Mavic 3 landings after Drone-Hack

[Bobby Kane]

I think whats happening is that the rc pro somehow can generate valid remote id information which gets pushed to the drone (n1 and rc don‘t do this for some reason)
By turning off wifi one can probably disrupt the location services on the rc pro enough to make this step fail. You cannot turn GPS off on this remote.

Far fetched but maybe who knows

I‘ve seen my other drones also forcefully broadcast RID with the rc Pro whereas they don‘t with other controllers. Its definitely weird

I tested both the RC Pro and RC out yesterday with your suggested method of Atti, turning off wifi and restarting. Both are still doing the same thing no matter what mode they are in. It takes a bit longer for the transmission to come on in Atti mode, but it still comes on. I didn't try the RC-N1 yet, which I can see doing better for the reasons mentioned. Both the RC and RC Pro do have their own GPS as said above. It seems there was a push by DJI at some point to make the broadcast regardless of the drone. I'm just not having as much luck as you getting them to be intermittent or stay off.
I should also note that I've re-flashed the DH firmware many times on the drone when doing these tests, just in case something by DJI was written to the drone along the way. I'm not signing in to the app either.

 

[Bobby Kane]

I think whats happening is that the rc pro somehow can generate valid remote id information which gets pushed to the drone (n1 and rc don‘t do this for some reason)
By turning off wifi one can probably disrupt the location services on the rc pro enough to make this step fail. You cannot turn GPS off on this remote.

Far fetched but maybe who knows

I‘ve seen my other drones also forcefully broadcast RID with the rc Pro whereas they don‘t with other controllers. Its definitely weird

The RC is definitely doing the same thing as the Pro. Thats the remote I started with when seeing this was happening. I moved to the RC Pro after the issue was noticed. Unfortunately it just didn't solve the problem.

 

[djiuser12345]

Just turned the drone on in a new location and it started broadcasting.
I changed to atti for some minutes and it stops.
Didn‘t even reboot and have wifi on (but not connected)

its strange but atti can make it stop and never broadcast again for the whole flight.

My drones with rc non-pro never show up. In fact, the rc pro is the only remote with which i can make the drones show in drone scanner.

 

[mj2019]

hi every one ,first thanks for this great thread and greater participation and sharing of info by friends here, it has been several weeks i have been searching to collect answers for my questions after i made the dh hack to my drones until i arrived here.. my story
i have a mavic 3 i modded by dh a month ago. after the hack i just tested it on the ground armed without props, i checked the rc pages after the mod i noticed that the loss of signal option is set to hover(mentioned earlier in the thread) i reset it to rth... but i didnt test fly it out side( am just charging the batteries after what i read here!), any way last week a friend working for a security trade company who knows i work partly for a filming studio and we have drones asked me to test one of drone detection systems they just imported from china... i personally am out of US and EU and no regulations for drones are there in my country i needed the dh to avoid mainly altitude limits as i film in hills and mountains some times and welcome the getting rid of nfz, without telling him i was glad to test my m3 and to see how stealthy it is cause i read the whole aeroscope story earlier..
the modded dh m3 was detected by his device .. it does not detect an id or coordinates but it detected the occulosync as the name of the drone..
i know the guys here tested other detection systems like droid id app...
so i will be glad to do some testing and share results here as this will help me and others to share the mod...
although some questions or discussion out side the topic may be necessary to draw out the full understanding as am a year into the mavics i need to ask and read a lot but am a 10 years or more into phantoms..

 

[mj2019]

not to forget i will also do some test using the studio air 2s i modded by dh too

 

[mj2019]

first the github page of the russian 1001 fw is gone i went there to check and its no more available but in my search earlier i recall i saw a video on utube for a russian guy testing the modedm3 ill post it here it seems to have interesting answers to loss os signal incase being on normal and atti modes

To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

Accept third party cookies

 

[djiuser12345]

I have no idea what firmware is in use in that video but the command used in the video definitely just sets the drone name to "gps off" and nothing else for DH firmware. No idea why his GPS count goes red and the banner says no gps but it clearly has 29/30 (changing) satellites connected. Must be some prototype of that firmware or something

The correct command for DH firmware would be "gps_off," or "gps_on," notice the missing underscore and comma in his video.

My testings were BTW all done in a authorization zone before the location change yesterday - I launched yesterday and today out of that authorization zone and my conclusion is apparently once the drone realizes its in EU it shuts off the broadcasting. You need ~> 12 sats to make it set the home point on its own and that is where I can take off without broadcasting.

So I have to do the ATTI dance when I'm in a authorization zone and just start with good gps in normal zones.

Thats only what I can say from using Drone Scanner, OpenDroneID and Air Sentinel.As said my other drones never showed up in these apps before up to the point where I thought the apps don't work at all. It was only until I recently received the RC Pro and the drones show up left and right with that remote in that authorization zone (tested with Mavic 3, Mavic 3 Classic, Air 2s) except with the mentioned quirks.
And thats probably where I'll leave it at I no langer want to "maintenance" my batteries with these tests and its not a big deal for me so good luck guys

 

[mj2019]

by the way i recall i saw on a site offering a moded air3 that is sold with nfz and altitude restriction removed , does any one know any thing about this??i never saw a video for a moded air3 but i recall i once watched a russian or kazakhstan guy testing an air3 to 3000m altitude

To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

Accept third party cookies

seems a super air 3 or what???
so can we expect a dronehacks for the air3

 

[Racerthefly]

catch it while hovering, then hold down the left stick for about 3 seconds and the motors stop

 

[mj2019]

ok i just started my flights with the drone hachs mavic 3, remember every one in advanced safety options set the rc disconnect option to rth as after drone hacks flash this option is set to hover by default, i took off in normal mode every thing seems smooth i shifted to the atti 0 gps are displayed in this mode if u press the rth button on the controller in this mode u can only land no rth option is available as per normal mode, i had on my mind before this test flight the intension to turn off the rc controller and see what happens in atti mode but after i realised that no rth option is available i was afraid to do this test before reading more on this topic to understand what happens in this atti mode and rc disconnection , i will test that tomorrow in an open field and not near buildings

 

[mj2019]

i just read that the russian 1001 mod works for the mavic 3 pro and classic too !!!!!!?????
does the drone hacks work for the m3pro and classic?????????? i remember i once read that it does not??? am i wrong?

 

[DARKSeifer]

i just read that the russian 1001 mod works for the mavic 3 pro and classic too !!!!!!?????
does the drone hacks work for the m3pro and classic?????????? i remember i once read that it does not??? am i wrong?

The DH version doesn't work, and there's not much info/tutorial about how to install the original russian version, but the russian version works even with the M3 enterprise.

 

[mj2019]

The DH version doesn't work, and there's not much info/tutorial about how to install the original russian version, but the russian version works even with the M3 enterprise.

hi friend , the github link to the 1001 has expired can u offer some links in case u know its too s exy to tinker the mavic3 .
on the other hand am too dizzy about the drone hacks mod idid to my mavic3 i wanted to evade altitude limit but it seems to make the drone tooooo capable and this needs a detailed understanding to avoid being overkilled by the available capabilities, yesterday there was a graduation ceremony for a school where some of my friends work i was freeking to fly the mavic3 as i feel am less than a learner before i reach the full curve with this thing, i used a phantom4 instead!!!!!

 

[mj2019]

The DH version doesn't work, and there's not much info/tutorial about how to install the original russian version, but the russian version works even with the M3 enterprise.

any friend who knows a link or any direction to go to the 1001 fw for the mavic 3 family is welcome to offer it here please

 

[mj2019]

since i now have the ability to fly into a no fly zone,, i need to now how the mavic3 thinks or reacts in several cases:
1- suppose an rth due to rc link or any other reason is between me and the drone ??? i remember the phantom will hover in that case until it goes to forced battery landing??? what will a dronehacked mavic3 do if when returning to home needs to cross in and out of a nfz?
2-how to take off from inside a nfz does u need to start in atti mode then go to normal or it can ignore nfz and take off in n mode?
3- suppose in a nfz or even out side of it u took off in atti mode i think this implies no home point is saved???
and if i shift to normal mode after take off will that location become the new home point just as the drone in air locks enough satellites???

 

[waynorth]

any friend who knows a link or any direction to go to the 1001 fw for the mavic 3 family is welcome to offer it here please

428.9 MB file on MEGA

mega.nz

 

[CtrlAltDlt]

428.9 MB file on MEGA

mega.nz

What is the process or instructions for installing the Russian 1001 FW?

 

[djiuser12345]

pretty much everything you need is written in m3_1001_chain.bat

you can mount the images on regular linux and inspect the fs there also
e.g. system.img

./simg2img system.img out.img
losetup --show -f -P out.img
mount /dev/loopX /media/loopX

 

[mj2019]

428.9 MB file on MEGA

mega.nz

thanks a lot...... and greatest thanks for those guys who spent the effort and shared this

 

[mj2019]

428.9 MB file on MEGA

mega.nz

to your knowledge has those guys manage to do any mods to the air3????