Tutorials

Tutorial: Stitch toghter a full Flash file from the Boot Loader and Firmware Files (Image0)

Tue, 06 Sep 2011 14:16:27 +0000

I was tinkering with a bricked SB5100 and wanted to load a full Flash file to it rather than a boot loader then a firmware file. I'm also a bit lazy so I like to start the jtag process and walk away for a while . Using the Linux "dd" command was the simplest way to accomplish this. For windows users, there is a similar program named "rawrite". The Linux command is covered here...

1. Gather up the files you want to stitch together, I used:

SB5100_NOSH.bin (stock full flash, but you modems un-modded backup flash will do)

SB5100MoD.1.0.4.Beta.bin (firmware image)

SIGMAX-BL_v2.6-LITE.bin (boot loader)

2. Get file sizes:

#ls -l

-rw-r--r-- 1 root root   32768 May  9  2005 SIGMAX-BL_v2.6-LITE.bin

-rw-r--r-- 1 root root  971236 Jul 10  2008 SB5100MoD.1.0.4.Beta.bin

-rwxr-xr-x 1 root root 2097152 Sep  3 18:23 SB5100_NOSH.bin

3. We know where the different images reside in the flash memory of our modems but we have to calculate the start/offset bytes and length in decimal where they will be placed when stitching together our flash file.

boot loader starts @ 0x9fc00000 (beginning of flash) length 0x8000 (32768 in decimal)

our start address will be:

zero (at the beginning) and length 32768


image0 starts @ 0x9fc10000 length 0xf0000 (983040 in decimal)

our start address will be:

0x9fc10000 - 0x9fc00000 = 0x10000 = 65536 and  length = 983040


image1 starts @ 0x9fd00000 length 0xf0000 (983040 in decimal)

our start address will be:

0x9fd00000 - 0x9fc00000 = 0x100000 = 1048576 length = 983040

4. run the dd command to add the boot loader:

#dd if=SIGMAX-BL_v2.6-LITE.bin of=SB5100_NOSH.bin obs=1 bs=1 count=32768 conv=notrunc

where if = input file, of = output file, obs = output block size in bytes, bs = block size in bytes, count = count in bytes, and conv = notrunc means to not truncate the file.

5. run the dd command to add image0:

#dd if=SB5100MoD.1.0.4.Beta.bin of=SB5100_NOSH.bin seek=65536 obs=1 bs=1 count=983040 conv=notrunk

where seek=65536 is the offset (start) of image0

6. run the dd command to add image1:

#dd if=SB5100MoD.1.0.4.Beta.bin of=SB5100_NOSH.bin seek=1048576 obs=1 bs=1 count=983040 conv=notrunk

7. Rename the file for good measure:

#mv SB5100_NOSH.bin my_full_flash.bin

8. Flash away!

I did get the modem de-bricked and loaded this file to it. Worked like a charm.

sb 4100 help

Mon, 08 Aug 2011 04:04:28 +0000

I know this modem is kind of old, but does any one have a full dump of a sb4100 Fujitsu.

i.e : firmware,flash, and memory"backup" ? all the ones I can find on this site belong to intel.

that they don't mind sharing, it doesn't matter what country its from, i'll gladly accept it

thanks
noel

Please help me, Ranging on Estabilish IP

Sat, 06 Aug 2011 21:16:25 +0000

Hello everyone

I am interested in the following,

When I connect my modem from my service provider, the default WebSTAR EPC2100r2 firmware immediately connect, and direct binding of the cable that comes into my apartment, and when it forks over the splitter. although it is worse signal to connect.

When I attach a hacked modem, SB5101 and epc2100r2 both with haxorware firmware modem not connect writes Ranging complete

Remove this means Acquire Downstream Channel Done Obtain Upstream Parameters Done Upstream Ranging Done Establish IP Connectivity Ranging Retrieve Time of Day waiting Negotiate security waiting Receive configuration waiting Register connection waiting Cable modem status waiting

and then restarted the modem

I do not know but to which the Internet will not work with 2way spliter ( 1 in and 2 out), directly cable to modem work good.

here is a log with cable spliter ( 2way cable spliter )

Event Log
Time Priority Code Description
1970-01-01 00:00:26 Critical D001.0 DHCP FAILED - Discover sent, no offer received
1970-01-01 00:00:07 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:03 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:26 Critical D001.0 DHCP FAILED - Discover sent, no offer received
1970-01-01 00:00:26 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:00:26 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:02 Notice M571.4 Ethernet link dormant - not currently active

Here is a picture of my modem and cable and spliter

Please help me

Thanks All

haxorware cai rio de janeiro

Thu, 31 Mar 2011 20:38:12 +0000

Alguem sabe me dizer o que esta acontecendo no rio de janeiro.
o haxorware cai toda hora...apos dar o ultimo ragistration complete e volta a scanear....o arquivo de configuracao esta diferente do anterior.
ainda nao sao todas as areas que caem.

alguem me ajuda????!!!!!

[Manual] Get a certificate for wireless SBG900 for the new DOCSIS 2.0 by dexter_one

Fri, 11 Mar 2011 05:06:33 +0000

Sorry for the translation, my language is Spanish and I did write to the Google translator.

Greetings to the whole community SBHacker my nickname is dexter_one and I like to share this tutorial I did with you. Have if this tutorial achievement earn access to the VIP

With Friends sbhacker.net (English) and sbhacker.net (Spanish) I learned this and it is clear that this is for purely educational, I am not responsible for any use that may be given to this information.

For that we need:
*1 modem SBG900 para experimentar * 1 modem SBG900 to experience
*1 Modem SBG900 para clonar * 1 to clone SBG900 Modem
*Software InSSIDer o netstumbler * Software or netstumbler InSSIDer

InSSIDer- http://www.metageek.net/products/inssider/
Netstumbler – http://www.netstumbler.com/downloads/

*Software Clonacertis – edit: dw5304 removed link to deposit files..
* Lots of patience

The way in which we will obtain the certificate for our dear ISP with DOCSIS 2.0 will consist of certificates borrow another cable modem.

NOTE: As the certificates must be used in a different node with respect to which they were obtained, it is recommended to do this with a laptop.

1 .- Procedure to install some software to scan WiFi networks nearby. In which case they have Windows XP I recommend netstumbler or if you have Windows Vista and Seven and I recommend that netstumbler InSSIDer not work in Windows XP.

2 .- also will install the software clonacertis.

3 .- After installing both software will proceed to launch the software InSSIDer (because I use Windows 7) to scan the wireless networks around us, as shown in the image:

It is observed that the Vendor is not recognized as Motorola but as Gemtek Technology, with this and know that this is a SBG900 and best of all, it has no security enabled or that the network is open.
In such case that the network is closed with WEP can search google how to break the WEP, there are thousands of manuals in this regard.

4 .- If the network is open proceed to connect or if it is closed ... then open it and connect. To verify that we have connected properly proceed to go to our favorite browser and type: 192.168.100.1
If you see an image like the one shown below, we have found a SBG900

5 .- proceed to run the software clonacertis as shown in the image:

6 .- We will click the Save Certificate in PC

7 .- We hope to restart the SBG900 and see the progress of the software.

8 .- We ask you to name the certificate store and ready.

9 .- If there is no problem whatsoever until the final clonacertis will tell you that you have saved properly certified.

In this step we will have the SBG900 of cloned neighbors, ready to upload to a SBG900 that we have inactive.

NOTE: it is noteworthy that to obtain the certificates must be obtained from a location other than where will you run your SBG900.
In short get a certificate from a NODE different from yours, because if you put the certificate on the same node will NEVER work because restarting the SBG900 payment.

10 .- Once we have our certificates in our PC, we will charge our SBG900

11 .- This clonacertis begin again and we will click the option to load certificates Modem.

12 .- Again we restart our SBG900

13 .- If all goes well we will be asked to insert the certificate path.

14 .- Select the certificate and let the clonacertis work.

15 .- If there is a mistake to clonacertis will tell you loaded the certificate without problem.

16 .- Ready we will have a certificate from a modem 100% legal.