Reversing WiFi@SDCF

[stiefel40k]

• The server on the card runs on the port 24387
• UDP client port is 24388
• It uses UDP for transfer
• The Authentication packet looks like this:
  FC1307-tag|Direction|CommandCode|6 zero bytes|username length|password length|username|11 zero bytes|pwd|to 11 bytes zero padded counter
  Concrete (note, that the numbers are written in hex):
  FC1307|01|17|000000000000|05|05|admin|00000000000000000000|admin|0000000000000000000000
  This mean a
• Command codes:
  • card info: 1
  • get pwd type: 17
  • new data in card: 9
  • online wifi mode change: 15
  • query wifi info: 11
  • read data: 4
  • scan ssid: 16
  • set wifi info: 10

[stiefel40k]

1. First we need to authenticate ourselfs, by sending an authentication package (48 Bytes including the FC1307-tag the username and the password and its length)
2. We shall query the cardinformation. This returns us the general information about the card (firmware version and things like that)
3. We than have to calculate the LSB and other file system related information
4. After this we can get the pictures
5. delete?? not sure if it is possible