atomized, jo det har jag förstå, börjar begripa mer om hur det hela fungerar och hänger ihop. Hittade även denna som jag tyckte var lite rolig, lustigt skriven men förmodar det är ett sätt att göra det på kanske, lägger in den strax så finns den här på forumet.
------------------------------------------------------------------
Find out this trick!
-------------------------------------------------------------------
About paired ke*ys.
We knows, that newcs supports nd$ paired cards with undocumented options:
<ekpair>********************************</ekpair>
<hwkey>****FA7********F6B803C58A****</hwkey>
(you can simply find *** values in attached dump to compare with yours dump )
(Latest Gbox.net also supports that paired cards.)
So how to get that ke*ys?
It possible to get ke*ys from memory dump.
_____________________________________________
How to get into box.........
open the box
and look for j514 on pcb
there you have 4 pin connection via
this is 232 ttl
connect 232 ttl to this j514 it is 4 pins via there..(add....using any ttl to rs232 converter)
and have putty or serial conection software
baudrate is 115200 8N1
you will see console booting up from box..
you have linux console now
---------------------------------------------------------------------------
how to extract the hwke*ys and ekpariedkey...
you need the card and valid subscribtion for hd channels for this box
switch off the power to the box..
but before switching off the box... tune in a HD channel first
and turn on the power without SC
now start upp the box and you get information
"insert smartcard in the reader" on OSD on tv
!!!!!!! don't do that.! (don't insert card yet)
you have to connect 232 and have console now...
take break interrupt
the magic key to interrupt is CTTRL+4
and you are inside ..linux console
shell is busybox
go to /NDS/bin/
start /.mor_epg_zapviasat &
you will get now the same OSD message now.. "insert smartcard in the reader"
do that..
now you got a hd picture
switch off the box on the front of box..
not power cable..
take dump from /dev/mem
with dd cmd dd if=/dev/mem of=/mnt/usb/somefile.bin
but you have to mount usb first, because too big file, about 268 mbyte
take this dump out and connect to your regular linux machine..
you have to search for some tags, but it is important to do the clean startup
because om RAM. after key extraction you don't need to go inside box
dont do that.. if you want to be safe .. have all your files on the usbflash
--------------------------------------
final step
just look in memory for 30 00 00 01 tag or 30 00 01
and after what 16 byte is the first key
and the second one is 10 00 00 tag from memory
You got paired ke*ys
-----------------------------
------------------------------------------------------------------
Plockat från annat forum och lite rättat språkligt.
Antar ovan beskriver lite hur man gör med JTAG osv.
Svara med citat
