Reverse Engeneering

[dschense]

Hey, nice Project! These little Trackers are awesome in size and function. The only thing I hate is the hardcoded stuff like the default server for fallback. Anybody who ever tried reverse engeneering these little pcbs? extracting firmware, flashing firmware, modify the firmware, remove the hard coded Server IP, add or modify commands?
Ive searched the whole internet, but seems like nobody ever did this step.

[samex]

Hey, are you have checked with a sniffer which kind of out/incoming connections appear?

Its not possible to change 2 servers with the communication protocoll via sms?

[tobadia]

Hey there.
I've never tried to reverse-engineer the module, mostly because of time and because I don't have the tools to dump and extract the firmware. Surely there's something to do here to replace the default URL by something else permanently... but I'm not the person for this.

@samex Not sure what you're saying: by SMS commands you can change the server. A list of commands is somewhere on this repo : see #4 at this comment.

[samex]

@tobadia thanks for the reply. I asked, is there any hardcoded fallback server that u cant change by sms command? I know there are 2 servers which you can change by sms, how I understand @dschense says there is one more server beyond the standard servers, is that true?

I described in this comment how to change the fallback server and linked to my sources, it would be good to know if the tracker is contacting a third server if two of them fail.

[tobadia]

Yes, there is one. It's the url for... 365gps.com, or something like that ? Basically it reverts to that when your custom server doesn't respond after a while.

Good catch for SERVER vs DOMAIN keywords. I honestly have no idea if that works... To try it I'd first have to find again where I put my GPS. It's been a while... Likely in a drawer somewhere. Will look into it.

[Abhishek-op]

Hi mates

Thanks for your work
I have bought a 4g based tracker that is zx509. Port docs is same.
As I have got the info this is using ax905 v1.0.3 I think it is Bmobile ax905 firmware http://www.locationof.com/phones/bmobile-ax905/

I'm not sure but also from other forums I have seen it's like Android device without screen so we can log to chip using usb.
https://www.traccar.org/forums/topic/zx808-compatible/

[Abhishek-op]

And chip is arm based mediatech Chip: MT2503+5931+3333

[dschense]

@Abhishek-op thanks for your comments. I tried to get on any of my trackers, but had no luck over usb connection using total control from sigma-rt.
How did you connect them? Did you need any driver to get the device connecting?

[Brandon-T]

https://github.com/FoxExe/ZX908/tree/main

This might help. This is for the ZX908 found via: https://www.traccar.org/forums/topic/zx9082/page/2/#post-109909