See 'WikiDevi' @ the Internet Archive (MW XML, Files, Images)
upgraded MW to 1.30 - maybe things are slightly less broken

Netgear WG102

From WikiDevi
Jump to: navigation, search

Netgear WG102

Manuf/OEM/ODM SerComm

FCC approval date: 05 November 2004
Country of manuf.: China

Type: access point

FCC ID: PY3WG102
Industry Canada ID: 4054A-WG102

Power: 12 VDC, 1.2 A
Connector type: barrel
Power over Ethernet (PoE) tag: 802.3af, standard

CPU1: Atheros AR2313A (180 MHz)
FLA1: 4 MiB
4,194,304 B
32,768 Kib
4,096 KiB
32 Mib
0.00391 GiB
(Macronix MX29LV320MBTC-90G)
RAM1: 16 MiB
16,777,216 B
131,072 Kib
16,384 KiB
128 Mib
0.0156 GiB
(EtronTech EM639165TS-6G)

Expansion IFs: none specified
JTAG: yes
Serial: yes, 3.3V TTL

WI1 chip1: Atheros AR2313A
WI1 chip2: Atheros AR2112A
WI1 802dot11 protocols: bg
WI1 antenna connector: RP-SMA

ETH chip1: Atheros AR2313A
ETH chip2: Realtek RTL8201CP
LAN speed: 10/100
LAN ports: 1

bg

Stock FW OS: VxWorks

Default IP address: 192.168.0.229
the IP 192.168.0.229 is used by 1 additional devices
of which 1 are Netgear devices
Default login user: admin
Default login password: password
admin:password credentials used by 399 additional devices
of which 289 are Netgear devices

802dot11 OUI: 00:18:4D (11 E, 14 W, 2005)
Ethernet OUI: 00:18:4D (11 E, 14 W, 2005)

For a list of all currently documented Atheros chipsets with specifications, see Atheros.


ProSafe 802.11g Wireless Access Point
 • Support page

Hacking the Netgear WG102 Access Point
On the SOWN Wiki

The test report states the hardware as 4900D00B which would strongly indicate that the device was manufactured by SerComm.
Aditional information:
- MX29LV320MBTC-90G can operate in 8 and 16 bit mode and support CFI protocol. On this board it is atached over 8bit bus. In this canse, for example for jtag, it should be specially configured. In openocd use x16_as_x8 option:
flash bank someflash cfi 0xbe000000 0x00400000 1 1 ar231x.cpu x16_as_x8
- Processord ID: 0x0001800a (MIPS 4Kc)
- All firmware versions are based on VxWorks 5.4.2


Wg102 back.jpg
Wg102 serial.jpg
Wg102 ejtag.jpg

Firmware[edit]

- no obfuscation. - zlib compression. 0000000: 4148 3030 4ab0 5dbf 0012 4d34 db2c 1c95 AH00J.]...M4.,.. 0000010: 986d ccc8 dc05 90ac 56b0 f349 0001 0074 .m......V..I...t 0000020: 3030 3031 3030 3030 3035 3130 3434 3030 0001000005104400 0000030: 3031 3031 3030 3030 3030 3030 3030 3030 0101000000000000 0000040: 3030 3030 3030 3030 3030 3030 3030 3030 0000000000000000 0000050: 3030 3030 3030 3030 3030 3030 3030 3030 0000000000000000 0000060: 3030 3030 3030 3030 3030 3030 3036 3038 0000000000000608 0000070: 3030 3030 3030 3030 3030 3030 3830 3030 0000000000008000 0000080: 3030 3030 3530 3033 3030 3030 3030 3130 0000500300000010 0000090: 0000 0000 7f45 4c46 0102 0100 0000 0000 .....ELF........ 00000a0: 0000 0000 0002 0008 0000 0001 80b8 46e0 ..............F. 00000b0: 0000 0034 0012 4c44 1000 0001 0034 0020 ...4..LD.....4. 00000c0: 0001 0028 0006 0005 0000 0001 0000 0060 ...(...........` 00000d0: 80b8 0000 80b8 0000 0012 4bb0 0013 e830 ..........K....0 00000e0: 0000 0007 0000 0010 0000 0000 0000 0000 ................ 00000f0: 0000 0000 3082 0003 1440 0030 00c0 3821 ....0....@.0..8! 0000100: 30a2 0003 1440 002d 2ce2 0004 1440 002b 0....@.-,....@.+ 0000110: 2402 0003 0046 1023 28c6 0004 14c0 0013 $....F.#(....... 0000120: 3043 000f 1060 0018 2862 000c 1040 000f 0C...`..(b...@.. 0000130: 2862 0008 1040 0008 2862 0004 1440 0012 (b...@..(b...@.. 0000140: 0000 0000 8ca2 0000 24a5 0004 24e7 fffc ........$...$... .... 0004cd0: 0000 000e 0000 0001 0000 000f 0000 0000 ................ 0004ce0: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0004cf0: 80ca 5c48 80ca 5c48 0000 0000 0000 0000 ..\H..\H........ 0004d00: 0000 0000 0878 9cb4 bd0d 785c d579 2efa .....x....x\.y.. 0004d10: ed3d 2379 6c8f f1f6 782c 0647 8119 6b4b .=#yl...x,.G..kK 0004d20: 1a2c 850c ae42 d454 4d27 926c 0b30 41fe .,...B.TM'.l.0A. 0004d30: 0114 e204 4596 6d25 715a 913a a7b4 f149 ....E.m%qZ.:...I 0004d40: 2792 0027 4796 8470 5db7 a57d 2692 6c94 '..'G..p]..}&.l.

0x0000094 - start of ELF part 0x0004d06 - start of zlib compressed part.