{"id":18269072,"url":"https://github.com/raphaelcoeffic/horus_frk","last_synced_at":"2026-02-12T01:38:22.108Z","repository":{"id":99979929,"uuid":"199030180","full_name":"raphaelcoeffic/horus_frk","owner":"raphaelcoeffic","description":"Extracting Horus internal RF firmware","archived":false,"fork":false,"pushed_at":"2019-08-05T08:03:03.000Z","size":4,"stargazers_count":1,"open_issues_count":0,"forks_count":4,"subscribers_count":0,"default_branch":"master","last_synced_at":"2025-08-20T09:35:11.539Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/raphaelcoeffic.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-07-26T14:23:56.000Z","updated_at":"2020-05-31T13:51:42.000Z","dependencies_parsed_at":"2023-05-11T10:15:33.860Z","dependency_job_id":null,"html_url":"https://github.com/raphaelcoeffic/horus_frk","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/raphaelcoeffic/horus_frk","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raphaelcoeffic%2Fhorus_frk","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raphaelcoeffic%2Fhorus_frk/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raphaelcoeffic%2Fhorus_frk/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raphaelcoeffic%2Fhorus_frk/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/raphaelcoeffic","download_url":"https://codeload.github.com/raphaelcoeffic/horus_frk/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raphaelcoeffic%2Fhorus_frk/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29352924,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-12T01:03:07.613Z","status":"ssl_error","status_checked_at":"2026-02-12T01:00:51.346Z","response_time":97,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-05T11:34:27.792Z","updated_at":"2026-02-12T01:38:22.089Z","avatar_url":"https://github.com/raphaelcoeffic.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# horus_frk\nExtracting Horus internal RF firmware\n\n\n```\nCommands:\n=========\n\nFind prolog:\n------------\n\n$ binwalk -R \"\\x79\\x09\\xAA\\x9A\\xBE\\x70\\x25\\xB3\\x7C\\xF9\\x87\\x5F\\xAA\\x7C\\xC3\\xD1\" X10*.bin\n\nDECIMAL       HEXADECIMAL     DESCRIPTION\n--------------------------------------------------------------------------------\n1793748       0x1B5ED4        \\x79\\x09\\xAA\\x9A\\xBE\\x70\\x25\\xB3\\x7C\\xF9\\x87\\x5F\\xAA\\x7C\\xC3\\xD1\n\n-\u003e this is your offset (0x1B5ED4 in hexadecimal or 1793748 in decimal)\n\nFind end-of-firmware:\n---------------------\n\n$ binwalk -R \"\\x00\\x00\\x00\\x00\" -l 80000 -o 0x1B5ED4 X12S_mode1_NEU_1603_frtx.bin | head -n 5\n\nDECIMAL       HEXADECIMAL     DESCRIPTION\n--------------------------------------------------------------------------------\n1867476       0x1C7ED4        \\x00\\x00\\x00\\x00\n1867486       0x1C7EDE        \\x00\\x00\\x00\\x00\n\n-\u003e this gives you the end offset. If you substract the previous offset from that one, you get the length.\n\nCheck what is before the prolog:\n--------------------------------\n\nHere we want to see what is contained in the 16 bytes before the firmware,\nso we display 16 bytes, beginning at (start offset - 0x10). \n\nSo here: 0x1B5ED4 - 0x10 = 0x1B5EC4\n\n$ binwalk -W -l 16 -o 0x1B5EC4 X12S_mode1_NEU_1603_frtx.bin\n\nOFFSET      X12S_mode1_NEU_1603_frtx.bin\n--------------------------------------------------------------------------------\n0x001B5EC4  00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00 |...........\u003c....|\n\nIn this firmware, the length seems to be encoded after the firmware, so let's have a look at it.\n\nCheck epilog:\n-------------\n\nHere we want to look at the 16 bytes after the firmware, which is why we use the end offset (0x1C7ED4).\n\n$ binwalk -W -l 16 -o 0x1C7ED4 X12S_mode1_NEU_1603_frtx.bin\n\nOFFSET      X12S_mode1_NEU_1603_frtx.bin\n--------------------------------------------------------------------------------\n0x001C7ED4  00 00 00 00 01 20 01 00 4A 31 00 00 00 00 00 00 |........J1......|\n\n-\u003e firmware size: 0x012000 (72KB)\n\nNow we should check that numbers match:\nend offset - start offset = 0x1C7ED4 - 0x1B5ED4 = 0x12000\n-\u003e Looks good!\n\nCut firmware out:\n-----------------\n\nHere we use the start offset (0x1B5ED4) and the length (72k):\n\n$ dd bs=1 skip=$((0x1B5ED4)) if=X12S_mode1_NEU_1603_frtx.bin of=X12S_NEU_1603_iXJT.frk count=72k\n73728+0 records in\n73728+0 records out\n73728 bytes transferred in 0.598368 secs (123215 bytes/sec)\n\nPlease note that using \"count=$((0x12000))\" would work just the same.\n\nOffset       Filename                           Before prolog                                     Epilog / Size\n===========================================================================================================================================\n0x110C5C     X10S_EU_1102_frtx.bin              00 00 00 00 00 00 10 3C 00 80 2A 44 01 20 01 00   size: 0x012000\n0x110C0C     X10S_NEU_1102_frtx.bin             00 00 00 00 00 00 10 3C 00 80 2A 44 01 20 01 00   size: 0x012000\n\n0x1220D0     X10_mode1_EU_1204_frtx.bin         00 00 00 00 00 00 10 3C 00 80 2A 44 01 20 01 00   size: 0x012000\n0x1220D8     X10_mode2_EU_1204_frtx.bin         00 00 00 00 00 00 10 3C 00 80 2A 44 01 20 01 00   size: 0x012000\n\n0x121DF0     X10_mode1_NEU_1204_frtx.bin        00 00 00 00 00 00 10 3C 00 80 2A 44 01 20 01 00   size: 0x012000\n0x121DF8     X10_mode2_NEU_1204_frtx.bin        00 00 00 00 00 00 10 3C 00 80 2A 44 01 20 01 00   size: 0x012000\n\n0x12C04C     X12S_NEU_1404_frtx.bin             00 00 00 00 00 00 10 3C 00 80 2A 44 01 18 01 00   size: 0x011800\n0x12C0C4     X12S_EU_1404_frtx.bin              00 00 00 00 00 00 10 3C 00 80 2A 44 01 18 01 00   size: 0x011800\n\n0x136D14     X12S_mode2_NEU_1505_frtx.bin       00 00 00 00 00 00 10 3C 00 80 2A 44 01 20 01 00   size: 0x012000\n0x136D0C     X12S_mode1_NEU_1505_frtx.bin       00 00 00 00 00 00 10 3C 00 80 2A 44 01 20 01 00   size: 0x012000\n\n0x13704C     X12S_mode2_EU_1505_frtx.bin        00 00 00 00 00 00 10 3C 00 80 2A 44 01 28 01 00   size: 0x012800\n0x137044     X12S_mode1_EU_1505_frtx.bin        00 00 00 00 00 00 10 3C 00 80 2A 44 01 28 01 00   size: 0x012800\n\n0x19FE1C     X10_EU_1304_Beta0228_frtx.bin      00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 20 01 00    size: 0x012000\n0x19FAF4     X10_FLEX_1304_Beta0228_frtx.bin    00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 20 01 00    size: 0x012000\n0x19FA34     X10_NEU_1304_Beta0228_frtx.bin     00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 20 01 00    size: 0x012000\n\n0x1A259C     X12S_NEU_1225_frtx.bin             00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 18 01 00    size: 0x011800\n0x1A25F4     X12S_EU_1225_frtx.bin              00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 18 01 00    size: 0x011800\n\n0x1B5ED4     X12S_mode1_NEU_1603_frtx.bin       00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 20 01 00    size: 0x012000\n0x1B5ED4     X12S_mode2_NEU_1603_frtx.bin       00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 20 01 00    size: 0x012000\n\n0x1B5F8C     X12S_mode1_FLEX_1603_frtx.bin      00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 20 01 00    size: 0x012000\n0x1B5F8C     X12S_mode2_FLEX_1603_frtx.bin      00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 20 01 00    size: 0x012000\n\n0x1B62B4     X12S_mode1_EU_1603_frtx.bin        00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 28 01 00    size: 0x012800\n0x1B62B4     X12S_mode2_EU_1603_frtx.bin        00 00 00 00 00 00 00 00 00 00 10 3C 2E 00 00 00   00 00 00 00 01 28 01 00    size: 0x012800\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fraphaelcoeffic%2Fhorus_frk","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fraphaelcoeffic%2Fhorus_frk","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fraphaelcoeffic%2Fhorus_frk/lists"}