Giter VIP home page Giter VIP logo

dumlracer's Introduction

Yes it works on V01.040.0200

wrong No, you errogant ass, you are wrong. Go ahead brag about your years of drone experience, I only have two weeks with drones, and I seem to have no problem downgrading.

DUMLRacer

gogospeedracer

Downloads: https://github.com/CunningLogic/DUMLRacer/releases

I'm on twitter ! http://twitter.com/jcase

If you don’t agree to the terms in this read me, then stop dont clone, don’t read, don’t use. Don’t email me for support, open an issue if you have one.

I either need to recoup the cost of my Mavic, or sell it. If I can recoup it, I can keep hacking. If I can’t recoup it, I will be selling the drone, and I’ll be done giving the drone community goodies. Sucks, but I can’t really afford to be dropping money on this in the long term.

PayPal Donations - > [email protected]
Bitcoin Donations - > 1LrunXwPpknbgVYcBJyDk6eanxTBYnyRKN
Bitcoin Cash Donations - > 1LrunXwPpknbgVYcBJyDk6eanxTBYnyRKN
Amazon giftcards, plain thank yous or anything else -> [email protected]

Any donations in excess of the drone cost, will go to Special Olympics!

Donations: $857 out of $899+tax

Dear DJI, next time someone requests source code they are entitled to under the GPL, you shouldn’t tell them no. You should comply with the license you agreed to. Had you complied, or responded appropriately, this project would never have been public.

You do NOT have permission to re-host these files in any form. You do NOT have permission to use these files, or the intellectual property contained in them for commercial purposes without written permission from APIs Research LLC.

You do have permission to read, understand and learn from this (horrible) code.

This software comes with NO WARRANTY AT ALL. If it bricks your equipment, it is your fault not anyone else's. You agree to take full responsibility of any harm, damage, injury or loss of life from using your equipment improperly. Do not use this software to illegally modify your equipment. Do not redistribute this software. Do not use it in any commercial venture without first getting written permission from APIs Research LLC.

DUMLRacer is a race condition in the update system for DJI drones and remotes that run Android.

Usage:
    private static void printHelp() {
        System.out.println("java -jar DUMLRacer.jar <mode>");
        System.out.println("Modes:");
        System.out.println("AC - target AC");
        System.out.println("RC - target RC");
        System.out.println("GL - target GL");
    }
Change Log:
1.1.1:
	Google Support
1.1:
	Persistent root via adb
	Massive re-write
	More Reliable
1.0:
	Initial release

Copyright 2017/2018 APIs Research LLC 

Greetz/shouts/thank yous

@rotlogix - tied with a few others for best person in infosec

@hostile - wubba wubba thanks for encouraging me

@mywife - for not saying a damn word when you know I spent wayyyy to much money on a drone

@diff & @beaups for always hacking with me

@tylkologin @opcode @kilrah @kdover @hdnes @diff @jezzab @jan2642 @coldflake @hdnes @b1n4ry

@bunch of ppl i left off because i need a break from pc

#DeejayeyeHackingClub information repos aka "The OG's" (Original Gangsters)

http://dji.retroroms.info/ - "Wiki"

https://github.com/fvantienen/dji_rev - This repository contains tools for reverse engineering DJI product firmware images.

https://github.com/Bin4ry/deejayeye-modder - APK "tweaks" for settings & "mods" for additional / altered functionality

https://github.com/hdnes/pyduml - Assistant-less firmware pushes and DUMLHacks referred to as DUMBHerring when used with "fireworks.tar" from RedHerring. DJI silently changes Assistant? great... we will just stop using it.

https://github.com/MAVProxyUser/P0VsRedHerring - RedHerring, aka "July 4th Independence Day exploit", "FTPD directory transversal 0day", etc. (Requires Assistant). We all needed a public root exploit... why not burn some 0day?

https://github.com/MAVProxyUser/dji_system.bin - Current Archive of dji_system.bin files that compose firmware updates referenced by MD5 sum. These can be used to upgrade and downgrade, and root your I2, P4, Mavic, Spark, Goggles, and Mavic RC to your hearts content. (Use with pyduml or DUMLDore)

https://github.com/MAVProxyUser/firm_cache - Extracted contents of dji_system.bin, in the future will be used to mix and match pieces of firmware for custom upgrade files. This repo was previously private... it is now open.

https://github.com/MAVProxyUser/DUMLrub - Ruby port of PyDUML, and firmware cherry picking tool. Allows rolling of custom firmware images.

https://github.com/jezzab/DUMLdore - Even windows users need some love, so DUMLDore was created to help archive, and flash dji_system.bin files on windows platforms.

https://github.com/MAVProxyUser/DJI_ftpd_aes_unscramble - DJI has modified the GPL Busybox ftpd on Mavic, Spark, & Inspire 2 to include AES scrambling of downloaded files... this tool will reverse the scrambling

dumlracer's People

Contributors

45clouds avatar cunninglogic avatar konradit avatar mavproxyuser avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

dumlracer's Issues

Stuck at "Race 1 has started"

I tried to debug it.
The line below either returns an empty array, or one file element called "dummy".

FTPFile[] files = ftpClient.listFiles("/upgrade/upgrade/signimgs");

So the loop never ends. I waited like an hour.
What can be the issue?

I'm running macOS Mojave.

1.04.0300 released

can you made a new version to support this if you have time ,thank you

Brief elaboration on problem

Hi jcase, thank you very much for this SW.
Worked like a charm on MacOS and 01.04.0300 FW of Mavic Pro Platinum (Downgraded from 01.04.0500 first ;) )

I'm eager to know how this works in the first place, everyone is talking about a race in the update system.
What in particular are we racing against?
Why is there 2 races that must be won? Where does the privilege escalation take place?
Is there a problem with the DUML or its interpretation?
Is there a detailed Whitepaper on it or may you give me some pointers? Of course if you couldn't explain without getting too technical then still go ahead and I will still attempt to understand and possibly read up on Android internal workings.

Sincerely Yours,
Microwave89

Couldn't open port, exiting - bug?

It was my mistake to keep DUMLdore open in background, as you can see in log there's Couldn't open port, exiting though it didn't exited. Exploit was stuck at Race 1.
Used version: v1.1.1

Choose target port: (* suggested port)
        [1] COM3 : USB Serial Device (COM3)
        [E] Exit
Choose port: 1
Using Port: COM3
Couldn't open port, exiting
Sending upgrade command
Uploading payload 1
Exploiting
Race 1 has started

error timeout

I've tried to run
java -jar DUMLRacer.jar AC
with Windows 10 on my Mavic Pro with firmware 1.4.100 but I get this error:

AC Mode

Choose target port: (* suggested port)
[1] COM6 : USB Serial Device (COM6)
[E] Exit
Choose port: 1
Using Port: COM6
Sending upgrade command
Uploading payload 1
Exception in thread "main" java.net.ConnectException: Connection timed out: connect
at java.net.DualStackPlainSocketImpl.connect0(Native Method)
at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
at java.net.PlainSocketImpl.connect(Unknown Source)
at java.net.SocksSocketImpl.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at org.apache.commons.net.SocketClient._connect(SocketClient.java:243)
at org.apache.commons.net.SocketClient.connect(SocketClient.java:202)
at com.cunninglogic.dumlracer.Main.uploadFile(Main.java:343)
at com.cunninglogic.dumlracer.Main.main(Main.java:129)

tool hangs at second race

Thank you for this tool, amazing work. Seemed to work fine on a 1.04.0100 board I bought to fix a Mavic. Many people will be able to rollback from this firmware.

The issue i ran into is the tool hangs on the second race, but if you leave it long enough it finishes .. the tool just never responds back and appears to be hung on 'Starting the second race'. In my case the (files.length == 0) was true, but the tool never recognized it and was stuck.

I wonder if adding winner = true; to line 271 will fix it.

Is this were I get help for using DUMLRacer?

Good evening. I"m trying to use DUMLRacer.jar to downgrade my Mavic Pro Platinum to 1.04.0100 and its not working.
1st, thanks
2nd, I know "nothing" about coding, scrips, etc. I followed a youtube video, but didn't work.
https://www.youtube.com/watch?v=ywUUoYcPvt8

I have done everything through the DOS prompt, but get to:
Choose target Port.
[1] COM4 : USB Serial Device (COM4)
[E] Exit.
When I choose the port by entering 1, I get the following prompt:
Choose target port: (* suggested port)
[1] COM4 : USB Serial Device (COM4)
[E] Exit
Choose port: 1
Using Port: COM4
Couldn't open port, exiting
Sending upgrade command

What is going wrong with my comm port? Says Couldn't open port, exiting.
I have my Mavic plugged in via USB. It is recognized by assistant 2 v1.1.2 and 1.2.0
Under device manager, it shows a comport appearing when I plug in the Mavic:
USB Serial Device (COM4)

Device is working properly.
9600 bits per second
Driver: Microsoft 6/21/2006. V 10.0.16299.15

This is my 4th or 5th attempt with the same results.
On the first attempt I got through successfully, and it said completed. I then restarted my Mavic and tried to use DUMLdore 1.14 to go back to 1.04.0100
However, I get this popup and it only exits and never does anything.

Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.

Could not load file or assembly ‘WinSCPnet, Version=1.3.7.7601. Culture=neutral. PublicKey Token=2271ec4a3c56dbf’ or one of its dependencies. The system cannot find the file specified.exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.

Could not load file or assembly ‘WinSCPnet, Version=1.3.7.7601. Culture=neutral. PublicKey Token=2271ec4a3c56dbf’ or one of its dependencies. The system cannot find the file specified.

Any suggestions?
Thanks!!

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.