Examination of LUPUS-Electronics devices - Revision history

NKirnbauer: expired link changed with link from wayback machine

2024-11-10T20:34:57Z

expired link changed with link from wayback machine

← Older revision		Revision as of 20:34, 10 November 2024
Line 1,918:		Line 1,918:
	<h3>Zigbee</h3>		<h3>Zigbee</h3>
	<span style="font-size: 50px; line-height: 30px; padding-left: 10px">⚒</span>		<span style="font-size: 50px; line-height: 30px; padding-left: 10px">⚒</span>
	<p style="text-align: justify">The board offers a provided interface to update the ZB component. This is marked with the label "ZB-UPDATE". These 6 consecutive holes can be found on the front view of the PCB at the bottom left. The actual ZB module is located on the back. This is a [[http://climax.com.tw/zbh-sa.php\|ZBH-SA]] v1.1 module from Climax, built together with Texas Instruments' CC530 wireless SoC and CC2592 range extender as the core. The module is distributed under the FCC ID [[https://fccid.io/GX9ZBH-SA GX9ZBH-SA]] and a number of documents, such as user manuals and internal photos, can be viewed at [[https://fccid.io/GX9ZBH-SA FCC]].		<p style="text-align: justify">The board offers a provided interface to update the ZB component. This is marked with the label "ZB-UPDATE". These 6 consecutive holes can be found on the front view of the PCB at the bottom left. The actual ZB module is located on the back. This is a [[http://web.archive.org/web/20201022030855/https://www.climax.com.tw/new/zbh-sa.php ZBH-SA]] v1.1 module from Climax, built together with Texas Instruments' CC530 wireless SoC and CC2592 range extender as the core. The module is distributed under the FCC ID [[https://fccid.io/GX9ZBH-SA GX9ZBH-SA]] and a number of documents, such as user manuals and internal photos, can be viewed at [[https://fccid.io/GX9ZBH-SA FCC]].
	<br>		<br>
	TODO: Photo		TODO: Photo

NKirnbauer: fixed links

2024-11-10T20:25:51Z

fixed links

← Older revision		Revision as of 20:25, 10 November 2024
Line 1,754:		Line 1,754:
	<h3>GSM</h3>		<h3>GSM</h3>
	<span style="font-size: 50px; line-height: 30px; padding-left: 10px">⚒</span>		<span style="font-size: 50px; line-height: 30px; padding-left: 10px">⚒</span>
	<p style="text-align: justify">The LUPUS XT2 Plus is equipped with a "CINERON BGS2-W" 2G Wireless Module. This GSM 850/900/1800/1900 GPRS module has the unique FCC ID [[https://fccid.io/QIPBGS2\|QIPBGS2]]. The board also provides a designated interface for accessing the GSM module. However, this interface is not clearly marked. This is the second white 3-pin connector which is located in the lower right corner, or just above the GSM module on the right. By means of UART commands can be injected into the module. As you can see on the [[#Bootlog]], the output of the GSM module is displayed there together with the output of the [[#MCU]]. But the input is only done via the connector just mentioned. Just google "BGS2-W AT Command Set" for instructions and explanations.		<p style="text-align: justify">The LUPUS XT2 Plus is equipped with a "CINERON BGS2-W" 2G Wireless Module. This GSM 850/900/1800/1900 GPRS module has the unique FCC ID [[https://fccid.io/QIPBGS2 QIPBGS2]]. The board also provides a designated interface for accessing the GSM module. However, this interface is not clearly marked. This is the second white 3-pin connector which is located in the lower right corner, or just above the GSM module on the right. By means of UART commands can be injected into the module. As you can see on the [[#Bootlog]], the output of the GSM module is displayed there together with the output of the [[#MCU]]. But the input is only done via the connector just mentioned. Just google "BGS2-W AT Command Set" for instructions and explanations.

	<div class="toccolours mw-collapsible mw-collapsed" style="border-color: #eaecf0; background-color: white; calc(100% - 12px); overflow:auto;">		<div class="toccolours mw-collapsible mw-collapsed" style="border-color: #eaecf0; background-color: white; calc(100% - 12px); overflow:auto;">
Line 1,918:		Line 1,918:
	<h3>Zigbee</h3>		<h3>Zigbee</h3>
	<span style="font-size: 50px; line-height: 30px; padding-left: 10px">⚒</span>		<span style="font-size: 50px; line-height: 30px; padding-left: 10px">⚒</span>
	<p style="text-align: justify">The board offers a provided interface to update the ZB component. This is marked with the label "ZB-UPDATE". These 6 consecutive holes can be found on the front view of the PCB at the bottom left. The actual ZB module is located on the back. This is a [[http://climax.com.tw/zbh-sa.php\|ZBH-SA]] v1.1 module from Climax, built together with Texas Instruments' CC530 wireless SoC and CC2592 range extender as the core. The module is distributed under the FCC ID [[https://fccid.io/GX9ZBH-SA\|GX9ZBH-SA]] and a number of documents, such as user manuals and internal photos, can be viewed at [[https://fccid.io/GX9ZBH-SA\|FCC]].		<p style="text-align: justify">The board offers a provided interface to update the ZB component. This is marked with the label "ZB-UPDATE". These 6 consecutive holes can be found on the front view of the PCB at the bottom left. The actual ZB module is located on the back. This is a [[http://climax.com.tw/zbh-sa.php\|ZBH-SA]] v1.1 module from Climax, built together with Texas Instruments' CC530 wireless SoC and CC2592 range extender as the core. The module is distributed under the FCC ID [[https://fccid.io/GX9ZBH-SA GX9ZBH-SA]] and a number of documents, such as user manuals and internal photos, can be viewed at [[https://fccid.io/GX9ZBH-SA FCC]].
	<br>		<br>
	TODO: Photo		TODO: Photo

Ikramer at 17:27, 12 March 2024

2024-03-12T17:27:45Z

← Older revision		Revision as of 17:27, 12 March 2024
Line 2,135:		Line 2,135:

	[[Category:Documentation]]		[[Category:Documentation]]
			[[Category:Pentesting]]

Ikramer at 17:23, 12 March 2024

2024-03-12T17:23:08Z

← Older revision		Revision as of 17:23, 12 March 2024
Line 2,133:		Line 2,133:
	* https://www.av-test.org/en/ (Accessed 27. Febuary 2020)		* https://www.av-test.org/en/ (Accessed 27. Febuary 2020)
	* http://www.climax.com.tw/ (Accessed 29. Febuary 2020)		* http://www.climax.com.tw/ (Accessed 29. Febuary 2020)

			[[Category:Documentation]]

JPDoe at 13:34, 15 October 2020

2020-10-15T13:34:13Z

← Older revision		Revision as of 13:34, 15 October 2020
Line 665:		Line 665:
	adc_det_test, ash, busybox, bypassAP, bypassAP_std, cat, chat, cp, depmod, devmem, df, dmesg, dnsdomainname, echo, flash_erase, flash_eraseall, fw_printenv, gm_nand_write, gm_spi_write, grep, gunzip, gzip, halt, hostname, hwclock, i2c_access, ifconfig, init, insmod, iwconfig, iwevent, iwgetid, iwlist, iwpriv, kill, killall, ln, login, loopback, ls, lsmod, md5sum, mdev, mkdir, mknod, modprobe, mount, mv, nanddump, pidof, ping, poweroff, pppd, pppdump, pppoe-discovery, pppstats, ps, pwm_test, reboot, record_std, rm, rmdir, rmmod, route, rtctest, serial_test, sh, sleep, sync, tar, telnetd, top, traceroute, udhcpc, udhcpd, umount, watchdog, wdt_test, zcat</nowiki>		adc_det_test, ash, busybox, bypassAP, bypassAP_std, cat, chat, cp, depmod, devmem, df, dmesg, dnsdomainname, echo, flash_erase, flash_eraseall, fw_printenv, gm_nand_write, gm_spi_write, grep, gunzip, gzip, halt, hostname, hwclock, i2c_access, ifconfig, init, insmod, iwconfig, iwevent, iwgetid, iwlist, iwpriv, kill, killall, ln, login, loopback, ls, lsmod, md5sum, mdev, mkdir, mknod, modprobe, mount, mv, nanddump, pidof, ping, poweroff, pppd, pppdump, pppoe-discovery, pppstats, ps, pwm_test, reboot, record_std, rm, rmdir, rmmod, route, rtctest, serial_test, sh, sleep, sync, tar, telnetd, top, traceroute, udhcpc, udhcpd, umount, watchdog, wdt_test, zcat</nowiki>

	<div style="border: 1px solid #31708f; background-color: #d9edf7; color: #31708f; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Note</b>: ~~I wonder how CLIMAX~~ and ~~LUPUS are linked together!?~~</div>		<div style="border: 1px solid #31708f; background-color: #d9edf7; color: #31708f; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Note</b>: The basic operating system comes from the Taiwanese company Climax. LUPUSEC simply re-branded a Climax HPGW-G2 system and loaded some of their custom firmware on it.</div>

	<div class="toccolours mw-collapsible mw-collapsed" style="border-color: #eaecf0; background-color: white; calc(100% - 12px); overflow:auto;">		<div class="toccolours mw-collapsible mw-collapsed" style="border-color: #eaecf0; background-color: white; calc(100% - 12px); overflow:auto;">
Line 1,271:		Line 1,271:
	<p style="text-align: justify">The OS has no suitable programs to transfer files like <code>nc</code>, <code>ssh</code>, <code>ftp</code> or similar. But the FS is writable. So while having root access via Telnet, it is possible to copy all files that one don't want to copy manually from the Telnet Terminal window into the folder <code>/root/html/temp/</code> and then download them via HTTP at the address <code>https://XT2_IP/temp/$FILENAME</code>. Using the <code>tar</code> command, entire folders can be downloaded without any authenticated. This allows the even the extraction of the whole accessible firmware from the root shell (<code>cd / && tar -zcvf firmware.tar.gz * && mv firmware.tar.gz /root/html/temp/</code>) and downloading it via web browser (<code>https://XT2_IP/temp/firmware.tar.gz</code>). This also has the advantage that the firmeware is already unpacked and there is no need to bother with decompressing the file system or the like. Here the file <code>/root/hpgw</code> is of great interest and will be analyzed in the following. </p>		<p style="text-align: justify">The OS has no suitable programs to transfer files like <code>nc</code>, <code>ssh</code>, <code>ftp</code> or similar. But the FS is writable. So while having root access via Telnet, it is possible to copy all files that one don't want to copy manually from the Telnet Terminal window into the folder <code>/root/html/temp/</code> and then download them via HTTP at the address <code>https://XT2_IP/temp/$FILENAME</code>. Using the <code>tar</code> command, entire folders can be downloaded without any authenticated. This allows the even the extraction of the whole accessible firmware from the root shell (<code>cd / && tar -zcvf firmware.tar.gz * && mv firmware.tar.gz /root/html/temp/</code>) and downloading it via web browser (<code>https://XT2_IP/temp/firmware.tar.gz</code>). This also has the advantage that the firmeware is already unpacked and there is no need to bother with decompressing the file system or the like. Here the file <code>/root/hpgw</code> is of great interest and will be analyzed in the following. </p>

	HPGW API URLs found while analysing the program <code>/root/hpgw</code>, which manages the whole System. These are not part of the webroot directroy.		<p style="text-align: justify">HPGW API URLs found while analysing the program <code>/root/hpgw</code>, which manages the whole System. These are not part of the webroot directroy.</p>

	<nowiki>		<nowiki>
Line 1,291:		Line 1,291:
	<div style="background-color: #fcf8e3; border: 1px solid #8a6d3b; color: #8a6d3b; padding: 5px 10px; margin-bottom: 5px"><b>Warning</b>: The device blocks IP and stops responding <code>browser:ERR_EMPTY_RESPONSE</code> after 3 login attempts.</div>		<div style="background-color: #fcf8e3; border: 1px solid #8a6d3b; color: #8a6d3b; padding: 5px 10px; margin-bottom: 5px"><b>Warning</b>: The device blocks IP and stops responding <code>browser:ERR_EMPTY_RESPONSE</code> after 3 login attempts.</div>

	Example Web Application Config extracted from <code>/root/config/config.json</code>. Every config file within <code>/root/config -> /mnt/mtd/config</code> is protected against modification with a MD5 checksum.		<p style="text-align: justify">Example Web Application Config extracted from <code>/root/config/config.json</code>. Every config file within <code>/root/config -> /mnt/mtd/config</code> is protected against modification with a MD5 checksum.</p>

	...		...
Line 1,313:		Line 1,313:
	<p style="border: 1px solid #31708f; background-color: #d9edf7; color: #31708f; padding: 5px 10px; margin-bottom: 5px;"><b>Note</b>: If the configuration of the device has been exported since the previous reboot, it can be downloaded without authentication via <code>https://$XT2_IP/temp/config.tar.gz</code>. The configuration contains PINs, user passwords, and all other configuration settings. Passwords and PINs are "encrypted" using a simple substitution cipher.<sup>[[#CVE1\|Dan Fabian]]</sup></p>		<p style="border: 1px solid #31708f; background-color: #d9edf7; color: #31708f; padding: 5px 10px; margin-bottom: 5px;"><b>Note</b>: If the configuration of the device has been exported since the previous reboot, it can be downloaded without authentication via <code>https://$XT2_IP/temp/config.tar.gz</code>. The configuration contains PINs, user passwords, and all other configuration settings. Passwords and PINs are "encrypted" using a simple substitution cipher.<sup>[[#CVE1\|Dan Fabian]]</sup></p>

	~~Decryption of~~ the ~~substitution~~ cipher.<br>		<p style="text-align: justify">The system uses a simple substitutions cipher to store passwords. The password strings in config.json are Base64 encoded, so just decode the strings and use the grid below to find a clear text password. For example: the admin password <b>NDc2MTAzMj08NQ===</b> decodes back to <b>4761032=<5</b>, which results in <b>1234567890</b> as a clear text password when using the given cipher grid.</p>
	<~~span~~ style="~~font~~-~~size~~: ~~50px~~; ~~line~~-~~height~~: ~~30px~~; ~~padding~~-~~left~~: ~~10px~~">⚒</~~span~~>
			<nowiki>│ A D │ M H │ Y \ │ k n │ w r │ 8 = │ > ; │ & # │
			│ B G │ N K │ Z _ │ l i │ x } │ 9 < │ ? : │ ' " │
			│ C F │ O J │ a d │ m h │ y │ │ : ? │ @ E │ ( ─ │
			│ D A │ P U │ b g │ n k │ z _ │ ; > │ { ~ │ ) , │
			│ E @ │ Q T │ c f │ o j │ 0 5 │ [ ^ │ │ y │ * / │
			│ F C │ R W │ d a │ p u │ 1 4 │ \ Y │ } x │ + . │
			│ G B │ S V │ e ' │ q t │ 2 7 │ ] X │ ~ { │ , ) │
			│ H M │ T Q │ f c │ r w │ 3 6 │ ^ [ │ ! $ │ ─ ( │
			│ I L │ U P │ g b │ s v │ 4 1 │ _ Z │ " ' │ . + │
			│ J O │ V S │ h m │ t q │ 5 0 │ ` e │ # & │ / * │
			│ K N │ W R │ i l │ u p │ 6 3 │ < 9 │ $ ! │ │
			│ L I │ X ] │ j o │ v s │ 7 2 │ = 8 │ % │ │</nowiki>

			<div style="border: 1px solid #31708f; background-color: #d9edf7; color: #31708f; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Note</b>: Special thanks to Justin B. for providing the cipher grid!</div>

	<h2>Application</h2>		<h2>Application</h2>

JPDoe: Minor: Bug fixes.

2020-06-19T13:54:15Z

Minor: Bug fixes.

← Older revision		Revision as of 13:54, 19 June 2020
Line 1:		Line 1:
			<div style="max-width: 970px">

	<div class="toccolours mw-collapsible mw-collapsed" style="border-color: #eaecf0; background-color: white; overflow:auto;">		<div class="toccolours mw-collapsible mw-collapsed" style="border-color: #eaecf0; background-color: white; overflow:auto;">
	<div style="font-weight: normal;line-height:1.6;">ⓘ Table of Contents</div>		<div style="font-weight: normal;line-height:1.6;">ⓘ Table of Contents</div>
	<div class="mw-collapsible-content">		<div class="mw-collapsible-content">
	__TOC__		__TOC__
	~~</div>~~
	</div>		</div>
	</div>		</div>
Line 426:		Line 427:
	</table>		</table>

	~~</div>~~
	</div>		</div>
	</div>		</div>
Line 462:		Line 462:
	<span><nowiki>\| Cache-control: no-cache</nowiki></span>		<span><nowiki>\| Cache-control: no-cache</nowiki></span>
	<span><nowiki>\| Content-Type: text/html; charset=utf-8</nowiki></span>		<span><nowiki>\| Content-Type: text/html; charset=utf-8</nowiki></span>
	<span><nowiki>\| <!DOCTYPE html PUBLIC		<span><nowiki>\| <!DOCTYPE html PUBLIC
	\| "-//W3C//DTD XHTML 1.0 Transitional//EN"		\| "-//W3C//DTD XHTML 1.0 Transitional//EN"
	\| "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"></nowiki></span>		\| "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"></nowiki></span>
	<span><nowiki>\| <html>		<span><nowiki>\| <html>
Line 571:		Line 571:
	<span><b>Host script results</b>:</span>		<span><b>Host script results</b>:</span>
	<span><nowiki>\|_clock-skew: -18316d18h02m30s</nowiki></span>		<span><nowiki>\|_clock-skew: -18316d18h02m30s</nowiki></span>
	~~</div>~~
	~~</div>~~
	</div>		</div>
	</div>		</div>
Line 638:		Line 636:
	<div style="border: 1px solid #31708f; background-color: #d9edf7; color: #31708f; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Source</b>: [[#CVE1\|Dan Fabian (4 Apr 2019)]]</div>		<div style="border: 1px solid #31708f; background-color: #d9edf7; color: #31708f; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Source</b>: [[#CVE1\|Dan Fabian (4 Apr 2019)]]</div>

	~~</div>~~
	</div>		</div>
	</div>		</div>
Line 652:		Line 649:

	HPGW-NET6 login: root		HPGW-NET6 login: root
	Password:		Password:
	Welcome to		Welcome to
	____ __ __ __		____ __ __ __
Line 665:		Line 662:


	[root@HPGW-NET6]#		[root@HPGW-NET6]#
	adc_det_test, ash, busybox, bypassAP, bypassAP_std, cat, chat, cp, depmod, devmem, df, dmesg, dnsdomainname, echo, flash_erase, flash_eraseall, fw_printenv, gm_nand_write, gm_spi_write, grep, gunzip, gzip, halt, hostname, hwclock, i2c_access, ifconfig, init, insmod, iwconfig, iwevent, iwgetid, iwlist, iwpriv, kill, killall, ln, login, loopback, ls, lsmod, md5sum, mdev, mkdir, mknod, modprobe, mount, mv, nanddump, pidof, ping, poweroff, pppd, pppdump, pppoe-discovery, pppstats, ps, pwm_test, reboot, record_std, rm, rmdir, rmmod, route, rtctest, serial_test, sh, sleep, sync, tar, telnetd, top, traceroute, udhcpc, udhcpd, umount, watchdog, wdt_test, zcat</nowiki>		adc_det_test, ash, busybox, bypassAP, bypassAP_std, cat, chat, cp, depmod, devmem, df, dmesg, dnsdomainname, echo, flash_erase, flash_eraseall, fw_printenv, gm_nand_write, gm_spi_write, grep, gunzip, gzip, halt, hostname, hwclock, i2c_access, ifconfig, init, insmod, iwconfig, iwevent, iwgetid, iwlist, iwpriv, kill, killall, ln, login, loopback, ls, lsmod, md5sum, mdev, mkdir, mknod, modprobe, mount, mv, nanddump, pidof, ping, poweroff, pppd, pppdump, pppoe-discovery, pppstats, ps, pwm_test, reboot, record_std, rm, rmdir, rmmod, route, rtctest, serial_test, sh, sleep, sync, tar, telnetd, top, traceroute, udhcpc, udhcpd, umount, watchdog, wdt_test, zcat</nowiki>

Line 1,163:		Line 1,160:
	46 directories, 534 files</nowiki>		46 directories, 534 files</nowiki>

	~~</div>~~
	</div>		</div>
	</div>		</div>
Line 1,232:		Line 1,228:
	12227 root 1796 R ps</nowiki>		12227 root 1796 R ps</nowiki>

	~~</div>~~
	</div>		</div>
	</div>		</div>
Line 1,254:		Line 1,249:
	nobody:*:99:99:nobody:/home:/bin/sh</nowiki>		nobody:*:99:99:nobody:/home:/bin/sh</nowiki>

	~~</div>~~
	</div>		</div>
	</div>		</div>
Line 1,272:		Line 1,266:
	</gallery>		</gallery>

	~~</div>~~
	</div>		</div>
	</div>		</div>
Line 1,405:		Line 1,398:
	<6>pl2303: Prolific PL2303 USB to serial adaptor driver		<6>pl2303: Prolific PL2303 USB to serial adaptor driver

	[root@HPGW-NET6]# cat /etc/inittab		[root@HPGW-NET6]# cat /etc/inittab
	# system initialisation		# system initialisation
	#::sysinit:/bin/mount -n -o remount,rw /		#::sysinit:/bin/mount -n -o remount,rw /
Line 1,440:		Line 1,433:
	<div style="font-size: 12px !important">		<div style="font-size: 12px !important">
	<nowiki>		<nowiki>
	[root@HPGW-NET6]# cat /proc/cmdline		[root@HPGW-NET6]# cat /proc/cmdline
	mem=64M console=uart,shift,2,io,0xF9850000,115200 quiet		mem=64M console=uart,shift,2,io,0xF9850000,115200 quiet

	[root@HPGW-NET6]# fw_printenv		[root@HPGW-NET6]# fw_printenv
	Warning: Bad CRC, using default environment		Warning: Bad CRC, using default environment
	bootargs=		bootargs=
Line 1,455:		Line 1,448:
	netmask=255.0.0.0		netmask=255.0.0.0

	[root@HPGW-NET6]# cat /proc/mtd		[root@HPGW-NET6]# cat /proc/mtd
	dev: size erasesize name		dev: size erasesize name
	mtd0: 007f0000 00010000 "Linux Section"		mtd0: 007f0000 00010000 "Linux Section"
Line 1,933:		Line 1,926:
	<h5>Known Versions</h5>		<h5>Known Versions</h5>
	<u>LUPUS - XT1 Plus Main Panel</u>:		<u>LUPUS - XT1 Plus Main Panel</u>:
	* v0.0.3.2G: https://www.lupus-electronics.de/shop/documents/XT1Plus_lu-0.0.3.2G.zip (Accessed 25. April 2020) (Restart / Android-Push Hotfix)
	* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT1Plus_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)		* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT1Plus_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)
	<u>LUPUS - XT2 Main Panel</u>:		<u>LUPUS - XT2 Main Panel</u>:
	* v0.0.3.2G: https://www.lupus-electronics.de/shop/documents/XT2_lu-0.0.3.2G.zip (Accessed 25. April 2020) (Restart / Android-Push Hotfix)
	* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT2_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)		* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT2_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)
	<u>LUPUS - XT2 Plus Main Panel</u>:		<u>LUPUS - XT2 Plus Main Panel</u>:
	* v0.0.3.2G: https://www.lupus-electronics.de/shop/documents/XT2Plus_lu-0.0.3.2G.zip (Accessed 25. April 2020) (Restart / Android-Push Hotfix)
	* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT2Plus_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)		* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT2Plus_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)
	* v0.0.2.19E: No download available.		* v0.0.2.19E: No download available.
	<u>LUPUS - XT3 Main Panel</u>:		<u>LUPUS - XT3 Main Panel</u>:
	* v0.1.3.2G: https://www.lupus-electronics.de/shop/documents/XT3_lu-0.1.3.2G.zip (Accessed 25. April 2020) (Restart / Android-Push Hotfix)
	* v0.1.3.2B: https://www.lupus-electronics.de/shop/documents/XT3_lu-0.1.3.2B.zip (Accessed 29. Febuary 2020)		* v0.1.3.2B: https://www.lupus-electronics.de/shop/documents/XT3_lu-0.1.3.2B.zip (Accessed 29. Febuary 2020)

Line 1,953:		Line 1,942:
	<div style="font-size: 12px !important">		<div style="font-size: 12px !important">
	<nowiki>		<nowiki>
	$ binwalk -Mre --dd=".*" hpgw.bin		$ binwalk -Mre --dd=".*" hpgw.bin

	MD5 Checksum: badf860594c668b937bff2559ef79313		MD5 Checksum: badf860594c668b937bff2559ef79313
Line 2,002:		Line 1,991:
	1450717 0x1622DD Base64 standard index table		1450717 0x1622DD Base64 standard index table
	</nowiki>		</nowiki>
	~~</div>~~
	</div>		</div>
	</div>		</div>

JPDoe at 12:11, 18 May 2020

2020-05-18T12:11:40Z

← Older revision		Revision as of 12:11, 18 May 2020
Line 2,131:		Line 2,131:
	* https://www.av-test.org/en/ (Accessed 27. Febuary 2020)		* https://www.av-test.org/en/ (Accessed 27. Febuary 2020)
	* http://www.climax.com.tw/ (Accessed 29. Febuary 2020)		* http://www.climax.com.tw/ (Accessed 29. Febuary 2020)

	~~[[Category:Documentation]]~~

JPDoe: Update Firmware list: v0.0.3.2G for XT1, XT2, XT2Plus, XT3

2020-04-25T13:17:43Z

Update Firmware list: v0.0.3.2G for XT1, XT2, XT2Plus, XT3

← Older revision		Revision as of 13:17, 25 April 2020
Line 1,933:		Line 1,933:
	<h5>Known Versions</h5>		<h5>Known Versions</h5>
	<u>LUPUS - XT1 Plus Main Panel</u>:		<u>LUPUS - XT1 Plus Main Panel</u>:
			* v0.0.3.2G: https://www.lupus-electronics.de/shop/documents/XT1Plus_lu-0.0.3.2G.zip (Accessed 25. April 2020) (Restart / Android-Push Hotfix)
	* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT1Plus_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)		* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT1Plus_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)
	<u>LUPUS - XT2 Main Panel</u>:		<u>LUPUS - XT2 Main Panel</u>:
			* v0.0.3.2G: https://www.lupus-electronics.de/shop/documents/XT2_lu-0.0.3.2G.zip (Accessed 25. April 2020) (Restart / Android-Push Hotfix)
	* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT2_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)		* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT2_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)
	<u>LUPUS - XT2 Plus Main Panel</u>:		<u>LUPUS - XT2 Plus Main Panel</u>:
			* v0.0.3.2G: https://www.lupus-electronics.de/shop/documents/XT2Plus_lu-0.0.3.2G.zip (Accessed 25. April 2020) (Restart / Android-Push Hotfix)
	* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT2Plus_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)		* v0.0.3.2B: https://www.lupus-electronics.de/shop/documents/XT2Plus_lu-0.0.3.2B.zip (Accessed 29. Febuary 2020)
	* v0.0.2.19E: No download available.		* v0.0.2.19E: No download available.
	<u>LUPUS - XT3 Main Panel</u>:		<u>LUPUS - XT3 Main Panel</u>:
			* v0.1.3.2G: https://www.lupus-electronics.de/shop/documents/XT3_lu-0.1.3.2G.zip (Accessed 25. April 2020) (Restart / Android-Push Hotfix)
	* v0.1.3.2B: https://www.lupus-electronics.de/shop/documents/XT3_lu-0.1.3.2B.zip (Accessed 29. Febuary 2020)		* v0.1.3.2B: https://www.lupus-electronics.de/shop/documents/XT3_lu-0.1.3.2B.zip (Accessed 29. Febuary 2020)

JPDoe: Fixed non-closed nowiki tag

2020-04-25T12:15:47Z

Fixed non-closed nowiki tag

← Older revision		Revision as of 12:15, 25 April 2020
Line 1,904:		Line 1,904:
	[DBG ][GSPK][R] '+CREG: 0,2'		[DBG ][GSPK][R] '+CREG: 0,2'
	[DBG ][GSPK][R] 'OK'		[DBG ][GSPK][R] 'OK'
	[DBG ][ALRM]HA regular check time: now=1970/1/1 1:16:0<nowiki>		[DBG ][ALRM]HA regular check time: now=1970/1/1 1:16:0</nowiki>
	</div>		</div>
	</div>		</div>

JPDoe: Extended: Physical Intervention Section

2020-04-08T18:36:30Z

Extended: Physical Intervention Section

Show changes