Quantcast
Channel: Haxorware Forums - All Forums
Viewing all 4584 articles
Browse latest View live

CC to buy T/Warner

$
0
0
Ohboy....

Membership is about to blossom! Damn! Can you say MONOPOLY? This is going to make CC an even greedier ISP...Good thing is I'll be able to move anywhere in the USA and still be able to test! lol

In need of unused sb5101e dumps for certs

$
0
0
I never had mine due to it being a pre-owned modem. I could really do with them now, I realise it's a long shot, but if anyone could help I'd appreciate it, cheers.

Potentially Hazardous Asteroid Zipping by Earth on Close-Approach Tonight

$
0
0
I'll be checking it out from by bunker tonight

Code:
http://events.slooh.com/stadium/potentially-hazardous-asteroid-zips-earth-canary-islands-february-17-2014

How to get Config File

$
0
0
I have two SB5101i, one from my existing ISP and one from eBay. I have successfully loaded the eBay one with Haxorware 11 rev.39 and MAC/certificates copied from my ISP one. Now the eBay one is working online and provide the same speed as my ISP one. The only difference is that it is loaded with Haxorware.

Since my ISP use dynamic Config File during start up sequence. Its filename is randomly generated on-the-fly. So there is no way to pull the Config File from the ISP TFTP server. Is it possible to retrieve the Config File from the eBay modem using Haxorware? Or, are there any way to get my Config File?

Appreciate for any suggestions.

about cerificates

$
0
0
what info contain certificates: does it include manufacturer details or also device model and mac address?

Easier way to grab configs?

$
0
0
I recently scanned with Super SNMP and came across alot of interesting speeds, so..

I used my 5101, changed the Mac to that which matched the D3 config with the interesting speed, rebooted the modem (of course I was not issued an ip address) but it pushed the config and I grabbed it and put it on my D3 modem, and got the crap below 1mb speed.

Now, I dont think it has anything to do with the certs matching the config because I can use other interesting configs with no problem.

My question is, why do you suppose that config is not working, could it be because the 5101 does not fully process D3 configs so even if I download them through the 5101 they get corrupt?

last question, this is a pain in the ass to change my mac 50 times to grab the configs, is there an easier way?

Pull cert from CG3000

$
0
0
I can access to my Netgear CG3000 cable modem via its web interface at 192.168.100.1. Are there any way to pull its cert details out without opening its case to SPI dump its flash?

This link below:
https://code.google.com/p/get-cm-image/s...unk/README
says that there is a Image Extractor for CG3000 run under Linux but required to be SSH accessed to the modem first. However, I have already scanned its ports and only the HTTP port is opened and no others. Just wonder how to establish a SSH connection.

Any suggestion will be much appreciated.

SBV5120 cfg.bin

$
0
0
Is there any tool to extract certs from 64K nonvol? I use cmnonexp.1.1 but it works with 32K nonvol.

Force firmware update via CC on sb5101

$
0
0
Hi,

I am wondering if anyone knows how to force a firmware update from CC onto a sb5101 running hax rev39. I have unchecked disable firmware updates. I can see it trying to pull the update but it doesnt, I have added some of the log on that at end of the post. Now I have tried to extract the certs from downloaded configs but windows doesnt seems to want to open it, I tried changing the extensions between the various cert formats, no go.

If I can get the modem to accept the upgrade and pull the new certs from it, then flash hax back to it and inject the new certs, it should hopefully solve my problem. Anyone have any ideas?

Thanks.
Sending a REG-REQ to the CMTS...
Received a REG-RSP message from the CMTS...
0x00021b6a [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) We registered with a DOCSIS 1.1 config file!
Registration complete!
Process CVC
0x00021ba6 [CmDocsisCtlThread] CmSecureDownload::CmCodeVerificationCertificate::ParseAndValidate: (Secure Software Download) ERROR - Failed on rsaDecryptSignature, status=0x1
0x00021ba6 [CmDocsisCtlThread] CmSecureDownload::ProcessConfigFileSpecifiedCvc: (Secure Software Download) ERROR - Config file co-signer CVC is rejected.
0x00021ba6 [CmDocsisCtlThread] CmSecureDownload::ProcessConfigFileManufAndCosignerCvcs: (Secure Software Download) ERROR - Reject config file MSO CVC!
0x00021ba6 [CmDocsisCtlThread] BcmCmDocsisCtlThread::ProcessCVC: (CmDocsisCtlThread) ERROR - Config file does not include a valid CVC!
DOCSIS CoS/QoS rate shaping enable is now 1

A little help to the new guy..

$
0
0
Where to start?
Well I currently have brighthouse ISP which belongs to RR in florida.

They gave me a WebStar DPX2203 modem to provide for the internet service of course paying..

I have a SB5100 with MoD firmware on it which I used to spoof the MAC of the webstar modem to see if i was able to get the CM file, but to my surprise it seems like this provider is encrypting the file since the name comes out to be: TFTP Config ?BEEfFloAFPiDtJUKwI8M@CsCPDFohpf1v55I2z5ccbvultR89szsk - <<--- I know right ??? So obviously I cannot download the CM and use something like DiFileCPE to change the CM file. I also get an Error message saying 0x041D2C1C Configuration File CVC Validation Failure which for what I have read in the forum looks to me like it might be the certificates ?

I tried changing from DOCSIS 1 to 1.1 and also enabling and disabling the BPI and BPI+, but no success at all.. <<-- big surprise..

I downloaded a few tools from here like: FastCert v0.3, SNMPRape v1.1, even CertTxT v1.0; but which modem do I have to obtain the certificates the webstar or the SB5100 ? Also how can I know which range I have to scan ? cause scanning 16.7 million ip address will take ages lol 10.0.0.0 - 10.255.255.255 ...

When I scan with DHCP Force for some reason it doesn't get any MAC nor any info at all..

What do I need to make this work? Any tips or ideas will be greatly appreciated.!!! Thanks in advance

SNMP community name

$
0
0
what is SNMP community names for cable modems: is it default "public" name, or something else?

motorola SB5101

$
0
0
Any idea where someone can purchase motorola SB5101, at a great price, besides ebay? Looking to buy in bulk.

sb5101 cert copy

$
0
0
Hi folks,
I have an sb5101. And it's been a while since I last used my usbjtag.

My questions:

To copy from a stock SB5101 (supplied by local cable company) i must:
open usbjtag
and enter these commands:

getram cfg
save cfg

hook up my personal modem, I must enter:
ldram cfg (select extracted cfg.bin)
program cfg

is that correct?

I did this but my modem is not cloning. What I noticed is that even after i program the cfg.bin file onto my modem, my mac address in Haxorware doesn't change, even if I press COPY FROM CERTIFICATE button

Any idea on what could be wrong?

Thanks guys!!

sb6121 no pc link light!?

$
0
0
I've tried re flashing this thing a hundred times...has anyone had a similar issue?

get certs from full dump

$
0
0
how to extract certs from full original dump of DPC3000?

Shared Secret

$
0
0
Ok, help me understand this, if the shared secret is what is used once during tftp config file transfer to ensure no other modems can use that config, would not that same secret prevent someone from forcing a config as well?

Why would someone not be able to grab a config and use it, but be able to force one that came from a nearby city?

What I mean is, didn't that config that was forced once have it's own shared secret to prevent it from being used on another CM?

extracting certs via WIFI

$
0
0
Hey guys,
As all of you know, obtaining new certs are harder to come by these days.
I’ve been reading that certs CAN extracted via WiFi. Only modems wifi units are vulnerable to this such as: Webstar 2320, sbg900, sbg901…. I’m sure there is more.
Has any succefully extracted the certs over wifi using ipfullview 6.0, cloneceris etc…?

Thanks 4 reading.

The SBG6782

$
0
0

.jpg  1393788772160.jpg (Size: 32.68 KB / Downloads: 16) I am in the process of tearing the Arris/Motorola Surfboard SBG6782AC down. If there is interest I will post my findings and pictures.

Here are my initial findings:

-It has two mini pcie ports for its wireless connectivity. (One is for a/b/g/n and the other is ac)

-it has unused USB and FireWire ports(shown in the picture)

-the power supply is not integrated and is cabled.

I will get the information on the chip set soon.

My need is to see if I can shoehorn an WAN Ethernet port.

MY SBG900 WONT SYNC WITH LINE ????

$
0
0
no signal just blinks to lights forst solid second blinks wireless stays on

DID FULL FLASH NOW NO ETHERNET WORKING

$
0
0
I flashed full now my Ethernet port on modem does light up
Viewing all 4584 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>