32-bit Lexra LX5280 core CPU (MIPS clone) with MMU
two 10/100 Ethernet MACs (RTL8139)
one 802.11b wireless MAC (RTL8180)
It also includes a 16550-compatible UART, PCI bridge, 16-port GPIO,
4 general purpose timers, watchdog timer and EJTAG.
The RTL8181 data sheet is available at several locations on the
Internet, see "Online Resources" below.
Plenty. Chances are that you can get one at your local wireless gear retailer.
OK, they may be labelled "Wireless Access Point" or "Wireless
Router", but this is a minor detail with little relevance :)
No kidding. Fact is, most RTL8181-based consumer appliances that we know
about come with a serial port (or at least a MAX232-ready TTL serial header)
and sometimes even a JTAG header. The bundled boot loader supports TFTP
firmware uploads and flash read/write.
Long story short: these devices are readily hackable out of the box.
See the device list for a growing list of
RTL8181-based consumer devices.
Related projects and code bits:
project on Sourceforge is developing an open source driver for
stand-alone RTL8180-based cards with Philips SA2400 radio frontend.
project on Sourceforge aims to provide open source tools and support
patches for patent-free MIPS clones, including RTL8181.