nexmon | based Firmware Patching Framework for Broadcom/Cypress WiFi

Install some dependencies: sudo apt-get install git gawk qpdf adb flex bison.
Install some dependencies: sudo apt-get install git gawk qpdf adb flex bison
Only necessary for x86_64 systems, install i386 libs: sudo dpkg --add-architecture i386 sudo apt-get update sudo apt-get install libc6:i386 libncurses5:i386 libstdc++6:i386
Clone our repository: git clone https://github.com/seemoo-lab/nexmon.git
In the root directory of the repository: cd nexmon Setup the build environment: source setup_env.sh Compile some build tools and extract the ucode and flashpatches from the original firmware files: make
Go to the patches folder of your target device (e.g. bcm4339 for the Nexus 5): cd patches/bcm4339/6_37_34_43/nexmon/ Compile a patched firmware: make Generate a backup of your original firmware file: make backup-firmware Install the patched firmware on your smartphone: make install-firmware (make sure your smartphone is connected to your machine beforehand)
Note: We currently support Kernel Version 4.4 (deprecated), 4.9, 4.14, 4.19 and 5.4. Raspbian contains firmware version 7.45.154 for the bcm43455c0. We also support the newer firmware release 7.45.189 from Cypress. Raspberry Pi OS contains firmware version 7.45.206. Please, try which works best for you.
Make sure the following commands are executed as root: sudo su
Upgrade your Raspbian installation: apt-get update && apt-get upgrade
Install the kernel headers to build the driver and some dependencies: sudo apt install raspberrypi-kernel-headers git libgmp3-dev gawk qpdf bison flex make
Clone our repository: git clone https://github.com/seemoo-lab/nexmon.git
Go into the root directory of our repository: cd nexmon
Check if /usr/lib/arm-linux-gnueabihf/libisl.so.10 exists, if not, compile it from source: cd buildtools/isl-0.10, ./configure, make, make install, ln -s /usr/local/lib/libisl.so /usr/lib/arm-linux-gnueabihf/libisl.so.10
Check if /usr/lib/arm-linux-gnueabihf/libmpfr.so.4 exists, if not, compile it from source: cd buildtools/mpfr-3.1.4, autoreconf -f -i, ./configure, make, make install, ln -s /usr/local/lib/libmpfr.so /usr/lib/arm-linux-gnueabihf/libmpfr.so.4
Then you can setup the build environment for compiling firmware patches Setup the build environment: source setup_env.sh Compile some build tools and extract the ucode and flashpatches from the original firmware files: make
Go to the patches folder for the bcm43430a1/bcm43455c0 chipset: cd patches/bcm43430a1/7_45_41_46/nexmon/ / patches/bcm43455c0/<7_45_154 or 7_45_189>/nexmon/ Compile a patched firmware: make Generate a backup of your original firmware file: make backup-firmware Install the patched firmware on your RPI3: make install-firmware
Install nexutil: from the root directory of our repository switch to the nexutil folder: cd utilities/nexutil/. Compile and install nexutil: make && make install.
Optional: remove wpa_supplicant for better control over the WiFi interface: apt-get remove wpasupplicant
Note: To connect to regular access points you have to execute nexutil -m0 first
To build the utilities such as nexmon or dhdutil for Android, you need to download the old NDK version 11c, extract it and export the environment variable NDK_ROOT pointing to the directory where you extracted the NDK files.