Commit Graph

33 Commits

Author SHA1 Message Date
Cossid
b28723ae61 Add RTL8720CF support (#857)
* Initial RTL8720CF support

* Fix RTL8720CF_OTA file validation.

* be a bit more robust on chip string matching

* Really rough refactor of haxomatic for RTL8720CF, not complete.

* Update RTL8720CF 2.3.0 haxomatic hex match strings

* Remove length validation from authkey/uuid so it can work with both Tuya and CloudCutter generated keys.

* Fix bk7231 string detection
Add second RTL8720CF 2.3.0 profile

* Refactor haxomatic to be more modular and maintainable.

* haxomatic - minor cleanup

* profile-building - Pull PSK when pulling schema.

* Haxomatic - Search all binaries for patch patterns.
Update known RTL8720CF match pattern identifiers.

* Change network to custom 10.204.0.1/24 network (204 = 0xCC)
Send multiple DNS servers, which may help devices that hang after DHCP
Spend less time sending wifi connect requests so AP can start listening sooner.

* Update exploit for new offsets.

* Haxomatic - Add 1.0.x SDK

* Update haxomatic for newer found patterns.

* Minor tweaks

* Updates to profile-building

* Add storage parsing to extract_rtl8720cf

* Switch to bk7231tools to extract rtl8720cf storage to remove an unneeded dependency.

* remove debug code

* Add special case for sdk identification for single build missing standard string.

* Find swv before device_class, as we may want to search directly after it.

* Update comments, seek entire bin for storage.

* Add missing new address in profile.
Add ability to process inactive OTA app.

* Update documentation.

* fix typo.

* Fix a type in beken extract.

* Add haxomatic pattern for oddball BK7231N 2.3.1 SDK.

* Haxomatic - Add RTL8720CF 2.3.1 SDK pattern.

* Fix copy/paste typo

* profile-building - proceess_app - add more device class match strings.

* one more

* profile-building - better log SDK data

* Add a special thanks section.

* fix typo

* Clean up documentation.

* documentation - use numbered lists.

* process_app - add another device class identifier.
2025-11-25 17:18:58 -06:00
Kuba Szczodrzyński
0b3dbd5c62 Add video guides and flashing tools to README 2023-06-01 10:41:11 +02:00
Cossid
0e64fd7167 Add a link to known patched firmwares in the wiki now that they are becoming more common. 2023-05-11 13:54:13 -05:00
Cossid
7670477902 Fix punctuation in readme 2023-04-14 12:32:51 -05:00
Cossid
c4b505a500 Update FAQ description and move custom firmware info to FAQ 2023-04-14 12:31:24 -05:00
Cossid
f9aa160abe Add requirements with basic description to README.md 2023-02-13 18:01:49 -06:00
Cossid
d954fe1e66 Update README.md
Add FAQ link to wiki
2023-02-11 14:52:10 -06:00
Tom Clement
b833a6250d Update README.md 2022-12-27 20:18:57 +01:00
Kuba Szczodrzyński
36aa2dfae3 Update README.md 2022-12-02 14:23:09 +01:00
Cossid
1f82ad962e Update README.md
- remove outdated supported devices list.  This may be replaced in the future with api-generated device information.
- Update dumping instructions, remove link to hid_download_py which often produces incomplete dumps.  Add recommended bk7231tools command for correct size.  Update link to bk7231tools
- Add a note that new contributions should focus on the agnostic exploit chain.
- Update notes about schema generation as there is now a script to do this more easily.
2022-12-01 18:08:12 -06:00
Khaled Nassar
26b1a012d5 Update README.md 2022-05-23 13:53:34 +02:00
Khaled Nassar
8fd2fe8a85 Update README.md 2022-05-23 13:52:45 +02:00
Khaled Nassar
18d05342ba Update README.md 2022-05-23 13:50:33 +02:00
Moogle Troupe
43532fc0a9 Update README.md 2022-04-29 17:17:22 -04:00
Khaled Nassar
6959e4f213 Update README.md 2022-04-18 21:48:18 +02:00
Khaled Nassar
fa2b23fec0 Update README.md 2022-04-18 21:48:10 +02:00
Khaled Nassar
f19fdd97ca Update README.md 2022-04-17 14:04:50 +02:00
tony
3db8fadeba host specific changes 2022-04-12 14:10:14 -04:00
Khaled Nassar
abf83a351b Update README.md 2022-04-12 19:53:37 +02:00
Tom Clement
66392c05e8 Added links to readme 2022-04-08 17:34:13 +02:00
Khaled Nassar
9acf00bbb8 Add some sections to README 2022-04-06 12:00:41 +02:00
Khaled Nassar
97ebccd858 Add information regarding device flash dump risks 2022-04-05 19:20:00 +02:00
Khaled Nassar
68016e3ffd Add a statement about the schemas + device profiles to README 2022-04-04 14:23:32 +02:00
Khaled Nassar
d70429193d Change device profiles path in README 2022-04-03 10:15:45 +02:00
Khaled Nassar
8948184e77 Add an exploitability testing script and necessary disclaimers 2022-04-01 19:41:15 +02:00
Khaled Nassar
0543a58705 Reference PoC in README 2022-03-29 13:40:22 +02:00
Khaled Nassar
d2d5148187 Link to writeup and contribution in README 2022-03-29 13:37:48 +02:00
Khaled Nassar
e62855d490 Wording in README intro 2022-03-29 13:12:10 +02:00
Khaled Nassar
c4b307279f Add instructions, warning and separate device support list from README 2022-03-29 13:11:29 +02:00
Khaled Nassar
255f0065f3 Add unsupported article 970772 - not a bk7231 chip 2022-02-18 12:49:59 +01:00
Khaled Nassar
8a418f4f4d Update pictures and change wording 2022-02-18 09:52:06 +01:00
Tom Clement
95ef52b58f Typo 2022-02-17 23:13:52 +01:00
Tom
997f552b75 Added initial readme and list of devices that are supported so far 2022-02-17 23:12:44 +01:00