DSOX6000 series - licence , have anyone tried to hack that scope ?

[TheDarkKnight]

Hi All,

Wanted to start a thread just like the other one, but instead based on the 6000 series.... just curious if anyone actually has one of these?

Or if anyone has access to one?  I wonder if the login creds for the 1k/2k/3k/4k series even works on this for telent?


Looking at the firmware cab file, it looks like the 'nk.bin.comp' is now 'nk.nth', and appears to possibly be a PGP encrypted file.... as I see all encrypted data, but there are text headers in there mentioning

1)  Symantec Trust Network100
2) Symantec Class 3 SHA256 Code Signing

plus some html links that point to DigiCert owned URLs.

I know this series and above is crazy expensive, and Keysight obviously cares much more about protection on these, so it may be a dead end with these, but wanted to put it out there in case anyone knows anything?

[Sparky]

An excellent topic for discussion!   

[Keysight DanielBogdanoff]

 

[TheSteve]

Hacking the dsox6000 series has already been discussed here, and done successfully. You just need to spend some time searching/reading.

If Keysight has made a change in newer firmware though, that has not been discussed.

[Keysight DanielBogdanoff]

Hacking the dsox6000 series has already been discussed here, and done successfully. You just need to spend some time searching/reading.

If Keysight has made a change in newer firmware though, that has not been discussed.

Not to my knowledge, but I've not read the internal software report for a little while.

[PhillyFlyers]

Hacking the dsox6000 series has already been discussed here, and done successfully. You just need to spend some time searching/reading.

If Keysight has made a change in newer firmware though, that has not been discussed.

'


Yeah, I see it in the 'MSO 6000...' thread...... and the login creds should be just like the 3T/4k, the MAC based login... script was posted on here somewhere way back!

DSOX6000 info:

https://www.eevblog.com/forum/testgear/agilent-mso-500060007000-anyone-hacked-these-scopes/msg1000597/#msg1000597


So looks like the same .lnk setup with options works fine...


But looking at that nk.nth file, at this point probably no modified CAB files will be possible...  as my guess it's a priv/pub keyset thing...

[Sparky]

Hi @Keysight DanielBogdanoff: A bit OT here, but I'm wondering if can you comment on DSO-X6000 series having lower max waveform update rate (~450k wfm/sec) compared to DSO-X3000/4000 series (~1000k wfm/sec)?  I suppose it is because of the increased sample acquisition rate of X6000 series; more data takes more time to process and therefore lower update rate?

Does X6000 have increased "blind time" compared to X4000 and therefore less efficient at capturing infrequent glitches?

I wonder if there is an option on X6000 series to limit the maximum sample rate to increase the waveforms/sec??

[eric6004]

Hello,
I tried the described procedure on a release 7.31 on DSOX6004A but without success.
The update file are extension KSX now and not CAB and renaming it does not work so installing .lnk does not work
Telnet access is also locked fully but on the principle the USB key should be sufficient.
Anyone had successfully achieved to unlock bandwidth from 1 G to 6G on this hardware + sw release

Help appreciated