Haxorware Forums
Hacking SBG900 - Printable Version

+- Haxorware Forums (http://www.haxorware.com/forums)
+-- Forum: General (http://www.haxorware.com/forums/forumdisplay.php?fid=6)
+--- Forum: Modems (http://www.haxorware.com/forums/forumdisplay.php?fid=7)
+--- Thread: Hacking SBG900 (/showthread.php?tid=721)

Pages: 1 2 3


Hacking SBG900 - maxsteel3000 - 03-01-2011

can any one point out how to use wriggler cable to hack sbg900 without going into serial . wouldnt matter if i loose the wifi. . .


RE: Hacking SBG900 - drewmerc - 03-01-2011

[Image: pErsb.png]

should work with toms jtag (depends on flash type)
attached firm works (so does wifi) mac change is via telnet


RE: Hacking SBG900 - maxsteel3000 - 10-11-2011

how to do it flash it with haxorware with blackcat usb????



RE: Hacking SBG900 - drewmerc - 10-11-2011

wow thats one of the longest wait for a reply ever and even then asks a stupid question seeing as the above has a pinout so it would not be hard to workout were the go on a blackcat usb (i'm not doing everything for you)
then asks can i flash it with haxorware i'm really tempted to yes sure go for it i posted a compatible firmware for the fun of it

hummmm i seem to be in a bad mood

look at the pic above pin1 on the 900 is trst so connect it to trst on the blackcat usb (look in the blackcat manual trst may be called rst) and so on for all the other pins then start blackcat to see if it works
no haxorware thats why i posted a shelled firmware


RE: Hacking SBG900 - maxsteel3000 - 11-11-2011

just need the address to start the flash. . . Sad


RE: Hacking SBG900 - Mordeth - 11-11-2011

(11-11-2011, 08:42 AM)maxsteel3000 Wrote: just need the address to start the flash. . . Sad

If you are using toms jtag...write "tablist" w/o the quotes, as this command will show all the memory bank locations, in addition to addresses and sizes of each tab location.


RE: Hacking SBG900 - drewmerc - 11-11-2011

when you backup the flash of your 900 what size is the dump if it's the same size as the firmware i posted 4mb
that means mine is a full dump so you would start programming at 0


RE: Hacking SBG900 - maxsteel3000 - 11-11-2011

i think the modem is bricked (only 3 lights go up when the modem powers up )

whenever i try to connect the modem with blackcat usb it says no cfg area found. . .

what should i do????


RE: Hacking SBG900 - drewmerc - 11-11-2011

the cfg area is in a different place than normal (i guess just by looking at the hex dump)
so what script is blackcat trying to autoload? i'm guessing this script will be looking in the wrong location i'd suggest to try emailing http://www.embeddedcomputers.net/products/BlackcatUSB/ and asking them for a correct script (converting one from the usbjtag nt xml does not look that hard but i dont want to do it as i have no way to test it)


RE: Hacking SBG900 - maxsteel3000 - 11-11-2011

sb5100 script

i also tried to load the default script, but was no use

thx for the link

what abt the three yellow light???