+- Haxorware Forums (http://www.haxorware.com/forums)
+-- Forum: General (http://www.haxorware.com/forums/forumdisplay.php?fid=6)
+--- Forum: Modems (http://www.haxorware.com/forums/forumdisplay.php?fid=7)
+--- Thread: SB6190 Uncapping in process. Suggestions? (/showthread.php?tid=4307)
SB6190 Uncapping in process. Suggestions? - colin669 - 02-10-2016
Hi everyone,
I will uncap My SB6190!
I have all pre-requisite knowledge on how to do what I'm asking except the actual knowledge of the process.
My Magic tells Me the firmware blocks every network request and push for SNMP, HTTP, Telnet, etc. to the modem from My LAN. I have to flash the firmware.
I know I need:
USB JTAG
Haxorware firmware - How do I create it from the extracted firmware data?
Assistance is always appreciated. Will pray for you for your help.
Update #1: Added modem photo, added a to buy list and changed subject title.
To buy:
http://usbjtag.com/
http://www.ebay.com/itm/1600-Heat-Resistant-Ceramic-Stainless-Steel-Tweezers-Anti-static-Ceramic-Tweeze-/182032416007?hash=item2a61fa3d07:g:tf8AAOSwPc9WyvFW
http://www.ebay.com/itm/5-pairs-Wire-Kit-Test-Hook-to-Hook-Clip-Grabbers-Probe-Multimeter-Arduino-/201502669119?hash=item2eea7eb93f:g:b7cAAOSwa-dWlnPk
http://www.ebay.com/itm/10PCS-20CM-Female-to-Female-1-Pin-Plug-Jumper-Cable-Wires-Multicolor-CP-/331843337593?hash=item4d43677d79:g:pI4AAOSwtO5XIriP
http://www.ebay.com/itm/10-pcs-40-Pin-2-54-mm-Single-Row-Pin-Header-Strip-PCB-USA-SELLER-Free-Shipping-/231558434048?hash=item35e9f54d00:g:iS4AAOSwgkRVUF7E
http://www.ebay.com/itm/Desoldering-Pump-Solder-Sucker-Removal-Vacuum-Tool-with-Aluminum-Body-Teflon-Tip-/300771835247?hash=item460765fd6f:g:8HoAAOSwBLlVa9aH
http://www.ebay.com/itm/Kester-951-Soldering-Flux-Pen-Low-Solids-No-Clean-10ml-Xbox-360-and-PS3-Reflows-/191293097438?hash=item2c89f505de:m:mxs7OKxjBPRwJMLM_qxmsfQ
http://www.ebay.com/itm/2-0mm-Desoldering-Braid-Wick-Solder-Remover-w-No-Residue-Rosin-Flux-5-FT-/141609015244?hash=item20f88e17cc:g:pioAAOSw8gVX7e7F
http://www.ebay.com/itm/Electronic-Solder-60-40-031-1-lb-Spool-/221476582187?hash=item339108732b:g:MLYAAOSwQJhUf1Pe
http://www.ebay.com/itm/X-TRONIC-MODEL-3010-XTS-70-WATT-VARIABLE-POWER-SOLDERING-IRON-STATION-/111514534868?hash=item19f6c8c3d4:g:ZDYAAOSw~FNUY4ET
http://www.ebay.com/itm/USB-To-RS232-TTL-UART-PL2303HX-Auto-USB-to-COM-Cable-Adapter-Module-For-Arduino-/222256263938?hash=item33bf817302:g:eGEAAOSwOyJX4Wqg
Update #2:
https://sourceforge.net/projects/sb6190.arris/files/
holy shit. yes plz.
Update #3:
http://www.usbjtag.com/vbforum/showthread.php?t=5188
Looks like I've got everything I need together. Time to consult a good friend who actually KNOWS how to solder QUITE PERFECTLY. I don't.
Will keep you all posted!!! Goal for all you h4x0rz out there: If possible in My studies I will create a software package that can takeover any SB6190 via LAN and install My custom firmware edition that I will design around uncapping and control of your ISP. Fuck them. They owe us money. Thieving bastards.
RE: SB6190 Uncapping in process. Suggestions? - Ictvtec - 02-10-2016
Good luck!!! Be sure to post steps and results for all of us to see!!
RE: SB6190 Uncapping in process. Suggestions? - colin669 - 02-10-2016
(02-10-2016, 06:41 AM)Ictvtec Wrote: Good luck!!! Be sure to post steps and results for all of us to see!!
Of course. That's what I live for. Hooking ya'll up.
RE: SB6190 Uncapping in process. Suggestions? - Ictvtec - 02-10-2016
U got a pic of the back of the modem?? I don't see the flash chip anywhere in the front.
RE: SB6190 Uncapping in process. Suggestions? - colin669 - 02-10-2016
(02-10-2016, 04:24 PM)Ictvtec Wrote: U got a pic of the back of the modem?? I don't see the flash chip anywhere in the front.
here's the pic you're asking for.
RE: SB6190 Uncapping in process. Suggestions? - snowden - 02-10-2016
(02-10-2016, 04:39 PM)colin669 Wrote:it looked like a tssop nand flash(02-10-2016, 04:24 PM)Ictvtec Wrote: U got a pic of the back of the modem?? I don't see the flash chip anywhere in the front.
here's the pic you're asking for.
where is spi flash then ?
RE: SB6190 Uncapping in process. Suggestions? - joejoe402012 - 02-10-2016
(02-10-2016, 07:33 PM)snowden Wrote:(02-10-2016, 04:39 PM)colin669 Wrote:it looked like a tssop nand flash(02-10-2016, 04:24 PM)Ictvtec Wrote: U got a pic of the back of the modem?? I don't see the flash chip anywhere in the front.
here's the pic you're asking for.
where is spi flash then ?
there is no longer a SPI Flash,all the new modems are nand flash only. and they have Bad blocks to prevent it from being copied so far.
RE: SB6190 Uncapping in process. Suggestions? - colin669 - 02-10-2016
(02-10-2016, 07:53 PM)joejoe402012 Wrote:(02-10-2016, 07:33 PM)snowden Wrote:(02-10-2016, 04:39 PM)colin669 Wrote:it looked like a tssop nand flash(02-10-2016, 04:24 PM)Ictvtec Wrote: U got a pic of the back of the modem?? I don't see the flash chip anywhere in the front.
here's the pic you're asking for.
where is spi flash then ?
there is no longer a SPI Flash,all the new modems are nand flash only. and they have Bad blocks to prevent it from being copied so far.
I don't need to copy the firmware, only flash to the NAND. How do I do that? I can compile the firmware from ARRIS, they released it! It's open source, documented link in My first post.
I'm looking into modding & compiling the firmware now. I have an SoC(Jetson TK1) if needed. I should be able to flash to NAND, skipping bad blocks, and the modem will run the My custom firmware just fine. Sounds perfect to Me.
RE: SB6190 Uncapping in process. Suggestions? - markoco - 02-10-2016
(02-10-2016, 04:39 PM)colin669 Wrote:(02-10-2016, 04:24 PM)Ictvtec Wrote: U got a pic of the back of the modem?? I don't see the flash chip anywhere in the front.
here's the pic you're asking for.
Can you tell me the numbers of the 48 pin SMT chip on the back of the board
and can you take a clearer picture of the front and back of the board in high resolution so it can be blown up with clarity and post them to a Dropbox and give me the link i will tell you what you will need to read the chip
(02-10-2016, 07:57 PM)colin669 Wrote:(02-10-2016, 07:53 PM)joejoe402012 Wrote:(02-10-2016, 07:33 PM)snowden Wrote:(02-10-2016, 04:39 PM)colin669 Wrote:it looked like a tssop nand flash(02-10-2016, 04:24 PM)Ictvtec Wrote: U got a pic of the back of the modem?? I don't see the flash chip anywhere in the front.
here's the pic you're asking for.
where is spi flash then ?
there is no longer a SPI Flash,all the new modems are nand flash only. and they have Bad blocks to prevent it from being copied so far.
I don't need to copy the firmware, only flash to the NAND. How do I do that? I can compile the firmware from ARRIS, they released it! It's open source, documented link in My first post.
I'm looking into modding & compiling the firmware now. I have an SoC(Jetson TK1) if needed. I should be able to flash to NAND, skipping bad blocks, and the modem will run the My custom firmware just fine. Sounds perfect to Me.
We need some one with coding experience to write a piece of software that can handle the remapping of the bad blocks so we can read the nand correctly just like the guys did for the XBOX so there is hope out there
RE: SB6190 Uncapping in process. Suggestions? - colin669 - 03-10-2016
(02-10-2016, 10:33 PM)markoco Wrote:(02-10-2016, 04:39 PM)colin669 Wrote:(02-10-2016, 04:24 PM)Ictvtec Wrote: U got a pic of the back of the modem?? I don't see the flash chip anywhere in the front.
here's the pic you're asking for.
Can you tell me the numbers of the 48 pin SMT chip on the back of the board
and can you take a clearer picture of the front and back of the board in high resolution so it can be blown up with clarity and post them to a Dropbox and give me the link i will tell you what you will need to read the chip
(02-10-2016, 07:57 PM)colin669 Wrote:(02-10-2016, 07:53 PM)joejoe402012 Wrote:(02-10-2016, 07:33 PM)snowden Wrote:(02-10-2016, 04:39 PM)colin669 Wrote: here's the pic you're asking for.it looked like a tssop nand flash
where is spi flash then ?
there is no longer a SPI Flash,all the new modems are nand flash only. and they have Bad blocks to prevent it from being copied so far.
I don't need to copy the firmware, only flash to the NAND. How do I do that? I can compile the firmware from ARRIS, they released it! It's open source, documented link in My first post.
I'm looking into modding & compiling the firmware now. I have an SoC(Jetson TK1) if needed. I should be able to flash to NAND, skipping bad blocks, and the modem will run the My custom firmware just fine. Sounds perfect to Me.
We need some one with coding experience to write a piece of software that can handle the remapping of the bad blocks so we can read the nand correctly just like the guys did for the XBOX so there is hope out there
Experienced coders would be great, but I can write the code Myself, it'll just take more time. That's a guarantee! I will get you a higher res photo set ASAP.
Numbers:
Spansion
S34ML01G200TF100541BB337 A
©12 Spansion