seemoo-lab · sonyvaiopocket · Jul 6, 2019 · Jul 7, 2019 · Jul 13, 2019 · Jul 13, 2019
diff --git a/CITATION.cff b/CITATION.cff
@@ -0,0 +1,29 @@
+cff-version: 1.2.0
+message: "If you use this software, please cite it as below."
+authors:
+  - given-names: Matthias
+    family-names: Schulz
+    email: [email protected]
+    affiliation: Secure Mobile Networking Lab
+  - given-names: Daniel
+    family-names: Wegemer
+    email: [email protected]
+    affiliation: Secure Mobile Networking Lab
+  - given-names: Matthias
+    family-names: Hollick
+    email: [email protected]
+    affiliation: Secure Mobile Networking Lab
+title: "Nexmon: The C-based Firmware Patching Framework"
+version: 2.2.2
+type: software
+date-released: 2017-09-29
+url: "https://github.com/seemoo-lab/nexmon"
+keywords:
+  - rpi
+  - framework
+  - firmware
+  - broadcom
+  - smartphone
+  - patching
+  - nexmon
+license: GPL-3.0
diff --git a/DEVICES.md b/DEVICES.md
@@ -0,0 +1,110 @@
+## BCM4325
+802.11abg + BT 2.1
+
+- Acer Liquid
+- Apple iPhone 3GS
+- Apple iPod 2G
+- Ford Edge (it’s a car)
+- HTC Droid Incredible
+- HTC Touch Pro 2
+- Motorola Devour
+- Samsung Spica
+
+## BCM4329
+802.11abgn MIMO 1x1 + BT 2.1
+
+- Apple iPad 2
+- Apple iPad 3G
+- Apple iPad Wi-Fi
+- Apple iPhone 4
+- Apple iPhone 4 Verizon
+- Apple iPod 3G
+- Apple Tv 2G
+- Asus Transformer Prime
+- HTC Droid Incredible 2
+- HTC Evo 4G
+- HTC Nexus One
+- HTC ThunderBolt
+- Kyocera Echo
+- LG Revolution
+- Malata ZPad
+- Motorola Atrix
+- Motorola Droid X2
+- Motorola Xoom
+- Nokia Lumina 800
+- Pantech Breakout
+- Samsung Fascinate
+- Samsung Galaxy S 4G
+- Samsung Galaxy Tab
+- Samsung Nexus S
+- Samsung Stratosphere
+- Sony Ericsson Xperia Play
+
+## BCM4330
+802.11abgn MIMO 1x1 + BT 4.0
+
+- Nexus 7 (2012)
+- Samsung Note 1
+- Samsung S2
+
+## BCM4335
+802.11abgn+ac MIMO 1x1 + BT 4.0
+
+- LG G2
+- HTC One (M7)
+- HTC One Mini
+- Samsung S4 (I9500)
+- Samsung S4 Intl (I9505)
+
+## BCM4339
+(4339a0) 802.11abgn+ac MIMO 1x1 + BT 4.1
+
+- LG G3
+- LG Nexus 5
+- Sony Experia Z2 sgp521 castor (Tablet)
+- Sony Xperia Z3 D6603
+
+## BCM4356
+802.11abgn+ac MIMO 2x2 + BT 4.1
+
+- Nexus 6
+- Sony Xperia Z5 E6653
+
+## BCM4358
+802.11abgn+ac MIMO 2x2 + BT 4.1
+
+- Huawei Nexus 6P
+- Samsung S6
+
+## BCM43596
+(bcm43596a0) 802.11abgn+ac MIMO 2x2 + BT 4.1
+
+- Samsung S7
+- Samsung S7 Edge
+
+## BCM43455
+(43455c0) 802.11abgn+ac MIMO 1x1 + BT 4.1
+
+- Huawei P9
+- LG G5
+
+```bash
+dmesg | grep -i dhd  # Broadcom chip
+```
+
+## WCN36xx (Qualcomm)
+
+- LG Nexus 4
+
+```bash
+dmesg | grep -i wcn  # WCNxxx chip (wcnss) Qualcomm
+```
+
+## QCA (Qualcomm Atheros)
+
+- Oneplus 3/3T
+
+```bash
+dmesg | grep -i cnss  # Qualcomm Atheros (QCA6174 etc)
+lspci -k   # 168c:003e cnss_wlan_pci  # Qualcomm Atheros
+```
diff --git a/README.md b/README.md
diff --git a/REVINFO.md b/REVINFO.md
@@ -1,4 +1,29 @@
-platform | firmware        | vendorid | deviceid | radiorev   | chipnum | chiprev | chippackage | corerev | boardid | boardvendor | boardrev | driverrev | ucoderev  | bus | phytype | phyrev | anarev | nvramrev
--------- | --------------- | -------- | -------- | ---------- | ------- | ------- | ----------- | ------- | ------- | ----------- | -------- | --------- | --------- | --- | ------- | ------ | ------ | --------
-Nexus 6P | 7_112_201_3_sta | 0x14e4   | 0x43e9   | 0x2e2069   | 0x4358  |     0x3 |         0x2 |    0x30 |   0x7a1 |      0x14e4 |     P100 | 0x770c903 | 0x3c3013d | 0x0 |     0xb |   0x11 |    0x0 |   500210
-Nexus 5  | 6_37_34_43      | 0x14e4   | 0x43ae   | 0x92069000 | 0x4339  |     0x1 |         0x2 |    0x2e |   0x6b6 |      0x14e4 |     P106 | 0x625222b | 0x3570411 | 0x0 |     0xb |    0x6 |    0x0 |        0
+platform                  | firmware           | vendorid | deviceid | radiorev   | chipnum | chiprev | chippackage | corerev | boardid | boardvendor | boardrev | driverrev | ucoderev   | bus | phytype | phyrev | anarev | nvramrev | phy_cap    |
+------------------------- | ------------------ | -------- | -------- | ---------- | ------- | ------- | ----------- | ------- | ------- | ----------- | -------- | --------- | ---------- | --- | ------- | ------ | ------ | -------- | ---------- |
+Galaxy S2 (GT-I9100)      | 5.90.100.41_sta    |   0x14e4 |   0x4360 |  0x2066000 |  0x4330 |     0x3 |         0x8 |    0x19 |   0x532 |      0x14e4 |      2.0 | 0x55a6429 |  0x2b90068 | 0x0 |     0x8 |    0x3 |    0x0 |      0x0 |            |
+Galaxy S4 (GT-I9505)      | 6.30.171.1_sta     |   0x14e4 |   0x43ae | 0x72069000 |  0x4335 |     0x1 |         0x0 |    0x2c |   0x64b |      0x14e4 |     P500 |   0x61eab |  0x32801b3 | 0x0 |     0xb |    0x5 |    0x0 |      0x0 |            |
+Nexus 5                   | 6_37_34_43         |   0x14e4 |   0x43ae | 0x92069000 |  0x4339 |     0x1 |         0x2 |    0x2e |   0x6b6 |      0x14e4 |     P106 | 0x625222b |  0x3570411 | 0x0 |     0xb |    0x6 |    0x0 |        0 |            |
+iPhone 6                  | 7.63.43.0          |   0x14e4 |   0x43ab |   0x44030b |  0x4345 |     0x5 |         0x0 |    0x33 |   0x70b |      0x14e4 |     P307 | 0x73f2b00 | 0x249f4e30 | 0x0 |     0xb |    0xd |    0x0 |  0x7d80c |            |
+Huawei P9                 | 7.45.77.0_hw       |   0x14e4 |   0x43ab |   0x58030b |  0x4345 |     0x6 |         0x2 |    0x36 |   0x6e4 |      0x14e4 |     P304 | 0x72d4d00 |  0x4130810 | 0x0 |     0xb |   0x14 |    0x0 |  0x79ac5 |            |
+Huawei P9                 |7_45_77_0_hw(8-2017)|   0x14e4 |   0x43ab |   0x58030b |  0x4345 |     0x6 |         0x2 |    0x36 |   0x6e4 |      0x14e4 |     P304 | 0x72d4d00 |  0x4130810 | 0x0 |     0xb |   0x14 |    0x0 |  0x79ac5 |            |
+Galaxy J7 2017 (SM-J730F) | 7.120.5.1_sta_c0   |   0x14e4 |   0x43ab |   0x58030b |  0x4345 |     0x6 |         0x2 |    0x36 |   0x6e4 |      0x14e4 |     P304 |   0x77805 |  0x4134fbe | 0x0 |     0xb |   0x14 |      ? |        ? |            |
+Raspberry Pi B3+          | 7.45.154           |   0x14e4 |   0x43ab |   0x58030b |  0x4345 |     0x6 |         0x2 |    0x36 |   0x726 |      0x14e4 |     P101 | 0x72d9a00 |  0x4130839 | 0x0 |     0xb |   0x14 |    0x0 |  0x79ac5 |            |
+Raspberry Pi B4           | 7.45.189           |   0x14e4 |   0x43ab |   0x58030b |  0x4345 |     0x6 |         0x2 |    0x36 |   0x726 |      0x14e4 |     P101 | 0x72dbd00 |  0x4130854 | 0x0 |     0xb |   0x14 |    0x0 |  0x79ac5 |            |
+Nexus 6 (XT1103)          | 7.35.101.5         |   0x14e4 |   0x43ec |   0x292069 |  0x4356 |     0x2 |         0x2 |    0x30 |   0x732 |      0x14e4 |     P101 | 0x7236505 |  0x3c3013c | 0x0 |     0xb |   0x11 |    0x0 |  0x5b2b4 |            |
+Nexus 6P                  | 7_112_201_3_sta    |   0x14e4 |   0x43e9 |   0x2e2069 |  0x4358 |     0x3 |         0x2 |    0x30 |   0x7a1 |      0x14e4 |     P100 | 0x770c903 |  0x3c3013d | 0x0 |     0xb |   0x11 |    0x0 |   500210 |            |
+Nexus 6P                  | 7_112_300_14_sta   |   0x14e4 |   0x43e9 |   0x2e2069 |  0x4358 |     0x3 |         0x2 |    0x30 |   0x7a1 |      0x14e4 |     P100 | 0x77012c0 |  0x3c3013d | 0x0 |     0xb |   0x11 |    0x0 |  0x7a1f2 |            |
+MacbookPro11,1            | 7.21.95.175.1a6    |   0x14e4 |   0x43a0 |    0x42069 |  0x4360 |     0x3 |         0x0 |    0x2a |   0x112 |      0x106b |     A420 | 0x7155faf |  0x3a9d897 | 0x1 |     0xb |    0x1 |    0x0 |        0 |            |
+iMac13,2                  | 7.21.171.130.1a1   |   0x14e4 |   0x43a0 |    0x42069 |  0x4360 |     0x3 |         0x0 |    0x2a |   0x135 |      0x106b |     A405 | 0x715ab82 |  0x3a9cd71 | 0x1 |     0xb |    0x1 |    0x0 |        0 |            |
+AP6112                    | 5.90.195.89.10     |   0x14e4 |   0x4343 |  0x2064000 |  0xa962 |     0x1 |         0x9 |    0x19 |   0x5a0 |      0x14e4 |     P202 | 0x55a7d5f |  0x2f50001 | 0x0 |     0x8 |    0x3 |    0x0 |      0x0 |            |
+Raspberry Pi 3            | 7.45.41.46         |   0x14e4 |   0x43e2 |   0x3da000 |  0xa9a6 |     0x1 |         0x4 |    0x27 |   0x726 |      0x14e4 |     P101 | 0x72d292e |  0x413080c | 0x0 |     0xc |    0x0 |    0x0 |      0x0 |            |
+Raspberry Pi Zero W2      | 9.88.4.65          |   0x14e4 |   0x43e2 | 0x403da000 |  0xa9a6 |     0x2 |         0x4 |    0x27 |   0x726 |      0x14e4 |     P101 | 0x9580000 |  0x4135105 | 0x0 |     0xc |    0x1 |    0x0 |      0x0 |            |
+Galaxy S7 (SM-G930T)      | 9.75.155.45_sta_C0 |   0x14e4 |   0x4415 |   0x1903eb |  0xaa4c |     0x0 |         0x0 |    0x3b |   0x7c5 |      0x14e4 |     P101 |   0x94b9b |  0x4240810 | 0x0 |     0xb |   0x18 |    0x0 |  0x7f9e9 |            |
+MacbookPro12,1            | 7.21.171.130.1a1   |   0x14e4 |   0x43ba |    0x72069 |  0xaa52 |     0x1 |         0x0 |    0x31 |   0x133 |      0x106b |     P318 | 0x715ab82 |  0x3a9cd71 | 0x1 |     0xb |   0x12 |    0x0 |        0 |            |
+MacBookPro13,2            | 7.21.171.130.1a1   |   0x14e4 |   0x43ba |    0xd2069 |  0xaa52 |     0x2 |         0x1 |    0x31 |   0x157 |      0x106b |     P108 | 0x715ab82 |  0x3a9cd71 | 0x1 |     0xb |   0x12 |    0x0 |        0 |            |
+ASUS RT-AC86U             |                    |   0x14e4 |   0x43c4 |   0x2103eb |  0xaa92 |     0x4 |         0x0 |    0x41 |   0x797 |      0x14e4 |     P102 | 0xa0a7a14 |        0x0 | 0x0 |     0xb |   0x21 |    0x0 |        0 | 0x00003e3f |
+ASUS RT-AC86U             |                    |   0x14e4 |   0x43c5 |   0x2103eb |  0xaa90 |     0x4 |         0x0 |    0x41 |   0x798 |      0x14e4 |     P102 | 0xa0a7a14 |        0x0 | 0x0 |     0xb |   0x21 |    0x0 |        0 | 0x00003ebf |
+unknown                   | 10.10.69.6908      |   0x14e4 |   0x43c3 |   0x2103eb |  0x4366 |     0x4 |         0x4 |    0x41 |  0x86fb |      0x1043 |     P143 | 0xa0a451a |  0x4310243 | 0x0 |     0xb |   0x21 |    0x0 |      0x0 |            |
+Galaxy S8 (SM-G950F)      | 13.38.55.1         |   0x14e4 |   0x441f |    0xa045a |  0x4361 |     0x3 |         0x0 |    0x3d |   0x837 |      0x14e4 |     P101 |       0x0 |  0x49d07e3 | 0x0 |     0xb |   0x28 |    0x0 |  0x7b9ab |            |
+Galaxy S10 (SM-G973F)     | 18.38.18           |   0x14e4 |   0x4470 |    0xa05fb |  0x4375 |     0x5 |         0x0 |    0x52 |   0x88f |      0x14e4 |     P300 |       0x0 |  0x5a0abe0 | 0x0 |     0xb |   0x2c |    0x0 |  0xc16d1 | 0x0002363d |
+Galaxy S20 (SM-G980F)     | 18.41.8.9          |   0x14e4 |   0x4470 |    0xa05fb |  0x4375 |     0x5 |         0x0 |    0x52 |   0x88f |      0x14e4 |     P300 |       0x0 |  0x5a02710 | 0x0 |     0xb |   0x2c |    0x0 |  0xc202a |            |
+unknown                   | 18.35.387.11       |   0x14e4 |   0x449d |    0x150df |  0xaae8 |     0x2 |         0x4 |    0x52 |   0x8ed |      0x14e4 |     P213 |       0x0 |  0x5a02710 | 0x0 |     0xb |   0x2c |    0x0 |  0xce112 |            |
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,2 @@
+# Reporting security issues
+Please contact us via **[[email protected]](mailto:[email protected])** to report suspected security vulnerabilities.
diff --git a/STATISTICS.md b/STATISTICS.md
@@ -0,0 +1,20 @@
+![NexMon logo](https://github.com/seemoo-lab/nexmon/raw/master/gfx/nexmon.png)
+
+# What kind of statistics do you collect?
+
+Everytime you run a Nexmon firmware build, we collect the following information:
+* A unique identifier based on a random number (e.g., 5O31UY9Z5IEX3O9KL680V5IHNASIE1SB)
+* The name, release, machine and processor of your build system (`uname -srmp`, e.g., `Linux 4.2.0-42-generic x86_64 x86_64`)
+* Git internal path to the built project (e.g., `patches/bcm4339/6_37_34_43/nexmon/`)
+* Git version (e.g., `2.2.1-55-g3684a80c-dirty`)
+* Git repository URL (e.g., `[email protected]:seemoo-lab/wisec2017_nexmon_jammer.git`)
+
+# Why do you collect statistics?
+
+Nexmon is mainly intended as a research project that we share with the community so that others can benefit from our tools.
+We want to collect statistics to figure out how often Nexmon is used in general and which platform and firmware version is the most popular.
+We also intent to share our findings in the future.
+
+# How do I disable the collection of statistics?
+
+If you have privacy concerns, we also offer to opt-out of the statistic collections. To this end, you simply have to create a `DISABLE_STATISTICS` file in your Nexmon root directory.
diff --git a/app/app/build.gradle b/app/app/build.gradle
@@ -75,10 +75,8 @@ dependencies {
     compile files('libs/RootTools.jar')
     compile 'com.android.support:support-v4:23.4.0'
     compile 'com.google.code.gson:gson:2.7'
+    compile 'eu.chainfire:libsuperuser:1.0.0.+'
     compile 'com.github.johnkil.print:print:1.3.1'
     compile 'com.nononsenseapps:filepicker:3.1.0'
     compile 'com.android.support:recyclerview-v7:23.4.0'
-    compile 'com.google.android.gms:play-services-analytics:9.2.0'
 }
-
-apply plugin: 'com.google.gms.google-services'
diff --git a/app/app/google-services.json b/app/app/google-services.json
diff --git a/app/app/src/main/AndroidManifest.xml b/app/app/src/main/AndroidManifest.xml
@@ -70,19 +70,5 @@
                 <action android:name="de.tu_darmstadt.seemoo.nexmon.ATTACK_INSTANCES" />
             </intent-filter>
         </receiver>
-
-        <!-- Register AnalyticsReceiver and AnalyticsService to support background
-         dispatching on non-Google Play devices. -->
-        <receiver android:name="com.google.android.gms.analytics.AnalyticsReceiver"
-            android:enabled="true">
-            <intent-filter>
-                <action android:name="com.google.android.gms.analytics.ANALYTICS_DISPATCH" />
-            </intent-filter>
-        </receiver>
-        <service android:name="com.google.android.gms.analytics.AnalyticsService"
-            android:enabled="true"
-            android:exported="false"/>
-
     </application>
-
-</manifest>
+</manifest>
diff --git a/app/app/src/main/Makefile b/app/app/src/main/Makefile
@@ -2,7 +2,7 @@ UTILITIES_PATH = ../../../../utilities
 PATCHES_PATH = ../../../../patches
 
 all: assets/nexmon assets libs/armeabi
-	
+
 assets: \
 	assets/nexmon/fw_bcm4330_5_90_100_41_sta.bin \
 	assets/nexmon/fw_bcm4339_6_37_34_43.bin \
@@ -20,7 +20,7 @@ assets: \
 	assets/nexmon/mdk3 \
 	assets/nexmon/socat \
 	assets/nexmon/libfakeioctl.so \
-	FORCE 
+	FORCE
 
 assets/nexmon: FORCE
 	mkdir -p assets/nexmon/
@@ -99,4 +99,4 @@ clean: FORCE
 FORCE:
 
 
-.PHONY: all clean
+.PHONY: all clean
diff --git a/app/app/src/main/external/src/libandroidlogger/Android.mk b/app/app/src/main/external/src/libandroidlogger/Android.mk
@@ -1,8 +1,5 @@
-
-
 LOCAL_PATH:=$(call my-dir)
 
-
 include $(CLEAR_VARS)
 LOCAL_SRC_FILES:=android-logger.c
 LOCAL_MODULE:=libandroidlogger

diff --git a/app/app/src/main/external/src/libmyaircrackwep/Makefile b/app/app/src/main/external/src/libmyaircrackwep/Makefile
@@ -17,7 +17,7 @@ $(UTILITIES_PATH)/libssl/local/armeabi/libssl.a: FORCE
 
 $(UTILITIES_PATH)/libcrypto/local/armeabi/libcrypto.a: FORCE
 	cd $(UTILITIES_PATH)/libcrypto && make
-	
+
 FORCE:
 
 clean: