• These instructions assume OSX on a mac.
• Install Python 3 if you don't already have it. You can get it from Here
• You need something in your firmware cache on your MAC, otherwise you will need to install a version (or reinstall) using DJI assistant before proceeding.
• Install required python modules pycrypto

pip3 install pycrypto

• Install required Ruby modules colorise

sudo gem install colorize

• Install adb (Android Debugger) for osx

curl https://dl.google.com/android/repository/platform-tools-latest-darwin.zip > platform-tools-latest-darwin.zip
unzip platform-tools-latest-darwin.zip platform-tools/adb
mv platform-tools/adb .
rm -rf platform-tools platform-tools-latest-darwin.zip
sudo mv adb /usr/local/bin/adb

• Get the code using git

cd ~/Documents/
git clone https://github.com/MAVProxyUser/P0VsRedHerring.git
cd P0VsRedHerring

Freshen the code each time you want to root kit an aircraft

cd ~/Documents/P0VsRedHerring
git pull

grep start_dji_system /Applications/Assistant.app/Contents/MacOS/Data/firm_cache/*.fw.sig -r 

Note the path and filename that is returned. You will need it in the next step. The filename that was returned for me was
/Applications/Assistant.app/Contents/MacOS/Data/firm_cache/wm331_0801_v01.01.03.89_20170519.pro.fw.sig

ls -l `grep start_dji_system /Applications/Assistant.app/Contents/MacOS/Data/firm_cache/*.fw.sig -r | grep ^Binary | cut -d " " -f 3`

python3 image.py **add path and filename here**

ls *bin

You should see your bin filename

file *.bin

This should return: Java archive data (JAR)

tar xvf *.bin system/bin/start_dji_system.sh

echo /system/bin/adb_en.sh >> system/bin/start_dji_system.sh

The next step will connect to your aircraft, so get it powered on and connected via USB… But this is the old one. You can PROBABLY skip this and go straight to the next step.

sudo ruby RedHerring.rb /system/bin/start_dji_system.sh system/bin/start_dji_system.sh

sudo ruby RedHerring.rb /data/.bin/grep grep

Open a new window, and start DJI assistant … connect to your aircraft, and view the list of available firmware updates… and then close DJI assistant. This will set a login cookie that will be re-used for the next command

/Applications/Assistant.app/Contents/MacOS/Assistant 

/Applications/Assistant.app/Contents/MacOS/Assistant --test_server

This will take a while - but it will update the NFZ database with no active NFZ's. Quite DJI assistant once its done

adb devices

adb shell

/usr/sbin/system_profiler SPUSBDataType | grep DJI: -A 19

• https://www.youtube.com/watch?v=BTQ_CTih1HM
• with help from opcode at https://dji-rev.slack.com/