editing lucent flashrom

03-20-2002

hi

i´ve spoken to someone from elsa, yesterday on the cebit.
he said that it is possible to reprogram the lucent wlan cards so that they have other (more) functions, but he switched the topic really fast in that moment he saw that he said the wrong thing to the wrong guy :-(

e.g. the channels who could be use from the cards and maybe the signal output could be changed directly in the cards flashrom.
he said that the MAC can definetly changed in that memory!

does someone maybe have a tool to play with this rom?

CU AssetBurned

03-20-2002

I've heard rumblings about hacked ROMs already being out there. However I've been unable to track down ANYHTING about this. There are all sorts of tools for hacking BIOS ROMs, surely there must be some standard tools for developing the packages that FLASH Lucent ROMs as well. If so then those tools might allow us to at elast pull the software apart and look at it. I wouldn't have clue one as to where to start looking for tools or at modifying the software :-( I will see if I can't follow up further with the guy who mentioned his to me and see if I can track down an URL. No promises though (sigh).

03-20-2002

Hi,

I've modified the lucent 810 code to flash my compaq wl110 and it works with nfp. But I have a feeling that the firmware this utility reprograms is the station code, which is responsable for chatting to the wlan chipset etc. I think the actual station code is loaded by the driver of the operating system in question.

I dont think the mac address or region details can be adjusted easily. I put out a request on the N/S hardware forum for a broken lucent card, with the aim of removing the flash chip and stuffing it in a reader and making a rom dump available etc, but I've not had any takers.

If 'we' could get hold of such a dump, along with details of the card it came from, such as mac and region etc, then we could make a start on looking for the code in the rom.

Of course, it would be simple to compare the rom image from the firmware update tool with a rom dump to see what bits of the rom do what.

does any of that make sense????

regards,

Paul.

03-20-2002

what he is taliking about is is that he can change the country code or change a silver to a gold card.

03-20-2002

...ucking useless 3com AirConnect cards!

03-21-2002

I have the tool to change country code's but it is a hardware key and not a software key. i would give it to you but this hardware key only works on intermec AP's. so i will just change the codes and stuff.

03-25-2002

Hi.

As far as I know the Lucent/Agere chipset has been derived from the Prism-Chipset. With Prism it is possible to reprogram the card, the power adjustment, the allowed channels, the MAC address and other funny stuff. If one digs through the mailing list of the HostAP driver and the "normal" wlan-ng, one can find some links about updating the firmware, and there are also hints on programs that can dump the Prism2 firmware out of the card and modifiy other things not stored in the STA-firmware.

I guess it must be possible to do something similar with Lucent/Agere cards.

Bye, Mike

03-25-2002

if someone send me this prism 2 tool, i could upload it on my webside.

could someone send it to me?

freenetworks at assetburned.de

cu AssetBurned

03-20-2002	#1 (permalink)
Posts: n/a	editing lucent flashrom hi i´ve spoken to someone from elsa, yesterday on the cebit. he said that it is possible to reprogram the lucent wlan cards so that they have other (more) functions, but he switched the topic really fast in that moment he saw that he said the wrong thing to the wrong guy :-( e.g. the channels who could be use from the cards and maybe the signal output could be changed directly in the cards flashrom. he said that the MAC can definetly changed in that memory! does someone maybe have a tool to play with this rom? CU AssetBurned

03-20-2002	#2 (permalink)
Posts: n/a	I've heard rumors... I've heard rumblings about hacked ROMs already being out there. However I've been unable to track down ANYHTING about this. There are all sorts of tools for hacking BIOS ROMs, surely there must be some standard tools for developing the packages that FLASH Lucent ROMs as well. If so then those tools might allow us to at elast pull the software apart and look at it. I wouldn't have clue one as to where to start looking for tools or at modifying the software :-( I will see if I can't follow up further with the guy who mentioned his to me and see if I can track down an URL. No promises though (sigh).

03-20-2002	#3 (permalink)
Posts: n/a	lucent roms Hi, I've modified the lucent 810 code to flash my compaq wl110 and it works with nfp. But I have a feeling that the firmware this utility reprograms is the station code, which is responsable for chatting to the wlan chipset etc. I think the actual station code is loaded by the driver of the operating system in question. I dont think the mac address or region details can be adjusted easily. I put out a request on the N/S hardware forum for a broken lucent card, with the aim of removing the flash chip and stuffing it in a reader and making a rom dump available etc, but I've not had any takers. If 'we' could get hold of such a dump, along with details of the card it came from, such as mac and region etc, then we could make a start on looking for the code in the rom. Of course, it would be simple to compare the rom image from the firmware update tool with a rom dump to see what bits of the rom do what. does any of that make sense???? regards, Paul.

03-20-2002	#5 (permalink)
Posts: n/a	Useless... ...ucking useless 3com AirConnect cards!

03-25-2002	#7 (permalink)
Posts: n/a	Similar to Prism Hi. As far as I know the Lucent/Agere chipset has been derived from the Prism-Chipset. With Prism it is possible to reprogram the card, the power adjustment, the allowed channels, the MAC address and other funny stuff. If one digs through the mailing list of the HostAP driver and the "normal" wlan-ng, one can find some links about updating the firmware, and there are also hints on programs that can dump the Prism2 firmware out of the card and modifiy other things not stored in the STA-firmware. I guess it must be possible to do something similar with Lucent/Agere cards. Bye, Mike

03-20-2002	#4 (permalink)
Posts: n/a	what he is taliking about is is that he can change the country code or change a silver to a gold card.

03-21-2002	#6 (permalink)
Posts: n/a	I have the tool to change country code's but it is a hardware key and not a software key. i would give it to you but this hardware key only works on intermec AP's. so i will just change the codes and stuff.

03-25-2002	#8 (permalink)
Posts: n/a	if someone send me this prism 2 tool, i could upload it on my webside. could someone send it to me? freenetworks at assetburned.de cu AssetBurned

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode