Quantcast
Channel: Haxorware Forums - All Forums
Viewing all 4432 articles
Browse latest View live

forceware 1.4 on sb6141 settings

$
0
0
has anyone successfully get the sb6141 working? I installed the forceware 1.4 already, but unable to get it online. Which Tuner type and PGA type should I pick? thank you!! I have attached some of the settings.

.png  1.png (Size: 159.07 KB / Downloads: 1)

.png  2.png (Size: 141.59 KB / Downloads: 0)

.png  3.png (Size: 138.65 KB / Downloads: 0)

Flash SB5101E With FlashcatUSB help

$
0
0
Hello i need help flashin sb5101e i purchased flashcat usb but is not detecting what pins to solder for flashcat usb, i have soldered J201

and tell me pls step by step what i need to flash first bootloader or diag or lite firmware thanks

[Image: ag6lwkw4.jpg]


[Image: WbLvJpg.jpg]

How to ENABLE snmp

$
0
0
I see so may people commenting on snmp is switched off, and alse read, no it is not.. well, if you are sure you cant snmp on your node, login to telnet,

find_command tlv_55

Set to true.. now cpe device controls snmp.

Cya Wink

Help with sb5101E upstream ranging

$
0
0
Hello i have working mac subscribed. i dont know how to save telnet logs i will paste event logs.. the first 3 light are green just online is not. i will paste a screenshot from original modem and in my haxorware firmware.. BPI is skipped or disabled here..

http://i.imgur.com/bRnAkvz.jpg
http://i.imgur.com/osW2eQ8.jpg
http://i.imgur.com/3piDsEm.jpg

http://i.imgur.com/3ZTYwuh.jpg

Code:
Time Priority Code Description
1970-01-01 00:00:53 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:31 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:30 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:10 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:03:17 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:03:17 Critical  Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:48 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:09 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:01:52 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:01:52 Critical  Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:41 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:09 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:16:03 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:16:03 Critical  Resetting the cable modem due to docsDevResetNow
1970-01-01 00:13:55 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:12:07 Notice M571.4 Ethernet link dormant - not currently active
1970-01-01 00:01:05 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:10 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:03:58 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:03:58 Critical  Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:58 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:10 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:02:20 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:02:20 Critical  Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:46 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:09 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:22:58 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:22:58 Critical  Resetting the cable modem due to docsDevResetNow
1970-01-01 00:01:02 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:09 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:01:47 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:01:47 Critical  Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:58 Critical R002.0 No Ranging Response received - T3 time-out (US 2)
1970-01-01 00:00:54 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:11 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:04:20 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:03:21 Critical R002.0 No Ranging Response received - T3 time-out (US 2)
1970-01-01 00:03:18 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:02:31 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:02:27 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:01:30 Critical R002.0 No Ranging Response received - T3 time-out (US 4)
1970-01-01 00:01:25 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:11 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:01:48 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:01:47 Critical  Resetting the cable modem due to docsDevResetNow
1970-01-01 00:01:37 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:01:33 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:10 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:05:09 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:05:09 Critical  Resetting the cable modem due to docsDevResetNow
1970-01-01 00:04:20 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:04:08 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:04:08 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:04:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:04:04 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:03:57 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:03:56 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:03:56 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:03:56 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:03:12 Critical R002.0 No Ranging Response received - T3 time-out (US 2)
1970-01-01 00:03:09 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:02:18 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:02:13 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:01:18 Critical R002.0 No Ranging Response received - T3 time-out (US 4)
1970-01-01 00:01:13 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:10 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
2015-06-07 02:00:32 Notice M573.0 Modem Is Shutting Down and Rebooting...
2015-06-07 02:00:32 Critical  Resetting the cable modem due to docsDevResetNow
2015-06-07 02:00:06 Critical R002.0 No Ranging Response received - T3 time-out (US 2)
2015-06-07 02:00:05 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
2015-06-07 01:59:20 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
2015-06-07 01:59:15 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
2015-06-07 01:57:04 Critical R002.0 No Ranging Response received - T3 time-out (US 2)
2015-06-07 01:57:00 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
2015-06-07 01:54:09 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
2015-06-07 01:54:05 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
2015-06-07 01:52:00 Critical R002.0 No Ranging Response received - T3 time-out (US 4)
2015-06-07 01:51:58 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
2015-06-07 01:49:29 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
2015-06-07 01:49:28 Notice M571.1 Ethernet link up - ready to pass packets
2015-06-07 01:49:25 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
2015-06-07 01:49:19 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
2015-06-07 01:49:18 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
2015-06-07 01:48:44 Critical R002.0 No Ranging Response received - T3 time-out (US 2)
2015-06-07 01:48:44 Notice M571.4 Ethernet link dormant - not currently active
2015-06-07 01:48:27 Critical R002.0 No Ranging Response received - T3 time-out (US 2)
2015-06-07 01:48:23 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
2015-06-07 01:47:08 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
2015-06-07 01:47:04 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
2015-06-07 01:46:03 Critical R002.0 No Ranging Response received - T3 time-out (US 4)
2015-06-07 01:45:59 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted

Private KEY

$
0
0
In my testing, on every site, there is talk of the 'private' whatever, so I think it would be good to have a central scource where the information is found, since it is not in fact a hack, but much sought after knowledge:

In snmp, we have public and private STRING.

In cert's, we have public and private KEY

By forcing an update we can see private key SCOURCE in console.

In downloaded config we see:

cmMIC and cmtsMIC which create when combined, the private (isp) string all seek. This is NOT the private string of snmp. But can allow it.

Is the cmMIC in config, the private KEY SCOURCE mentioned in console?

If so, then the cmtsMIC is the isp key SCOURCE?

So how can a modem verify the key we seek, or is it only cmts that can do?

KvnKain's version of hax r39 diag

$
0
0
With much better log's, hopefully someone will dig out from this, the tasks used to show these log's so I can hopefully incorporate them into my own compiled netgear firmware for cg3XXX modems. I only post it here, because I'm surprised it's not yet.. all cred to kvnkain for this:

.rar  haxor39kvnkain.rar (Size: 1.13 MB / Downloads: 16)

Technetix TE1250 Re Calibration

$
0
0

.jpg  post-11602-14334405434636.jpg (Size: 458.26 KB / Downloads: 9)


Technetix TE1250 re calibration

Hi I was wondering if anyone has or knows of how I can get this technetix te1250 re calibrated ?
Or a connection and program to do it

how to install a firmware with .p7 extension

$
0
0
Hi folks

So i decided to bring some old dead modems to life - magjack fried during a thunderstorm and i was not able to access 192.168.100.1

I managed to re-flash it, it's a sb5101, but my ethernet port is dead, so all I have left is the usb port - which will not work on x64 windows system - unless - it's newer firmware

So the question is: how can I update the firmware using a .p7 file?

I read there's a way to remove the header and rename it to .bin but I don't know how to do it

it needs to be SB5101-2.8.3.0-GA-01-455 or above

I flashed I virgin 2mb file before installing haxor

I have newer firmware files but I'm not sure how to proceed - the files are not 2mb in size (smaller), should I flash the firmware files OVER the 2mb virgin dump or can I flash the firmware and then haxor?!! Huh



thank you

btw, one of the modems is really f**d up. I´m trying to hard debrick it, short circuiting with the 3.3v techinique but things are not pretty...all lights blinking at the same time Confused any ideas? flash is not deteced on jtag

Once again 6120 MAC Certs and Flash.

$
0
0
Hi...
Now I'm using Thomson DCM475 provided by ISP. I found better deal for cable service and switched to a different provider they will connect me in couple of weeks, but they want 115 for their 6120 modem, so I decided to buy modem.
Bought from hand and when provided MAC to ISP they told me that I can't use this mac because it is registered for user whose service was disconnected but still in their database, I had one sb5100 and give them it's mac ans serial but in system they have it as 6120.
Didn't know what to do with 6120 so decide to reflash it to put firmware what will allow me to set mac and serial from my 5100.
Read some info saw that I will need Jtag that I don't have thought about serial (read that maybe I will need noisy bootloader) but I have new revision of the board so there is no serial possible for me. But I have arduino :-) wrote seprog in it used flashtool unsoldered SPI dumped flash replaced u-boot, booth images.
And the most strange thing that modem booted and I saw forceware gui i used 1.1
I'm still not connected to new isp so decided to replace Thomson to see if it works wrote serial and mac changed MFG Cert to Thomson in Modem MFG also wrote Thomson. But couldn't get internet working receiving an internal IP from ISP but there is something wrong with setup I missed something...
If I read more I can find it but maybe someone can point me where can be the problem to save my time. and what's the deal with certs they can be also blocked by ISP ? and what's the Thomson Modem MFG and can I use it with motorola certs ? And when I replace modem for my new ISP and simply put mac and serial from 5100 will it work right away ?

Thank you.

Priv Messaging

$
0
0
Seems that whilst I can now receive msg's, they still aint sending, I now got three unsent msg's.. cnt be arsed looking into it in this heat, so I'll say thanks mick, nope, soon, and cheer's, and to the rest, it's all available on cw if they aint remixed it with their own sweaty palm's..

BLP Off command

$
0
0
What is purpose of BLP Off command, set through CLI on SB5101 diagnostic modem?
BLP Off - If 1, Turns off Baseline Privacy.

Need 8x4 firmware for dpc/epc3010

$
0
0
anyone have a firmware that connects with the 8 channels?

Technicolor TC8305C Gateway

$
0
0
Has anyone been able to get haxorware on this unit? If so, please enlighten the rest of us

Might be a dumb question

$
0
0
Hey all I have what may be a stupid or not so stupid question.....Is there any possible way to get free phone service from an Arris TM822 please bear with me here i never dealt with this modem before and recently acquired it please PM me if you have any info you do not feel like posting publicly.

Cabletables


Router Exploits

Ewaste give away

$
0
0
I'm giving away a bunch of inventory that is not being used. It consist of the following

Samsung cable box receivers

Arris tm22g.

Vizio tv's

Sb6120

Sb6121

And

dpc3825

Who ever wants a request by bulk for distributors or individually just pm me for further details and images. Thank you for your time.

Netgear test thread

$
0
0
Just a thread where I can hopefully either find or kick start someone else into figuring out whatever need's sussed.. for instance:

When I wrote that crap on cw, it was as good as two years ago.. but worked. Lateley, I have noticed some cause and effect of what I wrote, like how suddenly modem revert's to default/manufacturer setting's.. no it dont, but it revert's to something.. So on a 480, I loaded the netbeer version of netgear firmware, and I have another two netgear firmware, 1 from sbh, and 1 from foro.. also in virgin firmware, the following is now aparent.

These modem's now seem to reset whenever 'kicked', and I dont just mean a reset, or reset to factory, but they defo reset, ALL setting's, and if you say load a foro negear firmware onto a virgin, the foro becomes the default even after re-flashing a virgin. When you test a mac in the virgin and it is kicked, modem revert's to foro setting's, and here's the kicker, vice versa!!!!

What was your factory key changed to by whatever setting's bin you used from cw, as changed by those who never told you that you should NOT change these factory key password's? Why not? Because now when you test many other firmware's and their upgraded setting's.cfg/.bin..??

You most likely dont have the origional key to change the default settings in perm. So when the reset kicks in, you'll know why suddenly the wifi security has bits greyed out, the plan, ie US/EU wifi settings also unchangable..

When the number is kicked, EVERYTHING in non-vol is reset to what appear's to be default setting's, as this survive's across reset's, reboot's, and even re-flashing 8mb dumps.

Which bring's me to finalise with this: Back in the old days on sbh, people disagreed with me when I asked for the entire chip to be copied, not just the 2mb of the 8mb flash.. today, these chip's are hitting 256mb, yet we're still only copying 2 of 8mb.. most wont know the new security is built the same as the uefi bios's, ie 2 bios's, one hardcoded, and I believe this is what the extra space is in these netgears, a hardcopy of the origional modem's ISP setting's, we can change them, but after every mac fail, these WILL be reset, even if it's not hit you yet.

With regard's to newer 485's, and 490's, I highly suspect there is a hardcoded copy of firmware, which would explain why andy m could change mac's but not get it to stick.. ah, that magic mirror.. again..

Please feel free to chip in with any diagnosis as opposed to can I do this or that, what can we come up with?

Virgin blocking usbjtag

$
0
0
Seems I cant connect to usbjtag.com, tried the ip too, dead end, and as for the forum, it's there, but a pain in the arse to connect to, I'm blaming virgin, and just had to ask, with all this isp filtering goin on, are people still stupid enough to pay virgin for what, using google or facebook, cause what ever there is left to connect to aint worth paying for.. is it just me or anyone else in the uk? (never mind anywhere else..)

Ambit vmng 300 + 300 v2

$
0
0
Been trying to flash these 2 flash chips for 24+ hrs, and no joy, despite following every tut claiming to be for these modems, only to find that they are for the 6120.. I know most will say they are identical, but they aint, and later posts state the fact.. I've applied 5v to pin 2, no joy, 3.3v to pin 2, no joy, 1 (apparently) has no isp pin, and the other has, yet no success in getting a flash to stick.

I'd like to say it's just a bad wiring job, but not after the amount of checking and re-checking I have done, not to mention the fact I can id both chip's, and read from them, it's quite simply like this, the flash wont stick..

Error number's etc, change like the weather, and the programmer is fine, as I just completed a test re-flash of a netgear 480, so the programmer is fine, anyone else have this kind of problem?

Any suggestions?
Viewing all 4432 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>