Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
Detailed Notes regarding Samsung F8000 Smart TV networking
In developing a WiFi reconnect watchdog when TV enters Fake-Off mode, the following information was learned about how the TV is configured
Kernel Drivers
Two related kernel drivers
- cfg80211 – module shown as loaded by lsmod and as a kernel thread by ps
- ath6kl_usb – module shown as loaded by lsmod, depends on cfg80211, and shown as kernel thread by ps
Contents of /mtd_cmmlib/WIFI_LIB/QCA/WIFI_INIT_VERSION_INFO are:
WIFI:ATH6KL(3.5.2.14.0204)
Notable Files and Directories:
/etc/Scripts/wifi_restart.sh – calls /sbin/wifi_module_reset which is not yet fully understood
iwconfig and ifconfig utilities are present on the system
Network configuration parameters held in /mtd_rwarea/network/ directory
- network_Wired_info – holds configuration for eth0. configuration remains there even when wlan0 is the active interface
- network_type_info – set to "CurrentType=0" for wired, or "CurrentType=1" for wireless
- wpa_sta.conf – contains wireless configuration parameters for the wpa_supplicant. Stores (last used) WPA passphrase in plaintext regardless of which interface is active. Appears to be in standard wpa_supplicant configuration file format
- entropy.dat – probably used with wpa_supplicant
/mtd_cmmlib/WIFI_LIB/QCA/ directory
-
iw – standard linux utility for interfacing with system's wireless networking. Potentially useful commands:
- iw wlan0 info
- iw wlan0 scan
- iw wlan0 get_average_signal
-
wpa_client – client for wpa_supplicant. Potentially useful commands:
- wpa_cli help
- wpa_cli status
- wpa_cli ping
- wpa_cli list_networks
- wpa_cli reconfigure
- wpa_cli reassociate
- wpa_cli reconnect
- wpa_cli enable_network 0
- wpa_supplicant – daemon that handles wireless & WPA functionality
Experiments with Network Configuration Transitions:
- Start: wireless connected, manually add IP to eth0 with ifconfig
- eth0 keeps IP while powered on and while in Fake-Off
- eth0 loses IP when TV powered back on
- Start: wireless connected, use SmartHub to switch to wired
Related articles
('contentbylabel' missing)