Author Topic: MSO1104z hacking possible?  (Read 7545 times)

0 Members and 1 Guest are viewing this topic.

Offline BoscoeTopic starter

  • Frequent Contributor
  • **
  • Posts: 266
MSO1104z hacking possible?
« on: February 07, 2016, 11:57:10 am »
Hi,

I need to hack my MSO1104z scope for the I2C decode option - might as well have all the others too!

I'm unable to do it atm. rigol.3owl.com is down and the other one (gotroot) only gives me an invalid code. Is there any other way of doing this? Is my scope compatible because it's mixed signal?

Thanks
 

Offline kripton2035

  • Super Contributor
  • ***
  • Posts: 2572
  • Country: fr
    • kripton2035 schematics repository
Re: MSO1104z hacking possible?
« Reply #1 on: February 07, 2016, 12:36:07 pm »
 

Offline CustomEngineerer

  • Frequent Contributor
  • **
  • Posts: 463
  • Country: us
Re: MSO1104z hacking possible?
« Reply #2 on: February 07, 2016, 05:13:12 pm »
Maybe stupid question but are you using the MSO1000Z patched version of rigup (rigup-0.4.1-mso1000z.zip)? If not you can find it on gotroot.ca.
 

Offline BoscoeTopic starter

  • Frequent Contributor
  • **
  • Posts: 266
Re: MSO1104z hacking possible?
« Reply #3 on: February 07, 2016, 05:41:41 pm »
Maybe stupid question but are you using the MSO1000Z patched version of rigup (rigup-0.4.1-mso1000z.zip)? If not you can find it on gotroot.ca.

I don't know what this is. Could you give me some more info?
 

Offline kripton2035

  • Super Contributor
  • ***
  • Posts: 2572
  • Country: fr
    • kripton2035 schematics repository
Re: MSO1104z hacking possible?
« Reply #4 on: February 07, 2016, 07:45:23 pm »
 
The following users thanked this post: Pirapoense

Offline BoscoeTopic starter

  • Frequent Contributor
  • **
  • Posts: 266
Re: MSO1104z hacking possible?
« Reply #5 on: February 07, 2016, 08:08:29 pm »
he means here : http://gotroot.ca/rigol/riglol-103d/

Yes, this doesn't work for me. It says it's invalid and I've tried a few unlock options - all didn't work.
 

Offline CustomEngineerer

  • Frequent Contributor
  • **
  • Posts: 463
  • Country: us
Re: MSO1104z hacking possible?
« Reply #6 on: February 07, 2016, 08:23:35 pm »
he means here : http://gotroot.ca/rigol/riglol-103d/

No, I was referring to http://gotroot.ca/rigol/rigup-0.4.1-mso1000z.zip .

Its a version of the rigup program that has been patched to work with MSO1000Z memory dump. The link you provided doesn't list MSO1000Z as an option so I would it assume it doesn't work for those scopes, but since I haven't used it I could be wrong.
 

Offline BoscoeTopic starter

  • Frequent Contributor
  • **
  • Posts: 266
Re: MSO1104z hacking possible?
« Reply #7 on: February 08, 2016, 08:21:26 am »
he means here : http://gotroot.ca/rigol/riglol-103d/

No, I was referring to http://gotroot.ca/rigol/rigup-0.4.1-mso1000z.zip .

Its a version of the rigup program that has been patched to work with MSO1000Z memory dump. The link you provided doesn't list MSO1000Z as an option so I would it assume it doesn't work for those scopes, but since I haven't used it I could be wrong.

Are there any instructions on how to use this? The readme just tells you how you should not ask questions and read but it's doesn't provide any information!
 

Offline CustomEngineerer

  • Frequent Contributor
  • **
  • Posts: 463
  • Country: us
Re: MSO1104z hacking possible?
« Reply #8 on: February 08, 2016, 08:30:22 am »
« Last Edit: February 08, 2016, 08:32:44 am by CustomEngineerer »
 

Offline bdpdx

  • Newbie
  • Posts: 1
  • Country: us
Re: MSO1104z hacking possible?
« Reply #9 on: April 16, 2019, 10:55:55 am »
I updated my MSO1104Z tonight and enabled all the options.  I have the updated 00.04.04.SP4 firmware (early 2019).

1) Use a JTAG reader with openocd to read the memory of your device.  See https://www.eevblog.com/forum/testgear/sniffing-the-rigol_s-internal-i2c-bus/msg569236/#msg569236 for details.

2) I used a Segger J-Link hooked up to my Mac, installed openocd via Homebrew.
    - had to add "adapter_khz 10000" to my interfaces/jlink.cfg
    - had to issue a "halt" command from the telnet session once the scope was up and running.

3) I dumped memory, then compiled rigup 1.4.2 on my Mac and ran `rigup scan mso1104z.bin > mso1104z.txt` (the bin file I dumped following the above post).

4) I expect it's due to the new firmware, but in the mso1104z.txt file the serial number was wrong.  On your scope go to System > System Info and edit the mso1104z.txt file with your correct serial number.

5) Run `rigup license mso1104z.txt 0x1C0FF` and you'll get a license string that will enable all options.
 

Offline just me

  • Contributor
  • Posts: 17
  • Country: us
Re: MSO1104z hacking possible?
« Reply #10 on: August 25, 2021, 06:38:22 am »
Hello. I'm kinda new to these forums,so pardon any noob issues. Without going into all the facts,I just want you to know that I'm recovering from a traumatic event,not covid,and I'm partially paralyzed and lacking some of my faculties. I have a Rigol MSO1104Z scope that I would like to enable all the options. I have only succeeded in updating it to the latest firmware. 00.04.04.SP4.I have tried to follow all of the instructions and suggestions but I can't seem to make anything work. I've downloaded compressed files with the GEL files only to not be able to extract anything. And yes I did rename the files to .rar first. PLEASE could someone provide a condensed instructions with needed links to the needed files. PLEASE. I want to give this scope to my nephew before he goes to college with all options enabled. I appreciate any help.
 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 3212
  • Country: pt
Re: MSO1104z hacking possible?
« Reply #11 on: August 25, 2021, 02:04:57 pm »
Hello. I'm kinda new to these forums,so pardon any noob issues.

Just follow the message right before yours. Make the JTAG dump. If you want, after that, contact me and I'll help you generating the license.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf