Hacking Build your own dongle (Research and development thread)

[jj56185]

another cool update:

https://twitter.com/i8br/status/998008595731091456

It comes out of the gate with openwrt, so "yes." Depending on how they did the firmware (is ehci-hcd.ko built into the kernel, or is it a loadable module?), you might need to build a custom firmware image that incorporates the FoF patch so that large control messages can be sent, or just build the ehci-hcd kernel module with the change and push it to the device, then either building and using the C implementation loader posted prior, or installing and using python and the ReSwitched FG injection script.

However, it appears to be externally powered, which is a mark against it. The chinese "3g /4g router 150m" comes in two variants- one that lacks a battery, and one that has a battery built in. The one with the built in battery has an on-switch. Since we only need it for what-- 10 seconds TOPS?-- we should be able to get a shitload of injections per charge. Given that we now have the ultra-compact C implementation of the injector, I have ordered one with the battery pack, and will build the needed flash package for it once my hardware arrives.

If you want to tinker with the mini smart router, go right ahead. The more options we have, the better off we all are.

That means my NETGEAR R6300 with LEDE may playload my switch too?

 

[jj56185]

Here we go, a FG implementation that only takes up ~10k with no dependencies: https://github.com/DavidBuchanan314/fusee-nano

Great! I use you code in a raspberry pi it work pretty good

 

[Gedi223]

I actually have one of these zsun adapters. never really used it, interested to see how this works out.

 

[Retr0id]

Can confirm that fusee-nano "Just works" on one of those £5 A5-V11 routers. I'll get instructions for building it into a LEDE image soon™

 

[TechDark]

this would be really great for the hekate cfw
but you could use a teensy 3.0 right?

 

[Retr0id]

Can confirm that fusee-nano "Just works" on one of those £5 A5-V11 routers. I'll get instructions for building it into a LEDE image soon™

https://github.com/DavidBuchanan314/fusee-lede

See the releases for some (slightly untested) ready-to-flash images.

 

[Deleted User]

https://github.com/DavidBuchanan314/fusee-lede

See the releases for some (slightly untested) ready-to-flash images.

Are there any devices on Amazon that are compatible with this ?

 

[Metion]

I have a NodeMCU/ESP8266, is it possible to use it as a dongle to send payloads?

 

[cherryduck]

https://github.com/DavidBuchanan314/fusee-lede

See the releases for some (slightly untested) ready-to-flash images.

Maybe I'm missing something but how do you plug this in to the Switch? The A5-V11 doesn't have a USB connection...

Actually, just noticed the micro USB connection on the side, I presume you use a micro USB to C cable?

 

[garyopa]

This is good tweet:

https://twitter.com/David3141593/status/998624304668520448

 

[Rainbowfied Pokemaster]

Maybe I'm missing something but how do you plug this in to the Switch? The A5-V11 doesn't have a USB connection...

Actually, just noticed the micro USB connection on the side, I presume you use a micro USB to C cable?

There is a USB connection opposite of the Ethernet

 

[Imancol]

So basically I can convert my TPLINK Wifi Adapter into a Dongle

 

[HamBone41801]

This is good tweet:

https://twitter.com/David3141593/status/998624304668520448

Have you found one? I can’t find anywhere that sells them.

 

[mariogamer]

https://github.com/DavidBuchanan314/fusee-lede

See the releases for some (slightly untested) ready-to-flash images.

Do you know if those thing charge themself?

 

[sweetlilmre]

Have you found one? I can’t find anywhere that sells them.

As per the twitter thread aliexpress sells them. Search for "mini 3g WiFi router" for the no battery version and "WiFi mobile 1800mah" for the one with a battery.

HTH
-(e)

 

[softwareengineer]

Have you found one? I can’t find anywhere that sells them.

Something to take note of though, that since they're so cheap you may want to get a couple or a few of them, because even ones sold by the same vendor could be different, some more limited than others from following the link on the twitter page:

"With its small size (62 mm x 24 mm x 14.5 mm) and its low price tag, it is certainly one of the smallest and cheapest router onto which you can install OpenWrt.

However, this router has some drawbacks: memory (both DRAM and Flash) is limited, and actual hardware and firmware can vary a lot, even when purchased from the same vendor.

Basically, a first device has been designed to fit into the given housing, based on the original Ralink RT5350F reference design, with the goal to make a 3G/4G 150M Wi-Fi router (don't be mistaken, 3G/4G is when you attach an external 3G/4G USB dongle to it!). The resulting PCB has been copied and is populated during "grey shifts" using whatever components are at hand, and sold unbranded on Aliexpress to make a small profit."

Further down:
"Be aware that these unbranded routers come with very different stock firmwares:

• Some have an U-Boot bootloader that accept standard OpenWrt images
• Some have a crippled U-Boot bootloader that only accept vendor-supplied modified images
• Some have a very limited Busybox shell available by telnet (login/password admin/admin)
• Some have a more complete Busybox shell but without any simple mean to fetch files from outside (wget, curl, ftp or tftp)
• Some have at least one way to fetch files from the command Shell
• Some have a Chinese / English or English-only WebUI, that may be unbranded or featuring the Qualcomm logo, even if this is a Mediatek / Ralink-based device!

Based on this sad situation, the best way to install OpenWrt on this router may vary. Even if you have similar devices with same packaging from same vendor, you may have to try successively several methods to find out which one actually works."

#2 bullet point sounds like the worst of it though, so getting multiple you should at least end up with 1 or 2 you can use easily!

 

[HamBone41801]

Something to take note of though, that since they're so cheap you may want to get a couple or a few of them, because even ones sold by the same vendor could be different, some more limited than others from following the link on the twitter page:

"With its small size (62 mm x 24 mm x 14.5 mm) and its low price tag, it is certainly one of the smallest and cheapest router onto which you can install OpenWrt.

However, this router has some drawbacks: memory (both DRAM and Flash) is limited, and actual hardware and firmware can vary a lot, even when purchased from the same vendor.

Basically, a first device has been designed to fit into the given housing, based on the original Ralink RT5350F reference design, with the goal to make a 3G/4G 150M Wi-Fi router (don't be mistaken, 3G/4G is when you attach an external 3G/4G USB dongle to it!). The resulting PCB has been copied and is populated during "grey shifts" using whatever components are at hand, and sold unbranded on Aliexpress to make a small profit."

Further down:
"Be aware that these unbranded routers come with very different stock firmwares:

• Some have an U-Boot bootloader that accept standard OpenWrt images
• Some have a crippled U-Boot bootloader that only accept vendor-supplied modified images
• Some have a very limited Busybox shell available by telnet (login/password admin/admin)
• Some have a more complete Busybox shell but without any simple mean to fetch files from outside (wget, curl, ftp or tftp)
• Some have at least one way to fetch files from the command Shell
• Some have a Chinese / English or English-only WebUI, that may be unbranded or featuring the Qualcomm logo, even if this is a Mediatek / Ralink-based device!

Based on this sad situation, the best way to install OpenWrt on this router may vary. Even if you have similar devices with same packaging from same vendor, you may have to try successively several methods to find out which one actually works."

#2 bullet point sounds like the worst of it though, so getting multiple you should at least end up with 1 or 2 you can use easily!

Ok! Thanks for the info! While those are cheap, if I’m going to have to buy more then one, I think I might as well use the Arietta. They have a guide on building the operating system from scratch. I do have one question though. Is it possible to reflash the firmware on those routers?

 

[mariogamer]

Ok! Thanks for the info! While those are cheap, if I’m going to have to buy more then one, I think I might as well use the Arietta. They have a guide on building the operating system from scratch. I do have one question though. Is it possible to reflash the firmware on those routers?

Can you add a link to it?

 

[HamBone41801]

Can you add a link to it?

https://www.acmesystems.it/arietta

I would also look at the others. They have a better form-factor, but their I/o isn’t as friendly.

 

[Don Jon]

Something to take note of though, that since they're so cheap you may want to get a couple or a few of them, because even ones sold by the same vendor could be different, some more limited than others from following the link on the twitter page:

"With its small size (62 mm x 24 mm x 14.5 mm) and its low price tag, it is certainly one of the smallest and cheapest router onto which you can install OpenWrt.

However, this router has some drawbacks: memory (both DRAM and Flash) is limited, and actual hardware and firmware can vary a lot, even when purchased from the same vendor.

Basically, a first device has been designed to fit into the given housing, based on the original Ralink RT5350F reference design, with the goal to make a 3G/4G 150M Wi-Fi router (don't be mistaken, 3G/4G is when you attach an external 3G/4G USB dongle to it!). The resulting PCB has been copied and is populated during "grey shifts" using whatever components are at hand, and sold unbranded on Aliexpress to make a small profit."

Further down:
"Be aware that these unbranded routers come with very different stock firmwares:

• Some have an U-Boot bootloader that accept standard OpenWrt images
• Some have a crippled U-Boot bootloader that only accept vendor-supplied modified images
• Some have a very limited Busybox shell available by telnet (login/password admin/admin)
• Some have a more complete Busybox shell but without any simple mean to fetch files from outside (wget, curl, ftp or tftp)
• Some have at least one way to fetch files from the command Shell
• Some have a Chinese / English or English-only WebUI, that may be unbranded or featuring the Qualcomm logo, even if this is a Mediatek / Ralink-based device!

Based on this sad situation, the best way to install OpenWrt on this router may vary. Even if you have similar devices with same packaging from same vendor, you may have to try successively several methods to find out which one actually works."

#2 bullet point sounds like the worst of it though, so getting multiple you should at least end up with 1 or 2 you can use easily!

did you hear that tiny soldering guy? you can still make money setting this dongles up and reselling them...