search

o-gs / dji-firmware-tools

Tools for handling firmwares of DJI products, with focus on quadcopters.
GNU General Public License v3.0
1.59k stars 427 forks source link

Actually I am trying to extract Flight Controller module from V01.00.5000 of Phantom 4 pro V2. #328

Open RudraSama opened 1 year ago

RudraSama commented 1 year ago

After extracting bin file I got multiple files. 2 to 3 files has Linux directories and one file named "wm335_0306xxxx.pro.fw.sig" has flight controller parameters I guess. After decrypting it with dji_imah_fwsig.py and 2017 key, it gives output as a bin file. But after analyzing it with binwalk and hex editor I can't really find what this file is and FC param are stored here. Please help.. (I am new to reverse engineering)

boredafthohaha commented 1 year ago

Has anybody dumped any of the FHSS stuff from the firmware? I’m looking for SDR related info for demod purposes.

RudraSama commented 1 year ago

Has anybody dumped any of the FHSS stuff from the firmware? I’m looking for SDR related info for demod purposes.

I guess there is no support for Phantom 4 pro V2 firmwares.

boredafthohaha commented 1 year ago

I’ve disassembled a few different firmware versions to get a clue as to how they implemented OFDM and FHSS in previous versions. I guess next step is buying one.

mefistotelis commented 1 year ago

Extracting WM335 is skipped in CI only because I made a typo in folder name. If you download firmwares, fix the name and then do:

mkdir -p out
pytest tests -rsx -o log_cli=true --log-cli-level=INFO --log-file=out/test-exec.log --junit-xml=out/test-junit.xml --full-scope -k 'wm335-phantom_4_pro_v2-1'

It will extract something. Though might need some fixes as due to the typo I ignored that in my local runs as well. (also, you'd need a key for some of the modules - PUEK-2017-11 is not public)