Wednesday, November 1, 2017

and about the rubber ducky, from yesterday (?) .

ARD Stick One is available from:
YARD Stick One (Yet Another Radio Dongle) can transmit or receive digital wireless signals at frequencies below 1 GHz. It uses the same radio circuit as the popular IM-Me. The radio functions that are possible by customizing IM-Me firmware are now at your fingertips when you attach YARD Stick One to a computer via USB.
Capabilities:
  • half-duplex transmit and receive
  • official operating frequencies: 300-348 MHz, 391-464 MHz, and 782-928 MHz
  • unofficial operating frequencies: 281-361 MHz, 378-481 MHz, and 749-962 MHz
  • modulations: ASK, OOK, GFSK, 2-FSK, 4-FSK, MSK
  • data rates up to 500 kbps
  • Full-Speed USB 2.0
(Official operating frequencies are guaranteed to work. Unofficial operating frequencies work in our experience.)
YARD Stick One comes with RfCat firmware installed, courtesy of atlas. RfCat allows you to control the wireless transceiver from an interactive Python shell or your own program running on your computer. YARD Stick One also has CC Bootloader installed, so you can upgrade RFCat or install your own firmware without any additional programming hardware. An antenna is not included. ANT500 is recommended as a starter antenna for YARD Stick One.
Originally based on the ToorCon 14 Badge design, YARD Stick One has several featured not previously seen in CC1111 platforms:
  • SMA connector for external antennas such as ANT500
  • receive amplifier for improved sensitivity
  • transmit amplifier for higher output power
  • strong RF performance across the entire operating frequency range
  • low pass filter for elimination of harmonics when operating in the 800 and 900 MHz bands
  • antenna port power control for compatibility with antenna port accessories designed for HackRF One
  • GoodFET-compatible expansion and programming header
  • GIMME-compatible programming test points

technical information

For documentation and open source design files, visit the project wiki.

getting help

For assistance with YARD Stick One and RfCat usage or development, please subscribe to the YARDStick mailing list. This is the preferred place to ask questions so that others may locate the answer to your question in the list archives in the future. Additionally, you may want to join us in the #rfcat IRC channel on freenod

aIR -Jumper: Covert Air-Gap Exfiltration/Infiltration via Security Cameras & Infrared (IR)

which is an App PandwaRF is a RF analysis tool with a sub-1 GHz wireless transceiver controlled by a smartphone or a PC. Its purpose is to capture, display & transmit RF data very easily. It can be connected to an Android smartphone using BLE or USB, and to Linux using USB. It is based on the well-known RfCat & Yard Stick One tools with the Texas Instruments CC1111 RF transceiver, but with a lot of new features, making PandwaRF the perfect portable RF analysis tool.

so here it is next deliever on the global market the wiced (the github code previouse posted) by Cypress, aqquired to Broadcom IoT ....for 550 million...(see next post)


my wild guess for the embebbed software is wiced-emw3165, for this electronic board we're talking about Support for various MCU host platforms- ST Microelectronics STM32F2xx (in this case STM32F7) the great about this is Wi-Fi & Bluetooth SmartBridge Features: Authenticate to Wi-Fi Access Points with the following security types: Open, WEP-40, WEP-104, WPA (AES & TKIP), WPA2 (AES, TKIP & Mixed mode)

The WICED SDK provides a full compliment of application level APIs, 
libraries and tools needed to design & implement secure embedded wireless
networking applications. 

Major features of the WICED SDK include ...
  - Low-footprint embedded Wi-Fi Driver with Client (STA), softAP and Wi-Fi Direct
  - Wi-Fi <-> Bluetooth SmartBridge 
  - Various RTOS/TCP stack options including
    - ThreadX/NetX (IPv4), ThreadX/NetX Duo (IPv6), FreeRTOS/LwIP (IPv4)
  - Support for various Broadcom Wi-Fi & combo chips
    - BCM4390 Integrated Apps + Wi-Fi SoC
    - BCM43909 Integrated Apps + Wi-Fi SoC
    - BCM43362 Wi-Fi SoC
    - BCM43364 Wi-Fi SoC
    - BCM43341 Wi-Fi SoC
    - BCM43438 Wi-Fi SoC
    - BCM43341 Wi-Fi + Bluetooth combo SoC
  - Support for various MCU host platforms
    - ST Microelectronics : STM32F2xx, STM32F4xx
    - Atmel : AT91SAM4S16B
    - Freescale : K61
    - NXP : LPC17xx, LPC18xx
  - RTOS & Network abstraction layer with a simple API for UDP, TCP, HTTP, HTTPS communications
  - SSL/TLS Security Library integrated with an HTTPS library for secure web transactions
  - WICED Application Framework including Bootloader, OTA Upgrade and Factory Reset
  - Automated Wi-Fi Easy Setup using one of several methods
    - SoftAP & Secure HTTP server
    - Wi-Fi Protected Setup
    - Apple Wireless Accessory Configuration (WAC) Protocol
  - Simple API to provide access to MCU peripherals including UART, SPI, I2C, Timers, RTC, ADCs, DACs, etc
  - Support for multiple toolchains including GNU and IAR
  - Support for Apple AirPlay and HomeKit
 
The WICED SDK release is structured as follows:
  apps          : Example & Test Applications
  doc           : API & Reference Documentation
  include       : WICED API, constants, and defaults 
  libraries     : Bluetooth, daemons, drivers, file systems, inputs, and protocols
  platforms     : Evaluation board support package, including Eval Board and Module Schematics
  resources     : Binary and text based objects including scripts, images, and certificates
  tools         : Build tools, compilers, debugger, makefiles, programming tools etc.
  tools/drivers : Drivers for WICED evaluation boards
  WICED         : WICED core components (RTOS, Network Stack, Wi-Fi Driver, Security & Platform libraries)
  WICED/WWD     : The WICED Wi-Fi Driver (equivalent to the Wiced directory in previous SDK-1.x releases) 
  README.txt    : This file
  CHANGELOG.txt : A log of changes for each SDK revision
 
to compile, download and run the Wi-Fi scan application on the Broadcom BCM943362WCD4 evaluation platform, 
enter the following text on a command line (a period character is used to reference applications 
in sub-directories) :
$> make snip.scan-BCM943362WCD4 download run

The default RTOS and Network Stack components are defined in the WICED configuration makefile  
at /tools/makefiles/wiced_config.mk. The default I/O bus component is defined in the platform
makefile at /platforms//.mk. Defaults may be bypassed by specifying the 
component as part of the build string if desired as shown in the following example.
$> make snip.scan-BCM943362WCD4-FreeRTOS-LwIP-SDIO download run
       
Source code, headers and reference information for supported platforms are available 
in the /platforms directory. Source code, headers, linker scripts etc that 
are common to all platforms are available in the /WICED/platform directory.


Supported Features
---------------------------------------------------------------------
Wi-Fi & Bluetooth SmartBridge Features
 * Scan and associate to Wi-Fi access points
 * Authenticate to Wi-Fi Access Points with the following security types:
   Open, WEP-40, WEP-104, WPA (AES & TKIP), WPA2 (AES, TKIP & Mixed mode)
 * AP mode with support for security types : Open, WPA, WPA2
 * Concurrent AP & STA mode (AP mode limited to 3 concurrent connected clients)
 * Wi-Fi Direct
 * WPS 1.0 & 2.0 Enrollee & Registrar (Internal Registrar only)
 * Wi-Fi APIs : Network keep alive, packet filters
 * Host <-> Wi-Fi SDIO & SPI interface
 * Bluetooth SmartBridge with multiple connections including the
   following features: Whitelist, Bond Storage, Attribute Caching, 
   GATT Procedures, Configurable Maximum Concurrent Connections, Directed 
   Advertisements, Device address initialisation, Passkey entry
 * Host <-> Wi-Fi via Memory to Memory DMA engine

Bluetooth Features
 * A2DP v1.2 (Advanced Audio Distribution Profile)
   - A2DP Sink Functionality
   - SBC Decoder
 * AVRCP (Audio/Video Remote Control Profile)
   - AVRCP Controller v1.0
   - AVRCP Target v1.4 (Absolute Volume)
 *  Handsfree profile (Handsfree role)
   - HFP v1.6
   - Accept/Reject/End incoming call
   - Outgoing call – Last number dial
   - Support for inband ringtone
   - Two-way calling
   - Caller-ID support
 * Man-Machine-Interface via buttons
   - AVRCP play/pause/Skip-forward/Skip-backward
   - A2DP Volume Up/Down
   - Connect to previously connected device
   - HFP Accept/Reject/End incoming call and Last number dial
 * SDAP (Service Discovery Application Profile)
 * GAP (Generic Access Profile)

RTOS & Network Stack Support
 * FreeRTOS / LwIP    (full source)
 * ThreadX  / NetX    (object file; free for use with WICED *ONLY*)
 * ThreadX  / NetXDuo (object file; free for use with WICED *ONLY*)

Networking Features (IPv4 & IPv6)
 * ICMP (Ping)
 * ARP
 * TCP
 * UDP 
 * IGMP (Multicast)
 * IPv6 NDP, Multicast
 * DHCP (Client & Server)
 * DNS (Client & Redirect Server)
 * mDNS/DNS-SD Zeroconf Network Discovery (Broadcom Gedday)
 * TLS1.0/1.1/1.2 (object file with host abstraction layer; free for use with WICED *ONLY*)
 * HTTP / HTTPS (Client & Server)
 * SNTP
 * SMTP

Application Features
 * Apple AirPlay (requires Apple authentication co-processor; available to Apple MFi licensees *ONLY*) 
 * Apple HomeKit (available to Apple MFi licensees *ONLY*)
 * Bluetooth Audio
 * Peripheral interfaces
   * GPIO
   * Timer / PWM
   * UART
   * SPI
   * I2C
   * RTC (Real Time Clock)
 * Xively "Internet of Things" protocol

* WICED Application Framework
   * Bootloader
   * Device Configuration Table (region in flash to store AP, security credentials, TLS certs, serial number, Wi-Fi country code, etc)
   * OTA upgrade
   * Factory reset
   * Automated configuration via softAP & webserver
   * Apple Wireless Accessory Configuration (WAC) protocol (available to Apple MFi licensees *ONLY*)
   * System Monitor to manage the watchdog

Toolchains
 * GNU make
 * IAR

Hardware Platforms
 BCM43362
   * BCM943362WCD4  : Broadcom WICED Module with STM32F205 MCU mounted on BCM9WCD1EVAL1
   * BCM943362WCD6  : Broadcom WICED Module with STM32F415 MCU mounted on BCM9WCD1EVAL1
   * BCM943362WCD8  : Broadcom WICED Module with Atmel SAM4S16B MCU mounted on BCM9WCD1EVAL1
   * BCM9WCDPLUS114 : WICED+ Eval Board (includes BCM43362+STM32F205 WICED+ Module and BCM20702 Bluetooth module)
   * BCM9WCD1AUDIO  : Broadcom WICED Audio Evaluation Board (includes BCM43362, STM32F415, WM8533 audio DAC, and BCM20702 Bluetooth module)
 BCM943364
   * BCM943364WCD1  : Broadcom WICED Module with STM32F215 MCU mounted on BCM9WCD1EVAL1
   * BCM943364WCDA  : Broadcom WICED Module with Atmel SAM4S16B MCU mounted on BCM9WCD1EVAL1
 BCM943341
   * BCM943341WCD1  : Broadcom BCM43341-based WICED Module with STM32F417 MCU mounted on BCM9WCD5EVAL1
 BCM4390
   * BCM94390WCD2   : Broadcom BCM4390 SiP-based WICED Module on BCM9WCD3EVAL1
 BCM43909
   * BCM943909WCD1  : Broadcom BCM43909 SiP-based WICED Module on BCM943909WCDEVAL_1
https://github.com/kamejoko80/wiced-emw3165

OK...I've been working...more than 45 minutes to get this , this micro tag NSA we're talking about Snowden , can be embebbed with wifi connection , audio, camera, flash, and so on...what I didn't get yet, is the software

Product description

1. MCU core board connector: for easily connecting the Core746I
2. Arduino interface: for connecting Arduino shields
3. DCMI interface: for connecting camera
4. 8-bit FMC interface: easily connects to peripherals such as NandFlash
5. ULPI interface: for connecting high-speed USB peripheral (the STM32F746I integrates USB HS controller without any PHY device) 
6. LCD interface 1: for connecting 10.1inch LCD, 7inch LCD
7. LCD interface 2: for connecting 4.3inch LCD
8. SAI1 interface: for connecting audio modules like UDA1380 module
9. ICSP interface: Arduino ICSP
10. SPI1/SPI2 interfaces: 
easily connects to SPI peripherals such as DataFlash (AT45DBxx, W25QXX), SD card, MP3 module, etc. 
easily connects to AD/DA modules (SPI1 features AD/DA alternative function) 
11. Ethernet interface: for connecting Ethernet modules
12. I2S2/I2S3/I2C1 interface: easily connects to I2S peripherals such as audio module, etc. 
13. USART1 connector: USB to UASRT via the onboard convertor CP2102 
14. QUADSPI interface: 4-wires SPI interface (the F7 series latest peripheral interface), for connecting serial Flash modules like W25QXX Board
15. SDMMC interface: for connecting Micro SD module, features much faster access speed rather than SPI
16. USART3 interface: easily connects to RS232, RS485, USB TO 232, etc. 
17. CAN2 interface: for connecting CAN modules
18. CAN1 interface: for connecting CAN modules
19. I2C1/I2C4 interface: easily connects to I2C peripherals such as I/O expander (PCF8574), EEPROM (AT24Cxx), 10 DOF IMU Sensor, etc. 
20. MCU pins connector: all the MCU I/O ports are accessible on expansion connectors for further expansion
21. 5V DC jack
22. 5V/3.3V power input/output: usually used as power output, also common-grounding with other user board

So, NSA gadgets hidden on coins, or currency ...