Author Topic: Hacking the Rigol MSO5000 series oscilloscopes (Read 917802 times)

thm_w · « **Reply #1100 on:** June 10, 2019, 10:22:59 pm »

Quote from: Alex18 on June 10, 2019, 06:09:51 pm

Dear All,
a little help to a novice: I flashed 01.01.04.04 on my MSO5074 and while I can ping the scope, ssh gives me "connection refused"... anyone has experienced this?

Its mentioned in this thread, SSH is disabled in that FW. You can either patch to enable it, or directly patch the FW for the options and avoid SSH altogether:
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg2251401/#msg2251401

w_m0zart@eevblog · « **Reply #1101 on:** June 13, 2019, 09:34:58 am »

Two weeks ago I ordered at the company batronix an mso5074, which software version 01.01.04.04 on it. After reading through pages 20 to 47 I was confident enough to install the patched firmware. With that the oscilloscope has now all features enabled.

On general remark though about this oscilloscpe, which has nothing to do with the patch, is that the input impedance cannot be switched to 50Ohms. The option is greyed out. Standard is 1MOhm. And we would need to use external feed through terminators to realize this. If someone would need this, the option would be to go for the MSO7000 Series. I have not seen anywhere if someone was able to patch that oscilloscope as well with success.

Sighound36 · « **Reply #1102 on:** June 13, 2019, 09:43:50 am »

You could wait for the DSO 8000 or just use some genuine 50 Ohm terminated BNC adapters that way you would know that the consistency of the measurement you are making will be accurate.

tv84 · « **Reply #1103 on:** June 13, 2019, 05:16:20 pm »

Just for the record, mine is HW 01.01.000.

TopLoser · « **Reply #1104 on:** June 13, 2019, 05:21:13 pm »

Interesting you only have one bandwidth upgrade installed tv84.

How could that have happened?!

tv84 · « **Reply #1105 on:** June 13, 2019, 05:27:35 pm »

Quote from: TopLoser on June 13, 2019, 05:21:13 pm

Interesting you only have one bandwidth upgrade installed tv84.

How could that have happened?!

"One option to rule them all..."

TopLoser · « **Reply #1106 on:** June 13, 2019, 05:53:26 pm »

Quote from: tv84 on June 13, 2019, 05:27:35 pm

Quote from: TopLoser on June 13, 2019, 05:21:13 pm
Interesting you only have one bandwidth upgrade installed tv84.

How could that have happened?!

"One option to rule them all..."

Not a ‘feature’ now then!

Frex · « **Reply #1107 on:** June 29, 2019, 01:49:52 pm »

Hello all,

First thank to all they have contributed to make the hack possible (then Rigol first of all !

).
I'm a little bit confused in the large amount of pages/posts in the thread and not shure to have found latest right info.
I there a way to have a link on a post with step by step procedure to hack the scope ?
I don't have already order the scope, but plane to do it soon, so i would be ready !

Thanks all.

Frex

(Maybe majors posts about the hack could be linked in the first post of the thread for an easiest acces ? ).

Martin72 · « **Reply #1108 on:** June 29, 2019, 02:39:28 pm »

Hi,

Everyone have to search for, there´s nobody who have all the posts in mind by numbers..

Except me

Procedure

(Joke, have to search for, too)

Frex · « **Reply #1109 on:** July 01, 2019, 03:51:30 pm »

Thank you !

So i have another question, is there any MSO5000 owners that had played with histogram analysis ?
It would be great to look how it perform for measuring phase RMS noise...
I somebody want to try

Frex

texaspyro · « **Reply #1110 on:** July 07, 2019, 02:41:58 am »

I got in my MSO5000. Seems to work well. Mfg date was 20 Feb 2019. HW 01.00.000 FW 00.01.01.04.04 Screen is nice and bright. Fan is nice and quiet.

Only complaint is the rubber boots on the probe BNCs. They like to rotate without turning the BNC shell... makes it a pain to attach / remove the probes.

NoisyBoy · « **Reply #1111 on:** July 07, 2019, 03:27:29 am »

That's the first thing I replaced, they are very tight and a pain to pull off.

I went with this: https://www.ebay.com/itm/25-BNC-Female-Cap-Plug-Caplugs-Black-Easy-EZ-Pull-New-Protection-Caps-Dust-Cover/121430968091?ssPageName=STRK%3AMEBIDX%3AIT&_trksid=p2057872.m2749.l2649

A little loose, but very easy to put on and take off.

texaspyro · « **Reply #1112 on:** July 07, 2019, 03:35:33 am »

Quote from: NoisyBoy on July 07, 2019, 03:27:29 am

That's the first thing I replaced, they are very tight and a pain to pull off.

No, I'm talking about the black rubber boots/insulators on the end of the scope probe cables... not the dust covers on the scope BNC connectors.

TK · « **Reply #1113 on:** July 07, 2019, 01:11:29 pm »

Quote from: texaspyro on July 07, 2019, 02:41:58 am

I got in my MSO5000. Seems to work well. Mfg date was 20 Feb 2019. HW 01.00.000 FW 00.01.01.04.04 Screen is nice and bright. Fan is nice and quiet.

Only complaint is the rubber boots on the probe BNCs. They like to rotate without turning the BNC shell... makes it a pain to attach / remove the probes.

I think you are not handling them correctly... if you push the probe BNC in (it has a spring mechanism), then rotates very easily.

texaspyro · « **Reply #1114 on:** July 07, 2019, 05:20:24 pm »

Quote from: TK on July 07, 2019, 01:11:29 pm

I think you are not handling them correctly... if you push the probe BNC in (it has a spring mechanism), then rotates very easily.

Possibly, I've only been using scope probes for around 50 years...

Removing the probes seems to be the most problematic.

Martin72 · « **Reply #1115 on:** July 07, 2019, 05:48:32 pm »

Hi,
This thread here is for questions about hacking the 5000, common questions would fit here.
Thankyou !

adras · « **Reply #1116 on:** July 10, 2019, 12:10:21 am »

Just to make sure I understand correctly. I can upgrade the MSO 5072 to a MSO 5354 with the procedure mentioned in this thread?

Do I also unlock the function generator?

maginnovision · « **Reply #1117 on:** July 10, 2019, 02:22:07 am »

Quote from: adras on July 10, 2019, 12:10:21 am

Just to make sure I understand correctly. I can upgrade the MSO 5072 to a MSO 5354 with the procedure mentioned in this thread?

Do I also unlock the function generator?

Yes, you'll just be lacking some probes.

N2tl · « **Reply #1118 on:** July 13, 2019, 12:21:39 am »

mabl's summary of best practices, with helpful links, worked a treat on a 5074 scope just received from TEquipment. No test signal overshoot noticed, before or after. Hardware shown as 1.0. After patch applied, all options shown as "forever."

ebastler · « **Reply #1119 on:** July 13, 2019, 07:33:03 am »

Quote from: N2tl on July 13, 2019, 12:21:39 am

mabl's summary of best practices, with helpful links, worked a treat

You are referring to this post, right?
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg2251401/#msg2251401

adras · « **Reply #1120 on:** July 13, 2019, 10:48:55 am »

Thanks for that reply. Got a fully unlocked scope as well now. Gotta make some tests now.

adras · « **Reply #1121 on:** July 13, 2019, 10:50:18 am »

Looking at the questions from myself and others. How about we add some information into the starting post of this thread? Then we have a central place. Of course it takes some time to keep it up to date, but on the other hands, people wouldn't need to search through the whole thread.

oliv3r · « **Reply #1122 on:** July 23, 2019, 07:22:26 pm »

Quote from: tv84 on June 13, 2019, 05:27:35 pm

Quote from: TopLoser on June 13, 2019, 05:21:13 pm
Interesting you only have one bandwidth upgrade installed tv84.

How could that have happened?!

"One option to rule them all..."

Ahh I'm so envious. I so wonder what the differences are between the two hardware revisions. DAAaavveeee tear another one down and compare it for us

oliv3r · « **Reply #1123 on:** July 23, 2019, 07:24:43 pm »

Quote from: adras on July 13, 2019, 10:50:18 am

Looking at the questions from myself and others. How about we add some information into the starting post of this thread? Then we have a central place. Of course it takes some time to keep it up to date, but on the other hands, people wouldn't need to search through the whole thread.

Wish it where so easy, the original author is long gone and awol, and I yet have to receive a pull request on https://gitlab.com/riglol/rigolee or an update on the wiki https://gitlab.com/riglol/rigolee/wikis/home

While I admit I have been tardy (not, just super busy :p) I'll pick up on the subject again once I have more time.

I'm still waiting for someone to share the exact value of the resistor of the uart TX line, so I can solder that

and I've almost started playing with my FPGA board again, trying to write some code helping to identify the pin used by the uart's RX.

adras · « **Reply #1124 on:** July 29, 2019, 12:56:47 pm »

Quote from: oliv3r on July 23, 2019, 07:24:43 pm

Quote from: adras on July 13, 2019, 10:50:18 am
Looking at the questions from myself and others. How about we add some information into the starting post of this thread? Then we have a central place. Of course it takes some time to keep it up to date, but on the other hands, people wouldn't need to search through the whole thread.
Wish it where so easy, the original author is long gone and awol, and I yet have to receive a pull request on https://gitlab.com/riglol/rigolee or an update on the wiki https://gitlab.com/riglol/rigolee/wikis/home

While I admit I have been tardy (not, just super busy :p) I'll pick up on the subject again once I have more time.

I'm still waiting for someone to share the exact value of the resistor of the uart TX line, so I can solder that and I've almost started playing with my FPGA board again, trying to write some code helping to identify the pin used by the uart's RX.

I was hoping a moderator could add the stuff with a notification like "Added by moderator" or something.

Besides that, I just ran into a problem.

Starting from today, as soon as I connect the LAN cable and boot up the oscilloscope it stops reacting to any input after around 7 seconds.

I tried it a couple of times, without LAN(with internet) connected, the oscilloscope works fine.
But WITH LAN connected, it stops reacting to the touch screen, buttons and knobs after around 5-7 seconds.
It seems like the oscilloscope is deactivating itself because it checks with a server and figures out it got hacked.
It worked fine yesterday.
I also disconnected all probes except one which is connected to the test signal. But even without a probe connected I've got the same issue.

I'm using the DS5000Update_01.01.04.04.GEL firmware

Did anybody else notice that?


EEVblog Main Site	EEVblog on Youtube	EEVblog on Twitter	EEVblog on Facebook	EEVblog on Odysee

Author Topic: Hacking the Rigol MSO5000 series oscilloscopes (Read 917802 times)

Share me