If you enjoy our forum, why not join us? :) Login removes all the ads too! Click here to register in a few simple steps

Login to remove this ad | Register Here
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Hacking the Tramp's TnR protocol
#1
Hi guys! Let's cooperate!

I want to make an android app to set everything on the Tramp VTX without the expensive wand!

What I know:
- The tag's hex data can be read with this app: https://play.google.com/store/apps/detai...aginfolite
- Ii is possible that it can be written with this but I dont have the balls to try it on my own one: https://play.google.com/store/apps/detai....tagwriter

I am collecting memory images with different channels, bands, power levels selected and will analyze them later

If anyone else is working on this, hit me up!
#2
Here is the memory dump: https://docs.google.com/spreadsheets/d/1...sp=sharing
Reply
#3
Pretty interesting, no matter what I change, only lines 01,15,16 get modified. Here is a comparison where I changed powers: https://www.diffchecker.com/g3jGXRSE

I thought line 01 (and maybe 00) is a checksum and 15,16 store the frequency, but nope, they store the power level, too.

Maybe every possible setting has an ID and it is stored there.
Reply
Login to remove this ad | Register Here
#4
this idea sounds interesting. does the TNR wand use RFID?
Reply
#5
RFID is one-way AFAIK. They use NFC, N24LR04E-R chip, AFI and DSFID protocol.

ISO 15693-2 and ISO 15693-3 compatible.
Reply


Possibly Related Threads...
Thread Author Replies Views Last Post
  Help International VS US verions of Tramp VTX? JPFlorida 6 195 27-Apr-2017, 04:23 PM
Last Post: Drone0fPrey
  Help Difference between Tramp HV EU and Internation? cche 1 259 23-Mar-2017, 12:29 AM
Last Post: Charpu5
  Review Reasons to buy Tramp VTX JPFlorida 2 263 22-Mar-2017, 08:01 PM
Last Post: PaulMek
  TBS Unify Pro VS ImmersionRC Tramp VTX? DragonFly 3 726 07-Mar-2017, 04:07 AM
Last Post: Vespadaddy