Liberate the bees — AdaCam firmware toolkit, recon, and liberation scripts
Addresses all 4 open CVEs with specific implementations: - CVE-2: Per-device WiFi password derived from serial/MAC + salt - CVE-11: SSH key-only auth, ADACAM_PUBKEY injection at liberation - CVE-14: adacam-api bearer token derived from device serial - CVE-7/16: Kill usb-updater, no OTA for single-owner device Also covers: firewall rules, tunnel security assessment, data-at-rest recommendations, priority order for implementation. |
||
|---|---|---|
| recon | ||
| security | ||
| services/capture | ||
| CVE-LOG.md | ||
| liberate.sh | ||
| README.md | ||
adacam
Liberating bees from the hive.
Toolkit for converting Hivemapper Bee (HDC-S) dashcams into AdaCam devices — feeding AdaMaps instead of Hivemapper/HERE.
Repos
adacam-api— Replacement for odc-api (Flask, lean, no CVE)recon/— Factory firmware baseline recon (HDC-S, firmware 5.7.88)liberate.sh— One-shot liberation script (in progress)
Recon
Factory baseline captured from a fresh HDC-S unit (firmware v5.7.88, Intel ESE Yocto dunfell, kernel 5.10.32).
Key findings documented in recon/recon_*.log.
Status
- Factory recon baseline
- adacam-api v0.1 (Sulkta-Coop/adacam-api)
- liberate.sh
- AP subnet reconfiguration (10.42.0.0/24)
- Reverse tunnel to Rackham
- Routing fixes (LTE metric, wlp1s0f0 conflict)