OpenWrt Forum Archive

Topic: TP-Link TL-WR703N Reverse Engineering

The content of this topic has been archived between 22 Mar 2018 and 21 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Squonk wrote:

Yes, but the challenge would be to produce the boards!

The PCB is 4-layer, so we cannot use the cheap PCB prototype services. So we will need to find one PCB house that can do this cheap, and also provide the solder paste stencils.

http://oshpark.com/pricing

How did you dump your stock image,  with an spi programmer or in the vxworks bootloader?

I am interested as I bought 10 TL-702N's by mistake, and wish to upgrade them all to be a TL-WR703 without USB.

Any help would be appreciated.

Thanks
Daryll

b18vtecturbo wrote:
Squonk wrote:
MBS wrote:

I would say that just the MAC is the device specific part of the ART (and should be cleared when giving that data to anyone else).

The ART partition contains device-specific RF information, but NOT the MAC address, which is stored in the uboot partition.

Thus, both partitions are device-specific, although the uboot one is easy to customize using an hex editor.

I have a TL-WR702N It have 2MB flash(stock) I replaced the flash chip with 8MB flash+ add USB port.
The TL-WR702N used a different bootloader and partition table I think.
Will the art partition still located 64kb at the end?

Here is my flash dump: https://www.dropbox.com/s/qfqe8zsy169a5 … -stock.bin

For U-boot I need the 1kb config at the end of uboot. Can you tell me how to customize using an hex editor?

Thank you for all your help!

Squonk wrote:

And yes, the SoC has I2S interface (and also SLIC...), but don't forget about pin multiplexing...

I have looked mailing list archive, on OpenWrt forums and on wiki for information how to get support for SLIC (FXO/FXS) PCM telecom interface that AR9331 has but is not supported currently in OpenWrt.

I have found this wiki page that has some info about SLIC, but I can't find who the author is:
http://wiki.openwrt.org/toh/evaluation.boards/pb44?s[]=slic

Having telephone support via AR9331 would make a really big difference for all of us who work on community mesh networks like:
http://freifunk.net/
https://wlan-si.net/en/
http://www.otvorenamreza.org/
http://villagetelco.org/ and many others...

Hi,
Does anybody have layer 2 photo of WR703n PCB? I think it was removed from ImageShack. Thanks.

crockett wrote:

Hi,
Does anybody have layer 2 photo of WR703n PCB? I think it was removed from ImageShack. Thanks.

I saved all of them and have them on my HD, but I don't know where to put them for sharing, if possible without login.

Squonk wrote:
crockett wrote:

Hi,
Does anybody have layer 2 photo of WR703n PCB? I think it was removed from ImageShack. Thanks.

I saved all of them and have them on my HD, but I don't know where to put them for sharing, if possible without login.

Hi Squonk,


Why the proposed open source hardware project not been conducted afterward ?

hi

thx for your work; i was wandering if the producer supports an open architecture, why doesn't he give the full schematic and component list

as a side note i know some years ago cars and home appliances came with technical book, having all working structures in detail inside

link to ar9331 pinout
https://forum.openwrt.org/viewtopic.php … 71&p=6

The link is broken: WR702N-stock.bin.
I need of dump.

Regards,

b18vtecturbo wrote:
Squonk wrote:
MBS wrote:

I would say that just the MAC is the device specific part of the ART (and should be cleared when giving that data to anyone else).

The ART partition contains device-specific RF information, but NOT the MAC address, which is stored in the uboot partition.

Thus, both partitions are device-specific, although the uboot one is easy to customize using an hex editor.

I have a TL-WR702N It have 2MB flash(stock) I replaced the flash chip with 8MB flash+ add USB port.
The TL-WR702N used a different bootloader and partition table I think.
Will the art partition still located 64kb at the end?

Here is my flash dump: https://www.dropbox.com/s/qfqe8zsy169a5 … -stock.bin

For U-boot I need the 1kb config at the end of uboot. Can you tell me how to customize using an hex editor?

Thank you for all your help!

'Please let me know your comments about all this here!'

well, if you so will.. I wonder if geeks like you could reverse-engineer ransomware like this one http://nabzsoftware.com/types-of-threats/cryptolocker

(Last edited by sampaw on 3 Feb 2016, 13:42)

Hello
I'm new and i have problem with upgrade 702N. I can't find art.bin in stock image. I've backup stock image. Have you can help??

You will probably find the ART partition in the upper 64k of your 702N flash chip.

Squonk wrote:
crockett wrote:

Hi,
Does anybody have layer 2 photo of WR703n PCB? I think it was removed from ImageShack. Thanks.

I saved all of them and have them on my HD, but I don't know where to put them for sharing, if possible without login.

I can use my Dropbox to share it if you don't have your own Dropbox account. Feel free to sent images to valent@otvorenamreza.org and I'll make them publicly available and also put them on OpenWrt and Lede wiki pages.

The discussion might have continued from here.