I have BPI+ cable modem certificate and BPI+ manufacturer certificate. But where to get Root CA certificate and CM Private key?
↧
Root CA certificate
↧
I need like 10 virgin 5101 bins
Anyone have 10 they can lend me long story lol om me if u can
↧
↧
NETGEAR CMD31T
i bought this modem from walmart, before i bought my haxorware modem. its brand new but I lost the box and receipt to return it,, it cost me like 80$, is it possible to put haxorware on it so i can make use of it? I have a jtag cable if it helps.. or should i just resell it on ebay.
↧
Not sure what is going on (twice)...
I have 2 SB5101 modems with SigmaX2 on them. The first I put the header in, parallel flashed it, worked good for 2 years. Then, a storm came thru, and the cable was disconned..After it came back (2 weeks later), all I could get was the blinking receive light, wouldn't 'lock on' to a signal.
Gave up after 2 reflashes trying to make it alive again. Bought another, changed the mac to my subbed for testing, and it worked fine. For another year. Another storm. Another disconnection. Another modem receive light, with no 'lockon'. Connected the subbed modem, no problem at all.
Ideas/thoughts/etc? Can post whatever is needed.
EDITED FOR SPELLING. My keyboard actuator is going senile...
Gave up after 2 reflashes trying to make it alive again. Bought another, changed the mac to my subbed for testing, and it worked fine. For another year. Another storm. Another disconnection. Another modem receive light, with no 'lockon'. Connected the subbed modem, no problem at all.
Ideas/thoughts/etc? Can post whatever is needed.
EDITED FOR SPELLING. My keyboard actuator is going senile...
↧
downgrade firmware
Hey everyone im so sorry if this is in the wrong section i really am, but i am trying to downgrade the firmware on a dpc2100r2. can this be done without cables or do i need a jtag or any other cable. I have searched online and found a thread but that doesnt seem to work. Is there any way to do this, please let me know. Again im new at this and just trying to learn.
↧
↧
6120 vs 6121 or Other
Just trying to get a feel for what everyone thinks. Was thinking about switching to 6120 or 6121 for a Subbed modem using forceware. I know they're the same but little different on the hardware does it make that much of a difference?
Wanting to get rid of the Sb5101 since switching to 90mbps.
Wanting to get rid of the Sb5101 since switching to 90mbps.
↧
Why would my provider put a Co-CVC in the config file?
As the title says why would my provider add a Co-CVC into each config file they offer. The Co-Cvcs are all the same. My Provider doesn't have firmware update strings in the config, so I don't believe it was for updating the FM. What purpose does this server?
↧
Pull cert from CG3000
I can access to my Netgear CG3000 cable modem via its web interface at 192.168.100.1. Are there any way to pull its cert details out without opening its case to SPI dump its flash?
This link below:
https://code.google.com/p/get-cm-image/s...unk/README
says that there is a Image Extractor for CG3000 run under Linux but required to be SSH accessed to the modem first. However, I have already scanned its ports and only the HTTP port is opened and no others. Just wonder how to establish a SSH connection.
Any suggestion will be much appreciated.
This link below:
https://code.google.com/p/get-cm-image/s...unk/README
says that there is a Image Extractor for CG3000 run under Linux but required to be SSH accessed to the modem first. However, I have already scanned its ports and only the HTTP port is opened and no others. Just wonder how to establish a SSH connection.
Any suggestion will be much appreciated.
↧
Need any help about tcm420p
This modem haven't the pinout of jtag but just have serial pinout,unfortunally, the pinout of RXD doesn't receive any command from my usb-serial adapter using putty as well as the information displayed when i turn up the modem. i test the the " RXD" that the 1.5v shown with multimeter. I am certain the connection i make is suitable. what cause this problem ?
By the way ,this modem have some "test point" beside the board eq "tp4 tp5" . will this could be the jtag pinout like "tdi tdo eq " ?
By the way ,this modem have some "test point" beside the board eq "tp4 tp5" . will this could be the jtag pinout like "tdi tdo eq " ?
↧
↧
Is capturing DOCSIS traffic using an ATSC card still possible with BPI+?
I am wondering if in this day and age with BPI+ encryption it is still possible to sniff data directly from the wire using an ATSC card/demodulator before it reaches the CM? To capture the downstream data to sniff out information being sent to the modem. Normally I would think it is a lost cause, although I am unsure if BPI+ encrypts downstream data in the same manner or if it does, if anyone has been able to successfully disect and decrypt the packets.
Any information on this subject would be helpful.
Any information on this subject would be helpful.
↧
minimal certs
what certs are minimally required for registering modem and getting online in D3?
↧
5101 resets now the bin is bad
Trying to see what u did wrong to make the whole bin bad don't wanna make same mistake is it something in the settings that I can switch on or off to help my new bin not go bad
↧
cmnonexp v 1.0.1
Someone sent me a Pm and since I don't stop by as much as I did or as much as I should, I figured I would post it for all. I hope everyone is doing good, starting school in may for programming. It's long over due.
![.rar]()
cmnonexp101_win32.rar (Size: 590.85 KB / Downloads: 3)
cmnonexp101_win32.rar (Size: 590.85 KB / Downloads: 3)
↧
↧
newby
hi, guys
i did install haxoware lite in my modem sb5101e and my question is do i need to generate any type of certificate to get my modem online or it will work by just changing my hfc mac from one of another area also i did scan some MAC's in my area, my cable provider is TW and im willing to trade.
Thanks
i did install haxoware lite in my modem sb5101e and my question is do i need to generate any type of certificate to get my modem online or it will work by just changing my hfc mac from one of another area also i did scan some MAC's in my area, my cable provider is TW and im willing to trade.
Thanks
↧
Signing firmware
How to sign firmware.bin and convert it to .p7b? What key(s) are needed?
↧
arris DG1670A
i am looking for info on this modem, can't find any info on it anywheres on the net, our isp recently started using these modems so i was wondering about even cloning them, here is a link to a datasheet for the chip on it
datasheet
i have a clip that is able to read this chip......any thoughts?
datasheet
i have a clip that is able to read this chip......any thoughts?
↧
need macs can u help please anyone
undefined
↧
↧
Interesting nonvol.bin
Hey guys, so today i took a full 2mb dump of my provisioned SB5100 modem for some testing (solder-less header of course), and then ran getram cfg, save cfg, in Toms Jtag Utility, leaving me with a nonvol/cfg.bin
The plan was to extract the certs from the nonvol and insert them into my haxorware sb5101 to get online. However, when i used the program "Cert Downloader" i got this output in the command prompt with no certificates dumped.
![[Image: 1GbB8o6.png]]()
The plan was to extract the certs from the nonvol and insert them into my haxorware sb5101 to get online. However, when i used the program "Cert Downloader" i got this output in the command prompt with no certificates dumped.
![[Image: 1GbB8o6.png]](http://i.imgur.com/1GbB8o6.png)
↧
Help in repairing SMCD3GN... Transistor burned...Maybe someone has one for parts...
Hi...
I was really happy when received this device first thing what I did was connecting console cable .
I didn't saw any u-boot output only 2 sentences something related with LZMA compression, I thought that console output was disabled for u-boot but don't know why try to short flash pin thought maybe it will drop me to firmware console maybe it was enabled there and antecedently one of the antennas unsticked from plastic and shorted something on bord.
and I saw how smoke started to come from one of the transistors.
Maybe someone knows nominal of it (name) or have fully dead board from witch it can be taken of ?
On the transistor was wrote AA 121 and I uploaded photos there you can see where it is and how it looks...
Thanks for help.
![.jpg]()
trans.jpg (Size: 4.56 KB / Downloads: 1)
![.jpg]()
DSC07056.jpg (Size: 226.36 KB / Downloads: 4)
I was really happy when received this device first thing what I did was connecting console cable .
I didn't saw any u-boot output only 2 sentences something related with LZMA compression, I thought that console output was disabled for u-boot but don't know why try to short flash pin thought maybe it will drop me to firmware console maybe it was enabled there and antecedently one of the antennas unsticked from plastic and shorted something on bord.
and I saw how smoke started to come from one of the transistors.
Maybe someone knows nominal of it (name) or have fully dead board from witch it can be taken of ?
On the transistor was wrote AA 121 and I uploaded photos there you can see where it is and how it looks...
Thanks for help.
trans.jpg (Size: 4.56 KB / Downloads: 1)
DSC07056.jpg (Size: 226.36 KB / Downloads: 4)
↧
Yet another 5101 Debrick thread
Ok so Im trying to debrick this 5101 using these commands in a post by buzzybuzzard over at NT
The commands full flash are as follows:
detect
ldram 9fc00000
(A File Open dialog will appear, find your 2MB backup file and click open)
speed 2
erase 9fc00000 200000
sprogram 9fc00000 200000
cmpram 9fc00000 200000
The commands boot as follows:
detect
ldram 9fc00000
(A File Open dialog will appear, find your Boot Loader file and click open)
speed 2
erase boot
sprogram boot
cmpram boot
u can ldram with the 2mbdump and just sprogram the boot in case u have a bad boot loader file
-----------------------------------------------------------
The problem is, I can sprogram the full flash, but it stll does not boot, and when I try to erase, my jtagnt hangs, also when I try to sprogram boot, I get NOT A FLASH AREA. I can detect fine, but I notice Debug is OFF does that matter?
What you think?
The commands full flash are as follows:
detect
ldram 9fc00000
(A File Open dialog will appear, find your 2MB backup file and click open)
speed 2
erase 9fc00000 200000
sprogram 9fc00000 200000
cmpram 9fc00000 200000
The commands boot as follows:
detect
ldram 9fc00000
(A File Open dialog will appear, find your Boot Loader file and click open)
speed 2
erase boot
sprogram boot
cmpram boot
u can ldram with the 2mbdump and just sprogram the boot in case u have a bad boot loader file
-----------------------------------------------------------
The problem is, I can sprogram the full flash, but it stll does not boot, and when I try to erase, my jtagnt hangs, also when I try to sprogram boot, I get NOT A FLASH AREA. I can detect fine, but I notice Debug is OFF does that matter?
What you think?
↧