Need license.dat file from Agilent DSO80000B scope with memory option 001

[Jwalling]

I'm looking for a license.dat file from a DSO80000B series scope that has the memory option installed (option 001). It should be located in the c:\scope\bin folder. Anybody have one they could share?
One with option 003 (High speed serial) would also be welcome.
Thanks!

[swperk]

How about a license.dat file from a DSO81204A with options 001/003/004/021?

[Jwalling]

Sure, that would be great! Thanks!

[G0HZU]

I dug about inside the scope program (Windows) and created a couple of valid licence keycodes for these scopes here if that helps?

The dat files are here:

https://www.eevblog.com/forum/testgear/re-enabling-options-on-an-agilent-dso81204a/msg1410694/#msg1410694

The scope generates the .dat file entries based on the nnn-nnnnnnnnnnnn keypad code entered at the front panel.

[swperk]

Here are the contents of my license.dat file with four options enabled:

FEATURE 54857_memory agilent 1.0 permanent uncounted \
   HOSTID=VDH=204AMY44000238 SIGN=189B75364D9C
FEATURE clock agilent 1.0 permanent uncounted \
   HOSTID=VDH=204AMY44000238 SIGN=36280F2C1F4A
FEATURE ezjit agilent 1.0 permanent uncounted \
   HOSTID=VDH=204AMY44000238 SIGN=6C92E6EC3270
FEATURE lowspeed agilent 1.0 permanent uncounted \
   HOSTID=VDH=204AMY44000238 SIGN=35162C869A44


Please keep me posted with the results of your experiments!

[G0HZU]

When I still had access to the DSO80404B I did experiment with some vulnerabilities in the licensing code within the scope SW and it is possible to produce a common dat file that unlocks pretty much every option on every infiniium scope model that the firmware supports. i.e. the same licence file contents will unlock all(?) options on ALL infiniium scopes regardless of model type or serial number.
It certainly worked on the old DSO80404B I had here and the model number and serial number was not included in the (generic) licence file I created.  Scary stuff and I don't think it would be wise to release this licence into the wild, at least not for a few more years have gone by and the affected test gear is of little commercial value.

[swperk]

Are you talking about the AgScope.exe file?

[G0HZU]

Yes, that's the main program file for the scope and it should be in the c:\scope\bin folder.

[darkstar49]

Am I correct assuming the key generation scheme is (still) unknown for the 80K series ?? (and those using the same firmware...)

[G0HZU]

Am I correct assuming the key generation scheme is (still) unknown for the 80K series ?? (and those using the same firmware...)

I think I know the key generation scheme for all Infiniium scopes that use the 5.71 firmware and that includes the 80k series. I've generated numerous keys for two different 80k scopes. I've also generated keys for other Agilent gear.  I don't think it's a very secure system so I don't think this is a difficult or demanding task. I'm from an RF background rather than software (and I'm quite old!) and I managed it?

The DSOX2000 and 3000 hacking thread is about 5 years old and I think they are still hacking these scopes via crude and dodgy patches. I've never used one of these scopes or seen the licensing scheme they use but I expected by now that someone would have progressed to a more elegant/safer solution via keycodes?

I think you could also hack the 80k series scopes with a SW patch but it is a bit of a crude and messy way to do it.

[darkstar49]

@G0HZU : you don't like PM's as it seems...  ;-)   (PM was blocked...??)

I'd like to exchange with you on this...

[ericpavel]

Am I correct assuming the key generation scheme is (still) unknown for the 80K series ?? (and those using the same firmware...)

I think I know the key generation scheme for all Infiniium scopes that use the 5.71 firmware and that includes the 80k series. I've generated numerous keys for two different 80k scopes. I've also generated keys for other Agilent gear.  I don't think it's a very secure system so I don't think this is a difficult or demanding task. I'm from an RF background rather than software (and I'm quite old!) and I managed it?

The DSOX2000 and 3000 hacking thread is about 5 years old and I think they are still hacking these scopes via crude and dodgy patches. I've never used one of these scopes or seen the licensing scheme they use but I expected by now that someone would have progressed to a more elegant/safer solution via keycodes?

I think you could also hack the 80k series scopes with a SW patch but it is a bit of a crude and messy way to do it.

I owned the agilent e8257 and e 8267d do you think you can help me to add some options on them


Sent from my SM-N950F using Tapatalk

[jasonbrent]

G0HZU,

Can you share any more details on your methods?

I have a 3K series i would like to liberate and would much prefer key methods over command argument mods.

I understand if not.

(Cant PM you, so.... :-)

Thank you,

-j

[ericpavel]

G0HZU,

Can you share any more details on your methods?

I have a 3K series i would like to liberate and would much prefer key methods over command argument mods.

I understand if not.

(Cant PM you, so.... :-)

Thank you,

-j

Hello
I can give you all information you need

Sent from my SM-N950F using Tapatalk

[jasonbrent]

G0HZU,

Can you share any more details on your methods?

I have a 3K series i would like to liberate and would much prefer key methods over command argument mods.

I understand if not.

(Cant PM you, so.... :-)

Thank you,

-j

Hello
I can give you all information you need

Sent from my SM-N950F using Tapatalk

Ok....do share.