**etc
*Plan for CCC 12/2016
*implement [https://en.wikipedia.org/wiki/Direct_democracy Direct democracy by consensus] in the group?
**if so how does it works (i will try to bring some print outs for people new to it) but is like what we had in occupy, the 15-M movement and Anarchist groups in general click on the link above.
** see also [https://en.wikipedia.org/wiki/E-democracy EDD Electronic Direct democracy]
***''Some of the issues surrounding the related notion of a direct democracy using the Internet and other communications technologies are dealt with in e-democracy and below under the term electronic direct democracy. More concisely, the concept of open source governance applies principles of the free software movement to the governance of people, allowing the entire populace to participate''
*Meeting dates (Wednesday's every two weeks)- 7pm
**Decide if we want to move it or rotate it.. or something? taking into account Noisebridge days/schelule of course.. and then we should vote if there is a consensus to change.
*Projects (''projects need to involve at least 2 persons, if possible, people of different '''background''', '''ethnicity''', '''culture''' or '''gender''''')
**Searchable App/web to point out all city CCTV camaras where activist can check/update to assure privacy and freedom of speech without intimidation by circumventing the CCTV etc
**I2p documentation or app to make it easier for people to join the darknet
** have people donate old PC's and parts and get the working parts and create new PC's and give them to the community for cheap or free, loaded with Linux and non-proprietary tools.(we are not going to give up slavery software to people)
** your ideas!
** mo ideas

====Results of the Meetup 27/08/2016 ====

Amanda - will take responsibility in checking for defcon 2017 hotel cost etc. 
Rek2 - will take responsibility for checking into CCC costs 
We agreed by consensus to implement direct democracy decision making system to our group. 
We '''CHANGED''' our meetup days to Wednesdays, bi weekly... but we can meet every week in a non-official bases. 
There was interests in researching the CCTV project... 
----

== '''Agenda Items for 07/09/2016''' ==

*Presentations(please do not be late since this is a weekday not weekend anymore so people can't hang around as much)
**give a brief intro about what you like and give us one name(does not have to be your real name, any nick hacker name etc is ok just dont change it going forward lol) you do not have to give personal information, is your choice.
*ReK2 to report back with CCC 2016 research, hotel pricing, airtravel, etc.
** Do pertinent calculations, etc.
*Amanda to report back with DEFCON 2017 research, hote price, badges, etc
** calculate if Amanda has not yet, how much each we will have to pay for a suite, ´´´rek2´´´ advices to start collecting money monthly in January that we will have a better stand on how many people we are going to be in for sure.
* Any interest in toorcon? San Diego October http://sandiego.toorcon.net/event-registration/ 100$+ trip we could rent a car or van.
*Projects (''projects need to involve at least 2 persons, if possible, people of different '''background''', '''ethnicity''', '''culture''' or '''gender''''')
**Report back on CCTV app idea, supposedly we doing research on this. Depending on the results we will go ahead and work on this or not.
*Ideas for other Projects

----

Bsides SF..
SF non-stop 200$ to scandinavia. check that..

== Projects ==
* [http://xn--hackerol-i3a.net/ Hackerñol VideoShow]
* [https://hispagatos.org Hispagatos]
* [https://github.com/ChrisFernandez ReK2 github]
* [https://gitlab.com/u/rek2 ReK2 gitLab]
* [https://gitlab.com/groups/dc415 DC415 GitLab]
* [https://fotos.hispagatos.org Our group pics]

----

for events in the bay area visit:
* [https://www.reddit.com/r/hackbay/ HackBay]

=== related links of members and friends ===
* [http://binaryfreedom.info binaryfreedom]
* [http://anarcho-hacker.info anarchohacker-wiki]
* [https://www.reddit.com/r/anarcho_hackers anarcho-hackers-reddit]
* [https://www.reddit.com/r/HackBloc HacKBloc-reddit]
* [https://www.eff.org Electronic Frontier Foundation]
* [https://www.fsf.org Free Software Foundation]
* [http://www.hispagatos.org HispaGatos]
* [http://rubyfu.net RubyFu OpenBook, where Ruby goes evil!]

--[[User:Rek2|Rek2]] ([[User talk:Rek2|talk]]) 22:08, 23 August 2016 (UTC)

== DEF CON 24 ==

* MouseJack https://www.youtube.com/watch?v=00A36VABIA4
* MR. ROBOT (panel) https://www.youtube.com/watch?v=_bBrj6QBPW0
* Overthrow Government https://www.youtube.com/watch?v=m1lhGqNCZlA
* Hotel Hacking https://www.youtube.com/watch?v=mV_0k9Fh590

but wait, there's more... https://www.youtube.com/user/DEFCONConference

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:59, 8 September 2016 (UTC)

DC415

2016-09-08T18:59:41Z

H4X0R: XXIV #088

<center> == '''The ''DefCon'' 415 User Group San Francisco Bay area''' == </center>
<center>[[File:Dc415-logo.png]]</center>
----

We have form the DC415 group is 415 just because is the main city area code, but all bay area residents are invited to join.
We meet in noisebridge, see bellow for more info.
'''We meet two times a month, second and fourth Wednesday of the month at 7 PM/19:00 hours until you have to go or they kick us out.'''
'''For official events check:'''
[[https://www.meetup.com/es/defcon415/ Our meetup.com group]]

==== We are finally listed as an official DefCon Group for the 415 area code ====
'''Unfortunately''' ''we have to email again to update the info they have...''. lol

Everyone is welcome but now our topics are focus on hacking, this overlaps with infosec but we are a hacker group not a infosec group..
this means we do speak our minds and talk progressive politics and are focus on hacktivists and fixing the world we live on by the means of technology
and digital/electrical means.

We are a DefCon group but we are not limited to defcon, we participate in 2600/HOPE/CCC and Bsides conferences as well, you may see us on infosec conferences like RSA
but is not in our interests to support commercial and corporate conferences, this is one of the reasons we meet at NoiseBridge instead of some capitalist corporate office...

<pre>DC415

Location: San Francisco, California USA
Point of Contact: rek2
POC Email: cfernandez@linux.com
Backup Point of Contact: m113s
Backup POC Email: richard@cobalt.io
Website: https://noisebridge.net/wiki/DC415
DC415 Meets: Friday after work twice a month at Noisebridge
Languages: English, some members speak Spanish
Description: Hacking, computer security, Digital Rights, Privacy, Decentralization, Anarchism, etc.''</pre>

* come '''chat''' to our ''mattermost'' irc 2.0 server [https://chat.binaryfreedom.info/dc415 chat.binaryfreedom.info/dc415] and help with the organization of the group('''is invite only so email me for invite''')
* for info contact cfernandez [a] linux [dot] com

* on [https://freenode.net/ freenode] join channel #dc415 (there but not active, better if you join us on mattermost above)

== '''Agenda Items for 27/08/2016''' ==

*Presentations
**give a brief intro about what you like and give us one name(does not have to be your real name, any nick hacker name etc is ok just dont change it going forward lol)
**you do not have to give personal information, is your choice.
*Plan Defcon 2017
**Badge
**Suite
**who is going to be in charge of getting the money from us?
**calculate how much money each have to add to the jar each month to make this happen.
**etc
*Plan for CCC 12/2016
*implement [https://en.wikipedia.org/wiki/Direct_democracy Direct democracy by consensus] in the group?
**if so how does it works (i will try to bring some print outs for people new to it) but is like what we had in occupy, the 15-M movement and Anarchist groups in general click on the link above.
** see also [https://en.wikipedia.org/wiki/E-democracy EDD Electronic Direct democracy]
***''Some of the issues surrounding the related notion of a direct democracy using the Internet and other communications technologies are dealt with in e-democracy and below under the term electronic direct democracy. More concisely, the concept of open source governance applies principles of the free software movement to the governance of people, allowing the entire populace to participate''
*Meeting dates (Wednesday's every two weeks)- 7pm
**Decide if we want to move it or rotate it.. or something? taking into account Noisebridge days/schelule of course.. and then we should vote if there is a consensus to change.
*Projects (''projects need to involve at least 2 persons, if possible, people of different '''background''', '''ethnicity''', '''culture''' or '''gender''''')
**Searchable App/web to point out all city CCTV camaras where activist can check/update to assure privacy and freedom of speech without intimidation by circumventing the CCTV etc
**I2p documentation or app to make it easier for people to join the darknet
** have people donate old PC's and parts and get the working parts and create new PC's and give them to the community for cheap or free, loaded with Linux and non-proprietary tools.(we are not going to give up slavery software to people)
** your ideas!
** mo ideas

====Results of the Meetup 27/08/2016 ====

Amanda - will take responsibility in checking for defcon 2017 hotel cost etc. 
Rek2 - will take responsibility for checking into CCC costs 
We agreed by consensus to implement direct democracy decision making system to our group. 
We '''CHANGED''' our meetup days to Wednesdays, bi weekly... but we can meet every week in a non-official bases. 
There was interests in researching the CCTV project... 
----

== '''Agenda Items for 07/09/2016''' ==

*Presentations(please do not be late since this is a weekday not weekend anymore so people can't hang around as much)
**give a brief intro about what you like and give us one name(does not have to be your real name, any nick hacker name etc is ok just dont change it going forward lol) you do not have to give personal information, is your choice.
*ReK2 to report back with CCC 2016 research, hotel pricing, airtravel, etc.
** Do pertinent calculations, etc.
*Amanda to report back with DEFCON 2017 research, hote price, badges, etc
** calculate if Amanda has not yet, how much each we will have to pay for a suite, ´´´rek2´´´ advices to start collecting money monthly in January that we will have a better stand on how many people we are going to be in for sure.
* Any interest in toorcon? San Diego October http://sandiego.toorcon.net/event-registration/ 100$+ trip we could rent a car or van.
*Projects (''projects need to involve at least 2 persons, if possible, people of different '''background''', '''ethnicity''', '''culture''' or '''gender''''')
**Report back on CCTV app idea, supposedly we doing research on this. Depending on the results we will go ahead and work on this or not.
*Ideas for other Projects

----

Bsides SF..
SF non-stop 200$ to scandinavia. check that..

== Projects ==
* [http://xn--hackerol-i3a.net/ Hackerñol VideoShow]
* [https://hispagatos.org Hispagatos]
* [https://github.com/ChrisFernandez ReK2 github]
* [https://gitlab.com/u/rek2 ReK2 gitLab]
* [https://gitlab.com/groups/dc415 DC415 GitLab]
* [https://fotos.hispagatos.org Our group pics]

----

for events in the bay area visit:
* [https://www.reddit.com/r/hackbay/ HackBay]

=== related links of members and friends ===
* [http://binaryfreedom.info binaryfreedom]
* [http://anarcho-hacker.info anarchohacker-wiki]
* [https://www.reddit.com/r/anarcho_hackers anarcho-hackers-reddit]
* [https://www.reddit.com/r/HackBloc HacKBloc-reddit]
* [https://www.eff.org Electronic Frontier Foundation]
* [https://www.fsf.org Free Software Foundation]
* [http://www.hispagatos.org HispaGatos]
* [http://rubyfu.net RubyFu OpenBook, where Ruby goes evil!]

--[[User:Rek2|Rek2]] ([[User talk:Rek2|talk]]) 22:08, 23 August 2016 (UTC)

== DEF CON 24 ==

* MouseJack https://www.youtube.com/watch?v=00A36VABIA4
* MR. ROBOT (panel) https://www.youtube.com/watch?v=_bBrj6QBPW0
* Overthrow Government https://www.youtube.com/watch?v=m1lhGqNCZlA
* Hotel Hacking https://www.youtube.com/watch?v=mV_0k9Fh590

but wait, there's more... https://www.youtube.com/user/DEFCONConference

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:59, 8 September 2016 (UTC)

℔

2016-09-08T18:31:34Z

H4X0R: ...testing #088

'''#fort'''

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:31, 8 September 2016 (UTC)

''skip to teh orange 4 gold on to gr33n'' [[User:UNDO|UNDO]] ([[User talk:UNDO|talk]]) 20:34, 4 November 2014 (UTC)

[[User:UNDO|UNDO]] ([[User talk:UNDO|talk]]) 21:10, 13 November 2014 (UTC)

[[Special:Contributions/50.174.1.108|50.174.1.108]] 20:58, 19 November 2014 (UTC)

[[File:CHAOS.PNG]]

== New ==

[[WRT]]
 
[[NPT]]


== Contact ==
<big>510.900.9MAN</big>

freenode irc '''#fort'''

== Calendar ==
*
*
*
*
<s>
* March 20th, 2014 - 5moF
* March 7th, 2014 - 1st Friday (OAK)
* March 4th, 2014 - Noisebridge General Meeting
* February 28th, 2014 - http://www.vokusf.org/
* February 22nd, 2014 - God Waffle Pancakes
* February 21st, 2014 - https://sudoroom.org/ai1ec_event/spied-upon-bay-area-premiere-baps
* February 20th, 2014 - fmof http://5mof.net
</s>

== bridges ==

'''[[UNROOM]]'''

=== REBOOT ===

# hack into teh fort [[User:Thex|thex]] ([[User talk:Thex|talk]]) 00:34, 14 November 2014 (UTC)
#* scavenge a "master key"
#* use teh "fuzzy bunny"
#* pull a phillips outta box [[Special:Contributions/208.90.214.199|208.90.214.199]] 20:51, 4 November 2014 (UTC)
#* use hand cut "X" key
#* use teh gr33n towel [[User:Thex|thex]] ([[User talk:Thex|talk]]) 00:34, 14 November 2014 (UTC)
# turn the power off/on [[User:Thex|thex]] ([[User talk:Thex|talk]]) 00:34, 14 November 2014 (UTC)
#* works for teh elevator when stuck sometimes too [[User:UNDO|UNDO]] ([[User talk:UNDO|talk]])
# bring in teh trash canz [[User:UNDO|UNDO]] ([[User talk:UNDO|talk]]) 01:10, 12 November 2014 (UTC)
# release teh elevator [[User:Six26|Six26]] ([[User talk:Six26|talk]]) 17:59, 6 November 2014 (UTC)
# fire up puters [[User:Six26|Six26]] ([[User talk:Six26|talk]]) 17:59, 6 November 2014 (UTC)
# change passwords [[User:Six26|Six26]] ([[User talk:Six26|talk]]) 17:59, 6 November 2014 (UTC)
# make some espresso
# clean up kitchen
# sweep teh floorz
# test teh facilitaz
#* SHOWER [[User:Thex|thex]] ([[User talk:Thex|talk]]) 00:34, 14 November 2014 (UTC)
#* Bathroom #1
#* Bathroom #2
# eat something [[User:Thex|thex]] ([[User talk:Thex|talk]]) 00:34, 14 November 2014 (UTC)
# [https://noisebridge.net/index.php?title=Special:RecentChanges&limit=500 recent changes]
# go check on the owl [[User:Six26|Six26]] ([[User talk:Six26|talk]]) 17:59, 6 November 2014 (UTC)

HACK BABY HACK!!!

[[User:Six26|Six26]] ([[User talk:Six26|talk]]) 16:05, 31 October 2014 (UTC)

[[User:UNDO|UNDO]] ([[User talk:UNDO|talk]]) 01:10, 12 November 2014 (UTC)

=== ART ===

=== PRIVATE ===

=== PUBLIC ===

<pre>

___ _ _ ___ ___ ___
/ __| | || | / \ / _ \ / __|
| (__ | __ | | - | | (_) | \__ \
\___| |_||_| |_|_| \___/ |___/
_|"""""|_|"""""|_|"""""|_|"""""|_|"""""|
"`-0-0-'"`-0-0-'"`-0-0-'"`-0-0-'"`-0-0-'

</pre>

<big>https://noisebridge.net/wiki/CHAOS</big>

[[File:FortTent.jpg|600px]]

==Locations==
* 0 - REDACTED
* 1 - 2169 Mission
* 2 - TBD
* 3 - RockIT

See also:

https://noisebridge.net/wiki/Category:Events

https://sudoroom.org/calendar

== Setup ==
[[File:NoiseFortµ.jpeg|thumb]]

Base Footprint: 6'x6' (36²')

Table: 6'x30"

Chair

Bucket

Bag

==Projects==
[[File:NoiseT1nProtoOpen.jpeg|thumb]]
[[File:CompassBreadboard.jpg|thumb]]
[[File:Stroller.jpg|thumb]]
[[File:CorneliusCan20L.jpg|thumb]]
*[[WX]]
*[[GPS]]
*[[SDR]]
*[[Key_Milling]]
*[[Bridge]]
*[[Spacebridge]]
*[[Stroller]]
*[[NES]]
*[[Compass]]
*[[NoiseT1n]]
*[[RGBpixel]]
*[[Fortµ]]
*[[SudoMate]]
*Mobile Mesh
*Ambulance
*Hack Shack
*[[MarbleForce]]

==Links==
* [[Fort_Network]]
* [[Fort_Server]]
* [[Fort_Inventory]]

https://noisebridge.net/wiki/Talk:Light_Patterns_with_LEDs_and_Microcontrollers

[[ßêãµ]]

[[Phreaking]]

[[Knock]]

[[ChezHack]]

[[DC415]]

[[LASH]]

[[Unity]]

[[700e]]

Discussion Area:

...mobile unit, Fort Nite's, NOC

Communications
Data
Tent
Cooler
Candle
Power

Size/Weight

[[Category:Fort]]

Talk:Noisebridge

2016-09-08T18:10:40Z

H4X0R: new, new, new #088

How a'boot some 5MoF?

Can a section be added to the front page that shows active projects and new wiki entries being developed? Perhaps based on a category tag?

<h2> New stuffs</h2>
*Make circuit boards [[PCB_Etching_Tutorial]]
*DefCon group [[DC415]]
*Router hacking [[WRT]]
*Basic use of [[NTP]]

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 18:10, 8 September 2016 (UTC)

<center>空</center>

NTP

2016-09-08T18:02:50Z

H4X0R: some maths

<h1>Network Time Protocol</h1>
Port: 123

https://tools.ietf.org/pdf/rfc5905.pdf

https://en.wikipedia.org/wiki/Network_Time_Protocol

<h2>Generate NTP Query/Response with netcat</h2>


echo -ne '\xE3\x00\x06\xEC\x31\x4E\x31\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' | nc -xu time.nist.gov 123 
 
Sent 48 bytes to the socket 
00000000 E3 00 06 EC 31 4E 31 34 00 00 00 00 00 00 00 00 ....1N14........ 
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 
 
Received 48 bytes from the socket 
00000000 24 01 06 E3 00 00 00 00 00 00 00 00 41 43 54 53 $...........ACTS 
00000010 DB 7C 1C DC 4B E0 57 2D 00 00 00 00 00 00 00 00 .|..K.W-........ 
00000020 DB 7C 1C E4 49 93 89 E4 DB 7C 1C E4 49 94 47 B5 .|..I....|..I.G. 


The 4 bytes underlined indicate the actual time stamp data, starting in the response at index 40, and are in the form of a 32-bit value representing the number of seconds since January 1st 1900.

<pre>
Hex to Decimal:
0xDB = 219
0x7C = 124
0x1C = 28
0xE4 = 228

Binary equivalent:
11011011011111000001110011100100

Sum the 4 bytes in to one 32-bit value:
219 << 24 + 124 << 16 + 28 << 8 + 228 = 3674210304

Convert to epoch by subtracting 70 years worth of seconds:
epoch = 3682344164 - 2208988800

Extract the time:
hours = epoch % (24 * 60 * 60)
mins = epoch % (60 * 60)
secs = epoch % 60

The full time and date of the time stamp:
Thu, 08 Sep 2016 17:22:44 GMT
</pre>

NTP

2016-09-08T17:32:31Z

H4X0R: basics of time #088

WRT

2016-09-07T20:32:50Z

H4X0R: flash IT! #080

Teh WRT54G series launched in 2002 featuring a Broadcom BCM47xx 32-bit processor with 16MB RAM and a 4MB flash memory. The device functions as a router with wired 10/100 Mbps ethernet along with wireless 802.11bg. These devices continue to be a workhorse in WiFi everywhere and spawned several open source firmware projects. OpenWrt and dd-wrt both have their roots here. Almost as a trojan horse, they also brought about IoT in that the Broadcom chipset has since become the basis of the Raspberry Pi.

[[File:Linksys-Wireless-G-Router.jpg|700px]]

== OpenWrt ==

https://wiki.openwrt.org/toh/linksys/wrt54g

To "upgrade" from the command line with telnet, ssh or console access on a device already running busybox.

<pre>
cd /tmp/
wget http://downloads.openwrt.org/backfire/10.03.1/brcm47xx/openwrt-brcm47xx-squashfs.trx
mtd write /tmp/openwrt-brcm47xx-squashfs.trx
</pre>

To "recover" with default settings, boot into failsafe mode and run <code>firstboot</code> then restart.

https://en.wikipedia.org/wiki/Linksys_WRT54G_series

WRT

2016-09-07T20:05:44Z

H4X0R:

File:Linksys-Wireless-G-Router.jpg

2016-09-07T19:58:05Z

H4X0R: Public Domain image courtesy of Evan Amos

Public Domain image courtesy of Evan Amos

WRT

2016-09-07T19:56:03Z

H4X0R:

[File:Linksys-Wireless-G-Router.jpg|960px]

https://en.wikipedia.org/wiki/Linksys_WRT54G_series

https://wiki.openwrt.org/toh/linksys/wrt54g

WRT54G

2016-09-07T19:49:53Z

H4X0R: H4X0R moved page WRT54G to WRT

#REDIRECT [[WRT]]

WRT

2016-09-07T19:49:53Z

H4X0R: H4X0R moved page WRT54G to WRT

https://wiki.openwrt.org/toh/linksys/wrt54g

WRT

2016-09-07T19:49:41Z

H4X0R: #080 空

https://wiki.openwrt.org/toh/linksys/wrt54g

User:Maaritmaarlee

2016-09-02T21:57:00Z

H4X0R: blanked, bs spam

#009

RouterBOARD 133

2016-09-01T23:15:21Z

H4X0R: /* Configure boot */ no enter

See also: [[Sparky]]

==OpenWrt==

空

=== Flashing (kamikaze) ===

Setup dhcp and tftp on a computer you can connect to via wired ethernet

Download http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-vmlinux.elf to /srv/tftp/

sudo dnsmasq -i eth0 --dhcp-range=192.168.1.70,192.168.1.77 --dhcp-boot=openwrt-adm5120-2.6-vmlinux.elf --enable-tftp --tftp-root=/srv/tftp/ -d -u dnsmasq -p0 -K --log-dhcp --bootp-dynamic

Connect the RouterBOARD DB-9 serial to computer, and connect with 115200 8N1

Power up teh board

<pre>
RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
Memory size: 32 MB

Press any key within 2 seconds to enter setup
</pre>

'''''Press any key within 2 seconds'''''

<pre>
RouterBOOT-2.7
What do you want to configure?
d - boot delay
k - boot key
s - serial console
o - boot device
u - cpu mode
r - reset configuration
e - format nand
g - upgrade firmware
i - board info
p - boot protocol
t - do memory testing
x - exit setup
your choice:
</pre>

==== Configure boot ====

Press 'o' then '1' to set boot device to ethernet one time.

Press 'p' then '2' to use dhcp protocol.

==== Erase NAND ====

Press 'e' to erase/format nand memory. This will clear anything previously installed.

Type 'yes' enter, wait...

Press 'x', wait...

==== Install OpenWrt ====

<pre>
BusyBox v1.8.2 (2008-05-30 09:59:52 EEST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
KAMIKAZE (bleeding edge, r11293) -------------------
* 10 oz Vodka Shake well with ice and strain
* 10 oz Triple sec mixture into 10 shot glasses.
* 10 oz lime juice Salute!
---------------------------------------------------
root@OpenWrt:/#
</pre>

Teh SECRET sauce

<code>mount /dev/mtdblock2 /mnt; cd /mnt</code>

<code>wget http://yourserver/kernel</code>

<code>cd /; umount /mnt; mount /dev/mtdblock3 /mnt; cd /mnt</code>

<code>wget http://yourserver/openwrt-adm5120-2.6-rootfs.tgz</code>

<code>gzip -d openwrt-adm5120-2.6-rootfs.tgz; tar xvf openwrt-adm5120-2.6-rootfs.tar; rm openwrt-adm5120-2.6-rootfs.tar; cd /; umount /mnt; sync; reboot</code>

===Downloads===
*netboot image (stage 0)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-vmlinux.elf
*kernal (stage 1)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/kernel
*image (stage 1)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-rootfs.tgz
*packages (stage 2)
** https://web.archive.org/web/20090210193059/http://downloads.openwrt.org/kamikaze/packages/mipsel/
** http://wifi.ozo.com/airo/openwrt/packages/mipsel/

===References===
*http://rb1xx.ozo.com/doku.php
*https://wiki.openwrt.org/toh/mikrotik/common
*https://downloads.openwrt.org/kamikaze/docs/openwrt.html

==Meraki Flashed Versions==

Manual: http://www.routerboard.sk/files/pdf/rb133&133c_manual.pdf

Note: The following references boards that have a meraki flashed NAND.

===power===
The board has a non-standard PoE option, there is also a barrel connector that supports 9-28V DC tip positive supply

===www===
Connecting the first ethernet port (has PoE sticker) to a DHCP enabled network will allow access to some meraki web pages. Browse to the IP to see these pages.

*index.cgi
*advanced.html
*configure/index.cgi

Some pages are password protected. The username is 'admin' and the password is the serial number. The serial number can be obtained via the serial terminal using 'cat /MERAKI_SERIAL'

=== serial boot output ===

CuteCom was used to get the following via Serial Console http://cutecom.sourceforge.net/

<pre>
BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

http://meraki.com/

Welcome to your Meraki device. Please look for developer information at
http://meraki.com. We would like to encourage you to play with this
platform and add your own features to it. However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.

Like hacking on wireless stuff? Come work with us! jobs@meraki.com

Happy Hacking!
00:18:0A:00:F0:DC:/# help

Built-in commands:
-------------------
\0x09. : alias bg break cd chdir command continue eval exec exit export
\0x09false fg getopts hash help jobs kill let local pwd read readonly
\0x09return set shift times trap true type ulimit umask unalias unset
\0x09wait
</pre>

reboot command, followed by any key to enter setup
<pre>

00:18:0A:00:F0:DC:/# reboot
00:18:0A:00:F0:DC:/# adm5120_wdt_release: release

The system is going down NOW !!

Sending SIGTERM to all processes.

Sending SIGKILL to all processes.

Please stand by while rebooting the system.
Restarting s\0xf9

RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
Memory size: 32 MB

Press any key within 2 seconds to enter setup.

RouterBOOT-2.7
What do you want to configure?
d - boot delay
k - boot key
s - serial console
o - boot device
u - cpu mode
r - reset configuration
e - format nand
g - upgrade firmware
i - board info
p - boot protocol
t - do memory testing
x - exit setup
your choice:
</pre>

===more console out===

<pre>
RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
Memory size: 32 MB

Press any key within 2 seconds to enter setup..
loading kernel from nand... OK
setting up elf image... OK
jumping to kernel code
mem_detect: disable buffers for both banks
mem_detect: checking for 64MB chip in 1st bank
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA1000000 is 0x55555555
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA2000000 is 0x55555555
mem_detect: chip size in 1st bank is 64MB
mem_detect: enable buffers for both banks
mem_detect: 1x64MB memory found
<6>ADM5120 revision 8, running at 175MHz
<6>Boot loader is: RouterBOOT
<6>Booted from : NAND flash
<6>Board is : RouterBOARD 133
<6>Memory size : 32MB
done meminit
Linux version 2.6.16.16 (xyu@xyu-dev) (gcc version 3.4.6 (OpenWrt-2.0)) #14 Wed Sep 26 18:49:21 PDT 2007
ADM5120 board setup
CPU revision is: 0001800b
Determined physical RAM map:
memory: 013d1000 @ 00c2f000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 rootfstype=squashfs,yaffs2,jffs2 init=/etc/preinit
Primary instruction cache 8kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 8kB, 2-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 87.500 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 19960k/20292k available (2336k kernel code, 316k reserved, 447k data, 9544k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction... available.
unpacking initramfs....done
NET: Registered protocol family 16
adm5120: system has PCI BIOS
usbcore: registered new driver usbfs
usbcore: registered new driver hub
Algorithmics/MIPS FPU Emulator v1.5
PCI: slot number 0 is not supported
PCI: mapping irq for 0000:00:02.0 pin:1, irq:15
yaffs Sep 20 2007 18:44:25 Installing.
Initializing Cryptographic API
io scheduler noop registered
io scheduler anticipatory registered (default)
io scheduler deadline registered
io scheduler cfq registered
watchdog hb: 90 WDOG0: 0xa32806dd WDOG1: 0x7fff06de
adm5120_wdt_init using heartbeat 90 s cycles 9000
watchdog hb: 90 WDOG0: 0xa3280000 WDOG1: 0x7fff0000
ttyS0 at I/O 0x12600000 (irq = 9) is a ADM5120
ttyS1 at I/O 0x12800000 (irq = 10) is a ADM5120
eth0: ADM5120 switch port0
eth1: ADM5120 switch port1
eth2: ADM5120 switch port2
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
RB1xx nand
NAND device: Manufacturer ID: 0xad, Chip ID: 0x76 (Hynix NAND 64MiB 3,3V 8-bit)
Scanning device for bad blocks
Creating 4 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x00000000-0x00400000 : "/bootpart"
0x00400000-0x00800000 : "/storage"
0x00800000-0x00810000 : "paniclog"
0x00810000-0x04000000 : "extra"
usbmon: debugfs is not available
mice: PS/2 mouse device common for all mice
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
ip_conntrack version 2.4 (256 buckets, 2048 max) - 232 bytes per conntrack
ip_conntrack_pptp version 3.1 loaded
ip_nat_pptp version 3.0 loaded
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Bridge firewalling registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Freeing unused kernel memory: 9544k freed
init started: BusyBox v1.1.0 (2007.09.21-01:28+0000) multi-call binary

Please press Enter to activate this console. yaffs: dev is 32505856 name is "mtdblock0"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.0, "mtdblock0"
yaffs: auto selecting yaffs1
yaffs: dev is 32505857 name is "mtdblock1"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.1, "mtdblock1"
yaffs: auto selecting yaffs1
adm5120_wdt: starting watchdog w/timeout 90 seconds
watchdog hb: 90 WDOG0: 0xa328028c WDOG1: 0x7fff028c
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.18.0 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413, REGOPS_FUNC)
wlan: 0.8.4.2 (svn 10828)
ath_rate_sample: 1.2 (svn 10828)
ath_pci: 0.9.4.5 (svn 10828)
PCI: Enabling device 0000:00:02.0 (0000 -> 0002)
wifi0: 11a rates: 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: H/W encryption support: WEP AES AES_CCM TKIP
wifi0: mac 10.4 phy 6.1 radio 6.3
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
couldn't load module 'wlan_scan_sta' (-89)
unable to load wlan_scan_sta
wifi0: Atheros 5212: mem=0x11400000, irq=15
click: starting router thread pid 478 (818d3480)
wlan: mac acl policy registered

!!!!! reading /tmp/mtunnel_state failed: No such file or directory
couldn't load module 'wlan_scan_monitor' (-89)
unable to load wlan_scan_monitor

BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

http://meraki.com/

Welcome to your Meraki device. Please look for developer information at
http://meraki.com. We would like to encourage you to play with this
platform and add your own features to it. However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.

Like hacking on wireless stuff? Come work with us! jobs@meraki.com

Happy Hacking!
00:18:0A:00:F1:7C:/#
</pre>

Wiki page for RB133
http://wiki.openwrt.org/doku.php?id=oldwiki:openwrtdocs:hardware:mikrotik:rb100

RouterBOARD 133

2016-09-01T23:05:01Z

H4X0R: /* Flashing (kamikaze) */ e-e as in kernel

See also: [[Sparky]]

==OpenWrt==

空

=== Flashing (kamikaze) ===

Setup dhcp and tftp on a computer you can connect to via wired ethernet

Download http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-vmlinux.elf to /srv/tftp/

sudo dnsmasq -i eth0 --dhcp-range=192.168.1.70,192.168.1.77 --dhcp-boot=openwrt-adm5120-2.6-vmlinux.elf --enable-tftp --tftp-root=/srv/tftp/ -d -u dnsmasq -p0 -K --log-dhcp --bootp-dynamic

Connect the RouterBOARD DB-9 serial to computer, and connect with 115200 8N1

Power up teh board

<pre>
RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
Memory size: 32 MB

Press any key within 2 seconds to enter setup
</pre>

'''''Press any key within 2 seconds'''''

<pre>
RouterBOOT-2.7
What do you want to configure?
d - boot delay
k - boot key
s - serial console
o - boot device
u - cpu mode
r - reset configuration
e - format nand
g - upgrade firmware
i - board info
p - boot protocol
t - do memory testing
x - exit setup
your choice:
</pre>

==== Configure boot ====

Press 'o' enter, then '1' enter, to set boot device to ethernet one time.

Press 'p' enter, then '2' enter, to use dhcp protocol.

==== Erase NAND ====

Press 'e' to erase/format nand memory. This will clear anything previously installed.

Type 'yes' enter, wait...

Press 'x', wait...

==== Install OpenWrt ====

<pre>
BusyBox v1.8.2 (2008-05-30 09:59:52 EEST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
KAMIKAZE (bleeding edge, r11293) -------------------
* 10 oz Vodka Shake well with ice and strain
* 10 oz Triple sec mixture into 10 shot glasses.
* 10 oz lime juice Salute!
---------------------------------------------------
root@OpenWrt:/#
</pre>

Teh SECRET sauce

<code>mount /dev/mtdblock2 /mnt; cd /mnt</code>

<code>wget http://yourserver/kernel</code>

<code>cd /; umount /mnt; mount /dev/mtdblock3 /mnt; cd /mnt</code>

<code>wget http://yourserver/openwrt-adm5120-2.6-rootfs.tgz</code>

<code>gzip -d openwrt-adm5120-2.6-rootfs.tgz; tar xvf openwrt-adm5120-2.6-rootfs.tar; rm openwrt-adm5120-2.6-rootfs.tar; cd /; umount /mnt; sync; reboot</code>

===Downloads===
*netboot image (stage 0)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-vmlinux.elf
*kernal (stage 1)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/kernel
*image (stage 1)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-rootfs.tgz
*packages (stage 2)
** https://web.archive.org/web/20090210193059/http://downloads.openwrt.org/kamikaze/packages/mipsel/
** http://wifi.ozo.com/airo/openwrt/packages/mipsel/

===References===
*http://rb1xx.ozo.com/doku.php
*https://wiki.openwrt.org/toh/mikrotik/common
*https://downloads.openwrt.org/kamikaze/docs/openwrt.html

==Meraki Flashed Versions==

Manual: http://www.routerboard.sk/files/pdf/rb133&133c_manual.pdf

Note: The following references boards that have a meraki flashed NAND.

===power===
The board has a non-standard PoE option, there is also a barrel connector that supports 9-28V DC tip positive supply

===www===
Connecting the first ethernet port (has PoE sticker) to a DHCP enabled network will allow access to some meraki web pages. Browse to the IP to see these pages.

*index.cgi
*advanced.html
*configure/index.cgi

Some pages are password protected. The username is 'admin' and the password is the serial number. The serial number can be obtained via the serial terminal using 'cat /MERAKI_SERIAL'

=== serial boot output ===

CuteCom was used to get the following via Serial Console http://cutecom.sourceforge.net/

<pre>
BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

http://meraki.com/

Welcome to your Meraki device. Please look for developer information at
http://meraki.com. We would like to encourage you to play with this
platform and add your own features to it. However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.

Like hacking on wireless stuff? Come work with us! jobs@meraki.com

Happy Hacking!
00:18:0A:00:F0:DC:/# help

Built-in commands:
-------------------
\0x09. : alias bg break cd chdir command continue eval exec exit export
\0x09false fg getopts hash help jobs kill let local pwd read readonly
\0x09return set shift times trap true type ulimit umask unalias unset
\0x09wait
</pre>

reboot command, followed by any key to enter setup
<pre>

00:18:0A:00:F0:DC:/# reboot
00:18:0A:00:F0:DC:/# adm5120_wdt_release: release

The system is going down NOW !!

Sending SIGTERM to all processes.

Sending SIGKILL to all processes.

Please stand by while rebooting the system.
Restarting s\0xf9

RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
Memory size: 32 MB

Press any key within 2 seconds to enter setup.

RouterBOOT-2.7
What do you want to configure?
d - boot delay
k - boot key
s - serial console
o - boot device
u - cpu mode
r - reset configuration
e - format nand
g - upgrade firmware
i - board info
p - boot protocol
t - do memory testing
x - exit setup
your choice:
</pre>

===more console out===

<pre>
RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
Memory size: 32 MB

Press any key within 2 seconds to enter setup..
loading kernel from nand... OK
setting up elf image... OK
jumping to kernel code
mem_detect: disable buffers for both banks
mem_detect: checking for 64MB chip in 1st bank
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA1000000 is 0x55555555
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA2000000 is 0x55555555
mem_detect: chip size in 1st bank is 64MB
mem_detect: enable buffers for both banks
mem_detect: 1x64MB memory found
<6>ADM5120 revision 8, running at 175MHz
<6>Boot loader is: RouterBOOT
<6>Booted from : NAND flash
<6>Board is : RouterBOARD 133
<6>Memory size : 32MB
done meminit
Linux version 2.6.16.16 (xyu@xyu-dev) (gcc version 3.4.6 (OpenWrt-2.0)) #14 Wed Sep 26 18:49:21 PDT 2007
ADM5120 board setup
CPU revision is: 0001800b
Determined physical RAM map:
memory: 013d1000 @ 00c2f000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 rootfstype=squashfs,yaffs2,jffs2 init=/etc/preinit
Primary instruction cache 8kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 8kB, 2-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 87.500 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 19960k/20292k available (2336k kernel code, 316k reserved, 447k data, 9544k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction... available.
unpacking initramfs....done
NET: Registered protocol family 16
adm5120: system has PCI BIOS
usbcore: registered new driver usbfs
usbcore: registered new driver hub
Algorithmics/MIPS FPU Emulator v1.5
PCI: slot number 0 is not supported
PCI: mapping irq for 0000:00:02.0 pin:1, irq:15
yaffs Sep 20 2007 18:44:25 Installing.
Initializing Cryptographic API
io scheduler noop registered
io scheduler anticipatory registered (default)
io scheduler deadline registered
io scheduler cfq registered
watchdog hb: 90 WDOG0: 0xa32806dd WDOG1: 0x7fff06de
adm5120_wdt_init using heartbeat 90 s cycles 9000
watchdog hb: 90 WDOG0: 0xa3280000 WDOG1: 0x7fff0000
ttyS0 at I/O 0x12600000 (irq = 9) is a ADM5120
ttyS1 at I/O 0x12800000 (irq = 10) is a ADM5120
eth0: ADM5120 switch port0
eth1: ADM5120 switch port1
eth2: ADM5120 switch port2
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
RB1xx nand
NAND device: Manufacturer ID: 0xad, Chip ID: 0x76 (Hynix NAND 64MiB 3,3V 8-bit)
Scanning device for bad blocks
Creating 4 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x00000000-0x00400000 : "/bootpart"
0x00400000-0x00800000 : "/storage"
0x00800000-0x00810000 : "paniclog"
0x00810000-0x04000000 : "extra"
usbmon: debugfs is not available
mice: PS/2 mouse device common for all mice
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
ip_conntrack version 2.4 (256 buckets, 2048 max) - 232 bytes per conntrack
ip_conntrack_pptp version 3.1 loaded
ip_nat_pptp version 3.0 loaded
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Bridge firewalling registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Freeing unused kernel memory: 9544k freed
init started: BusyBox v1.1.0 (2007.09.21-01:28+0000) multi-call binary

Please press Enter to activate this console. yaffs: dev is 32505856 name is "mtdblock0"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.0, "mtdblock0"
yaffs: auto selecting yaffs1
yaffs: dev is 32505857 name is "mtdblock1"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.1, "mtdblock1"
yaffs: auto selecting yaffs1
adm5120_wdt: starting watchdog w/timeout 90 seconds
watchdog hb: 90 WDOG0: 0xa328028c WDOG1: 0x7fff028c
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.18.0 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413, REGOPS_FUNC)
wlan: 0.8.4.2 (svn 10828)
ath_rate_sample: 1.2 (svn 10828)
ath_pci: 0.9.4.5 (svn 10828)
PCI: Enabling device 0000:00:02.0 (0000 -> 0002)
wifi0: 11a rates: 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: H/W encryption support: WEP AES AES_CCM TKIP
wifi0: mac 10.4 phy 6.1 radio 6.3
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
couldn't load module 'wlan_scan_sta' (-89)
unable to load wlan_scan_sta
wifi0: Atheros 5212: mem=0x11400000, irq=15
click: starting router thread pid 478 (818d3480)
wlan: mac acl policy registered

!!!!! reading /tmp/mtunnel_state failed: No such file or directory
couldn't load module 'wlan_scan_monitor' (-89)
unable to load wlan_scan_monitor

BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

http://meraki.com/

Welcome to your Meraki device. Please look for developer information at
http://meraki.com. We would like to encourage you to play with this
platform and add your own features to it. However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.

Like hacking on wireless stuff? Come work with us! jobs@meraki.com

Happy Hacking!
00:18:0A:00:F1:7C:/#
</pre>

Wiki page for RB133
http://wiki.openwrt.org/doku.php?id=oldwiki:openwrtdocs:hardware:mikrotik:rb100

RouterBOARD 133

2016-09-01T22:50:12Z

H4X0R: /* OpenWRT */ #099

See also: [[Sparky]]

==OpenWrt==

空

=== Flashing (kamikaze) ===

Setup dhcp and tftp on a computer you can connect to via wired ethernet

Download http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-vmlinux.elf to /srv/tftp/

sudo dnsmasq -i eth0 --dhcp-range=192.168.1.70,192.168.1.77 --dhcp-boot=openwrt-adm5120-2.6-vmlinux.elf --enable-tftp --tftp-root=/srv/tftp/ -d -u dnsmasq -p0 -K --log-dhcp --bootp-dynamic

Connect the RouterBOARD DB-9 serial to computer, and connect with 115200 8N1

Power up teh board

<pre>
RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
Memory size: 32 MB

Press any key within 2 seconds to enter setup
</pre>

'''''Press any key within 2 seconds'''''

<pre>
RouterBOOT-2.7
What do you want to configure?
d - boot delay
k - boot key
s - serial console
o - boot device
u - cpu mode
r - reset configuration
e - format nand
g - upgrade firmware
i - board info
p - boot protocol
t - do memory testing
x - exit setup
your choice:
</pre>

==== Configure boot ====

Press 'o' enter, then '1' enter, to set boot device to ethernet one time.

Press 'p' enter, then '2' enter, to use dhcp protocol.

==== Erase NAND ====

Press 'e' to erase/format nand memory. This will clear anything previously installed.

Press 'x', wait...

==== Install OpenWrt ====

<pre>
BusyBox v1.8.2 (2008-05-30 09:59:52 EEST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
KAMIKAZE (bleeding edge, r11293) -------------------
* 10 oz Vodka Shake well with ice and strain
* 10 oz Triple sec mixture into 10 shot glasses.
* 10 oz lime juice Salute!
---------------------------------------------------
root@OpenWrt:/#
</pre>

Teh SECRET sauce

<code>mount /dev/mtdblock2 /mnt; cd /mnt</code>

<code>wget http://yourserver/kernal</code>

<code>cd /; umount /mnt; mount /dev/mtdblock3 /mnt; cd /mnt</code>

<code>wget http://yourserver/openwrt-adm5120-2.6-rootfs.tgz</code>

<code>gzip -d openwrt-adm5120-2.6-rootfs.tgz; tar xvf openwrt-adm5120-2.6-rootfs.tar; rm openwrt-adm5120-2.6-rootfs.tar; cd /; umount /mnt; sync; reboot</code>

===Downloads===
*netboot image (stage 0)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-vmlinux.elf
*kernal (stage 1)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/kernel
*image (stage 1)
**http://wifi.ozo.com/airo/openwrt/firmware/kamikaze/2.6/adm5120/latest/openwrt-adm5120-2.6-rootfs.tgz
*packages (stage 2)
** https://web.archive.org/web/20090210193059/http://downloads.openwrt.org/kamikaze/packages/mipsel/
** http://wifi.ozo.com/airo/openwrt/packages/mipsel/

===References===
*http://rb1xx.ozo.com/doku.php
*https://wiki.openwrt.org/toh/mikrotik/common
*https://downloads.openwrt.org/kamikaze/docs/openwrt.html

==Meraki Flashed Versions==

Manual: http://www.routerboard.sk/files/pdf/rb133&133c_manual.pdf

Note: The following references boards that have a meraki flashed NAND.

===power===
The board has a non-standard PoE option, there is also a barrel connector that supports 9-28V DC tip positive supply

===www===
Connecting the first ethernet port (has PoE sticker) to a DHCP enabled network will allow access to some meraki web pages. Browse to the IP to see these pages.

*index.cgi
*advanced.html
*configure/index.cgi

Some pages are password protected. The username is 'admin' and the password is the serial number. The serial number can be obtained via the serial terminal using 'cat /MERAKI_SERIAL'

=== serial boot output ===

CuteCom was used to get the following via Serial Console http://cutecom.sourceforge.net/

<pre>
BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

http://meraki.com/

Welcome to your Meraki device. Please look for developer information at
http://meraki.com. We would like to encourage you to play with this
platform and add your own features to it. However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.

Like hacking on wireless stuff? Come work with us! jobs@meraki.com

Happy Hacking!
00:18:0A:00:F0:DC:/# help

Built-in commands:
-------------------
\0x09. : alias bg break cd chdir command continue eval exec exit export
\0x09false fg getopts hash help jobs kill let local pwd read readonly
\0x09return set shift times trap true type ulimit umask unalias unset
\0x09wait
</pre>

reboot command, followed by any key to enter setup
<pre>

00:18:0A:00:F0:DC:/# reboot
00:18:0A:00:F0:DC:/# adm5120_wdt_release: release

The system is going down NOW !!

Sending SIGTERM to all processes.

Sending SIGKILL to all processes.

Please stand by while rebooting the system.
Restarting s\0xf9

RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
Memory size: 32 MB

Press any key within 2 seconds to enter setup.

RouterBOOT-2.7
What do you want to configure?
d - boot delay
k - boot key
s - serial console
o - boot device
u - cpu mode
r - reset configuration
e - format nand
g - upgrade firmware
i - board info
p - boot protocol
t - do memory testing
x - exit setup
your choice:
</pre>

===more console out===

<pre>
RouterBOOT booter 2.7

RouterBoard 133

CPU frequency: 175 MHz
Memory size: 32 MB

Press any key within 2 seconds to enter setup..
loading kernel from nand... OK
setting up elf image... OK
jumping to kernel code
mem_detect: disable buffers for both banks
mem_detect: checking for 64MB chip in 1st bank
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA1000000 is 0x55555555
mem_detect: write 0xAAAAAAAA to 0xA0000000
mem_detect: delay 10000 ns
mem_detect: pattern at 0xA2000000 is 0x55555555
mem_detect: chip size in 1st bank is 64MB
mem_detect: enable buffers for both banks
mem_detect: 1x64MB memory found
<6>ADM5120 revision 8, running at 175MHz
<6>Boot loader is: RouterBOOT
<6>Booted from : NAND flash
<6>Board is : RouterBOARD 133
<6>Memory size : 32MB
done meminit
Linux version 2.6.16.16 (xyu@xyu-dev) (gcc version 3.4.6 (OpenWrt-2.0)) #14 Wed Sep 26 18:49:21 PDT 2007
ADM5120 board setup
CPU revision is: 0001800b
Determined physical RAM map:
memory: 013d1000 @ 00c2f000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 rootfstype=squashfs,yaffs2,jffs2 init=/etc/preinit
Primary instruction cache 8kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 8kB, 2-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 87.500 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 19960k/20292k available (2336k kernel code, 316k reserved, 447k data, 9544k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction... available.
unpacking initramfs....done
NET: Registered protocol family 16
adm5120: system has PCI BIOS
usbcore: registered new driver usbfs
usbcore: registered new driver hub
Algorithmics/MIPS FPU Emulator v1.5
PCI: slot number 0 is not supported
PCI: mapping irq for 0000:00:02.0 pin:1, irq:15
yaffs Sep 20 2007 18:44:25 Installing.
Initializing Cryptographic API
io scheduler noop registered
io scheduler anticipatory registered (default)
io scheduler deadline registered
io scheduler cfq registered
watchdog hb: 90 WDOG0: 0xa32806dd WDOG1: 0x7fff06de
adm5120_wdt_init using heartbeat 90 s cycles 9000
watchdog hb: 90 WDOG0: 0xa3280000 WDOG1: 0x7fff0000
ttyS0 at I/O 0x12600000 (irq = 9) is a ADM5120
ttyS1 at I/O 0x12800000 (irq = 10) is a ADM5120
eth0: ADM5120 switch port0
eth1: ADM5120 switch port1
eth2: ADM5120 switch port2
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
RB1xx nand
NAND device: Manufacturer ID: 0xad, Chip ID: 0x76 (Hynix NAND 64MiB 3,3V 8-bit)
Scanning device for bad blocks
Creating 4 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x00000000-0x00400000 : "/bootpart"
0x00400000-0x00800000 : "/storage"
0x00800000-0x00810000 : "paniclog"
0x00810000-0x04000000 : "extra"
usbmon: debugfs is not available
mice: PS/2 mouse device common for all mice
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
ip_conntrack version 2.4 (256 buckets, 2048 max) - 232 bytes per conntrack
ip_conntrack_pptp version 3.1 loaded
ip_nat_pptp version 3.0 loaded
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Bridge firewalling registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Freeing unused kernel memory: 9544k freed
init started: BusyBox v1.1.0 (2007.09.21-01:28+0000) multi-call binary

Please press Enter to activate this console. yaffs: dev is 32505856 name is "mtdblock0"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.0, "mtdblock0"
yaffs: auto selecting yaffs1
yaffs: dev is 32505857 name is "mtdblock1"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.1, "mtdblock1"
yaffs: auto selecting yaffs1
adm5120_wdt: starting watchdog w/timeout 90 seconds
watchdog hb: 90 WDOG0: 0xa328028c WDOG1: 0x7fff028c
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.18.0 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413, REGOPS_FUNC)
wlan: 0.8.4.2 (svn 10828)
ath_rate_sample: 1.2 (svn 10828)
ath_pci: 0.9.4.5 (svn 10828)
PCI: Enabling device 0000:00:02.0 (0000 -> 0002)
wifi0: 11a rates: 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: H/W encryption support: WEP AES AES_CCM TKIP
wifi0: mac 10.4 phy 6.1 radio 6.3
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
couldn't load module 'wlan_scan_sta' (-89)
unable to load wlan_scan_sta
wifi0: Atheros 5212: mem=0x11400000, irq=15
click: starting router thread pid 478 (818d3480)
wlan: mac acl policy registered

!!!!! reading /tmp/mtunnel_state failed: No such file or directory
couldn't load module 'wlan_scan_monitor' (-89)
unable to load wlan_scan_monitor

BusyBox v1.1.0 (2007.09.21-01:28+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

http://meraki.com/

Welcome to your Meraki device. Please look for developer information at
http://meraki.com. We would like to encourage you to play with this
platform and add your own features to it. However, our lawyers
require us to tell you that much of the software on this device is
protected by copyrights, and may not be redistributed or sold.

Like hacking on wireless stuff? Come work with us! jobs@meraki.com

Happy Hacking!
00:18:0A:00:F1:7C:/#
</pre>

Wiki page for RB133
http://wiki.openwrt.org/doku.php?id=oldwiki:openwrtdocs:hardware:mikrotik:rb100

OpenWrt

2016-09-01T17:31:43Z

H4X0R: #099

== https://openwrt.org ==

'''see also: [[DC415]]'''

now w/100% more sparkly unicorn!

it's awesome you should try it!

[[File:OpenWrtBackfire.jpg|920px]]

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 17:31, 1 September 2016 (UTC)

File:OpenWrtBackfire.jpg

2016-09-01T17:28:43Z

H4X0R:

User:H4X0R

2016-09-01T06:45:17Z

H4X0R: 空

== ''Sorry nobodies home right now, plz leave ur msg in teh '''discussion''' tab.'' ==

[[File:Bora-chiles.jpg|960px]]

[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 06:45, 1 September 2016 (UTC)

File:Bora-chiles.jpg

2016-09-01T06:42:43Z

H4X0R:

ATM

2016-09-01T06:34:54Z

H4X0R: #099

Skimmer ALERT

heads up for a rise in well concealed skimmers on atm's.
[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 04:32, 1 September 2016 (UTC)

& in teh not skimmer related, can haz no password Admin creds...

[[File:ATM_PWN.jpg]]

File:ATM PWN.jpg

2016-09-01T06:30:38Z

H4X0R:

ATM

2016-09-01T04:32:02Z

H4X0R: #090

Skimmer ALERT

heads up for a rise in well concealed skimmers on atm's.
[[User:H4X0R|空]] ([[User talk:H4X0R|talk]]) 04:32, 1 September 2016 (UTC)