Hello guest, if you read this it means you are not registered. Click here to register in a few simple steps, you will enjoy all features of our Forum.
This forum uses cookies
This forum makes use of cookies to store your login information if you are registered, and your last visit if you are not. Cookies are small text documents stored on your computer; the cookies set by this forum can only be used on this website and pose no security risk. Cookies on this forum also track the specific topics you have read and when you last read them. Please confirm whether you accept or reject these cookies being set.

A cookie will be stored in your browser regardless of choice to prevent you being asked this question again. You will be able to change your cookie settings at any time using the link in the footer.

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Hacking the Tramp's TnR protocol
#1
Hi guys! Let's cooperate!

I want to make an android app to set everything on the Tramp VTX without the expensive wand!

What I know:
- The tag's hex data can be read with this app: https://play.google.com/store/apps/detai...aginfolite
- Ii is possible that it can be written with this but I dont have the balls to try it on my own one: https://play.google.com/store/apps/detai....tagwriter

I am collecting memory images with different channels, bands, power levels selected and will analyze them later

If anyone else is working on this, hit me up!
Reply
Login to remove this ad | Register Here
#2
Here is the memory dump: https://docs.google.com/spreadsheets/d/1...sp=sharing
Reply
#3
Pretty interesting, no matter what I change, only lines 01,15,16 get modified. Here is a comparison where I changed powers: https://www.diffchecker.com/g3jGXRSE

I thought line 01 (and maybe 00) is a checksum and 15,16 store the frequency, but nope, they store the power level, too.

Maybe every possible setting has an ID and it is stored there.
Reply
#4
this idea sounds interesting. does the TNR wand use RFID?
Reply
#5
RFID is one-way AFAIK. They use NFC, N24LR04E-R chip, AFI and DSFID protocol.

ISO 15693-2 and ISO 15693-3 compatible.
Reply


Possibly Related Threads...
Thread Author Replies Views Last Post
  Help gokou 850 vtx RX tramp rayb106 10 2,476 19-Sep-2023, 11:23 PM
Last Post: L0stB1t
  New Product ImmersionRC Tramp Nano VTX SnowLeopardFPV 2 878 10-Apr-2020, 03:45 PM
Last Post: Sugs
  TRAMP HV trojanGoat 7 3,148 14-Nov-2017, 02:48 AM
Last Post: jheenan
  Unify Pro VS Tramp Charpu5 2 2,255 28-Jul-2017, 12:39 AM
Last Post: OverDischarged
  Update Tramp HV firmware? paulsmith 1 3,397 01-Jun-2017, 11:18 AM
Last Post: DragonFly


Login to remove this ad | Register Here