Products > Test Equipment
Hacking the Rigol MSO8204 / MSO8000
(1/9) > >>
traxpalicaru:
Hi, I've been the happy owner of a Rigol MSO8204 2GHz 10GSa/ for a week now.  And of course, why not, we have to do tests on it.  More precisely, let's activate all the licenses.  I've seen it possible on earlier versions like the MSO5000.  As a result, with the help of user https://www.eevblog.com/forum/index.php?action=profile;u=94961BTO and a friend from Romania user https://www.eevblog.com/forum/profile/?u=92610 asp because I'm not as good at software as they are, I tried the script version for MSO5000.  At first my MSO8204 oscilloscope could not be accessed either via ADB or SSH. :-BROKE   But with his big brain asp managed to make a so-called update for opening port 22 for SSH.  After a few lost hours he also found the area in CFRAM where there should be Keys for licenses.  But at the moment the script is not right, the licenses do not activate.  I'm opening this topic more to thank them for trying to find a solution and because I want to post pictures of the inside of the oscilloscope because I couldn't find it on the web.  And maybe eventually someone will find the license solution.





Here is original photos https://drive.google.com/drive/folders/1jrgET-kSbf_1IEIezg8QdZ5eYb8Srk2g?usp=drive_link






--- Code: ---KEY1 = b''.join(pack('<I', x) for x in [0x03920001, 0x08410841, 0x18C32104, 0x318639C7])
KEY2 = b''.join(pack('<I', x) for x in [0x478AA887, 0x99A85895, 0x1770078, 0x87888798])
--- End code ---




--- Code: ---Version: 00.01.01.01.06
MAC: 00-19-AF-7E-04-83

/rigol/tools/fram is OK!

Reading CFRAM...
100%|██████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████| 8192/8192 [00:15<00:00, 536.29it/s]
Reading CFRAM done.

Applying new CFRAM...
100%|███████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████| 8192/8192 [02:52<00:00, 47.39it/s]
New CFRAM applied.

Key.data backup created.
New Key.data applied.
Activating: 2RL [MSO8000-2RL@47856CD43FD2E005B0441CACAE684909252D7D5205207CD880901F4BF4A110BA625290D47FC919E624E18A4BFECCA25E8B9E203BD026D0A3778B943992A59FA8]... unavailable.
Activating: 4CH [MSO8000-4CH@905C9C63AC9302632B5375648494D44B015BA182ED51E919FFF3EEDD936C34FB318AAF2A9B95F6E3B2F407136753DDAA174354764276BD610153207F66A636E4]... not activated.
Activating: 5RL [MSO8000-5RL@8368AF368E1197118F4BB459D4D5855373BBDD9945695CDD9A3080FEE1FBBFFEA76A90972696DF3E0C19B7870C8B3AA403467A566B63C827AC0B9CE35CD7CCBB]... unavailable.
Activating: AERO [MSO8000-AERO@16828851C599C3A0F708E23E25A4548A40B614999EC83BBFB0E83663230A74A37DA897A651756C372B15668E73FF41BFF600F3A38D05C6D300278C2F4703E5B1]... not activated.
Activating: ARINC [MSO8000-ARINC@5385B53858D80CC3AC57E502DB61FA6947666A9020B9FEFBA58BF49A66565528186BBBC5D5543B2C6ABFAB4A721F2CF3D6760C5109C55CEBB060257C84A0D14E]... not activated.
Activating: AUDIO [MSO8000-AUDIO@26319D5917E78275126F2CC06FFABBD789F35F819564EB39E4F2FCC2E7BBB441297C769F2C4DC92ED39028BB9F6C9A5D33792AAB81C0608411C9546467BA6B40]... not activated.
Activating: AUTO [MSO8000-AUTO@1592058F99EBE588E5F2B5A3CC7635E5D36FE665FDE99DF51DFF469E3C45CECBA67662F8A8CF3C50F7FCEDD420036226A916ABBDCFDE9AC8A786FE48A008EF14]... not activated.
Activating: BND [MSO8000-BND@3DC1F7E9C12EAE0AE0932E03268A59EC81EBD4EDAD2DB938588E58CBA0C0ADBB9DBCB4678B3D8924A3AACB293241D8AA72341F5512CE9A9EE27266B0BD71EF64]... not activated.
Activating: BW07T1 [MSO8000-BW07T1@04B9175FD0845ED677897B1651E7889350F3FCAF84DD639A05A3BEBE6950409F9641D05FC29FC25A2C5E1323B5F6F1E3FA2052B4C53620B1BC14B7387E43C9CB]... unavailable.
Activating: BW07T2 [MSO8000-BW07T2@0C64B0E801C667F5328AE52E49FFD65C30357F455A295D706947AAA7D4D6DD1402861FF59AC97B981904926DFE8B0BE7265DBB1AF131DEDE26310CB3AC318903]... unavailable.
Activating: BW07T3 [MSO8000-BW07T3@6D46F14DAF106162BB71C38C155ECBADD21DAF8CB4C99AEE35B7ACEE0B445D7E8EAEA7816A141C7D91A87D91C16B16E2809524347457F391C7FCC80FAF9A668C]... unavailable.
Activating: BW07T5 [MSO8000-BW07T5@25877F6476AE4BA5CDFD164507558D4973F99D710E5BEBB55C035495B16C5B7656CECA9868AA970BE2FB72B0612E9082E059BABE77517E9D5F1783800DE68D0A]... unavailable.
Activating: BW1T2 [MSO8000-BW1T2@498C14875DDF3BCA78ECDC57B51134F41D94B7F7B093126169448BE36BC3B1EB97029A0C7C0CF859B7B03CA0F43DFC771BD74B68502000DDA0488BDBE298E3CD]... unavailable.
Activating: BW1T3 [MSO8000-BW1T3@5C0F8FA801C8B57B35278E514CB958BA8811065C47D93ED0E7166BFAF1363A18384EC7AA539E5AB6C68BC418A314679B8B51FD2C4E22D36D15DB696648ED8B8E]... unavailable.
Activating: BW1T5 [MSO8000-BW1T5@34EC40171698848E32298AC096A0B118B19A85EDE2DB7E86EDC9AFAE6B6084916162C9FE1E057DB84FC68CE2AF28D874BAF36797C4709ED65F5D10B3261A6769]... unavailable.
Activating: BW2T3 [MSO8000-BW2T3@72E95D484D97813D1B485EBF1D9D57E73F1CBB6F8ACBE8E83A6BC4EA9844C5B61B0D2C9F5CF83B49B6A837EFCE4729DC9D9FC581066133B40844248E9EC8F46E]... unavailable.
Activating: BW2T5 [MSO8000-BW2T5@968B913A55E0C4A6F40B1973CC55D74ADA737D2151CBAA63C944D1088A8818474B27C132CBF5D8F58383AA20AA47E9AF76BE6888F9DB08F20A5A7DB225DF96E5]... unavailable.
Activating: BW3T5 [MSO8000-BW3T5@79A7866C6DE39DE65A1478D60DE4731E9D9B1D304E7B2D570D3987BE18413A5F3E6CBBE170EF3DCDFB905C933F3D923BD2EC732773D1897C937AABD404498DEE]... unavailable.
Activating: COMP [MSO8000-COMP@53DA985708CDCEABCA9275B3117E66C8FE37865AF2F3B7751C90903766DC1DD51FEF69BF292D2D71DA9DF0C96A517D5C6E93B776BB8DD14994A3763C6D41A84F]... not activated.
Activating: CTR [MSO8000-CTR@2DDD7593AEA4A149A7ED050CD784BAE90B0F3180625A1EAC1C776E0C26947FB13D02B2543970176D81B70B309CEEC78CD0631D63540195EFF9A8152F4CDEC61B]... not activated.
Activating: DG [MSO8000-DG@6E002F4E301B5E057277C6B9521639CDB7BB60FEA491DFF5E7AB7970ACD5C2301F13C6D662E5466BAF1C8AEE7608E99D57414B4454F1316B1D35D974D712D7CF]... unavailable.
Activating: DVM [MSO8000-DVM@742470E3648B8DD679D287372BE583A25F1271FE726C69F89D9F5AE3E49760932C099A70E870089FBFD8DDA102BDF9FEBD71D6E7F5C9797EFCE9DCC66DBACE6F]... not activated.
Activating: EDK [MSO8000-EDK@8B1EC10AF01540ACB2A9779A3B051265F24FF2DC173F7440ED1B88C741E28271A9D142F5C1170CDE51849A7AC2EB7D1CB919FCA17FBE9030C08EDE95AC51816F]... not activated.
Activating: EMBD [MSO8000-EMBD@89265A117FB207D90DFD9B6A1497886A19C15D5046E4C8FDF26E5843D4B7A2F4829A1C0C43CB1003EA4178EB1DCD2CC4AD774883217D6D9C8BB3A2219817BF9D]... not activated.
Activating: FLEX [MSO8000-FLEX@2533085AE17E12E90D3BD04C9F9D64E733DF33C973F5F2C362F24CB700D3A3BC2E5AFF8E57FFD593756DD5DFF44B06982A9FFE6F215B4EA0431CE39AD58FAC08]... not activated.
Activating: JITTER [MSO8000-JITTER@02A77C8546C24A0650389149A31ECEFB493B64087EE41DC9D6AB5570FECE33FF98FCB25F14B7975B2C20DDA84A1FC8B0418D2D6628528DA4FD3B36F222FBF28D]... not activated.
Activating: MASK [MSO8000-MASK@3A1C872E9380A6AC11D9962FD028CEE8F16A1EC241A7FB2120707846EF39E6E474446CC78576EBAF2F384E76FBD6F6C5F434563E82B7E99542FF23013DC2BE81]... not activated.
Activating: MSO [MSO8000-MSO@9D30022E019106CD4C32BD4D857B7D4C2AE66917A2C9B646DE1B6BCEE71CDC1335C27B96608F26B3BB343A7455DE64C9F51283B51915310D21D4E1DA96EF12A0]... activated.
Activating: PWR [MSO8000-PWR@7C4EBBBEE9429342F024AD06F8354495CD8B2804E6F8306E2F1F3CEC20829F3B7E5B5D1AB27065A5912338F5FB36F65DDB8D1D7DD705A378F68EEE6121BA03D5]... not activated.
Activating: SENSOR [MSO8000-SENSOR@A62ACB08A95B38BC3563FCFA5AA334F514C624E3673522DCC2105D8F2C5C05C257BCC7BA0E19ED038F40FAE90DDAE13098AFF20C81D89EE450DF8BA18CB59D3F]... not activated.
╒════════╤══════════╤═════════════════════════════════════════════════════╕
│ Code   │ Status   │ Description                                         │
╞════════╪══════════╪═════════════════════════════════════════════════════╡
│ COMP   │ ----     │ Computer Serial Triggering and Analysis(RS232/UART) │
├────────┼──────────┼─────────────────────────────────────────────────────┤
│ EMBD   │ ----     │ Embedded Serial Triggering and Analysis(IIC, SPI)   │
├────────┼──────────┼─────────────────────────────────────────────────────┤
│ AUTO   │ ----     │ Automotive Serial Triggering and Analysis(CAN/LIN)  │
├────────┼──────────┼─────────────────────────────────────────────────────┤
│ FLEX   │ ----     │ FlexRay Serial Triggering and Analysis              │
├────────┼──────────┼─────────────────────────────────────────────────────┤
│ AUDIO  │ ----     │ Audio Serial Triggering and Analysis(I2S)           │
├────────┼──────────┼─────────────────────────────────────────────────────┤
│ AERO   │ ----     │ MIL-STD 1553 Serial Triggering and Analysis         │
├────────┼──────────┼─────────────────────────────────────────────────────┤
│ DG     │ ----     │ Dual Channel WaveGen 25 MHz AWG                     │
├────────┼──────────┼─────────────────────────────────────────────────────┤
│ JITTER │ ----     │ Jitter and Real Time Eye Diagram Analysis           │
├────────┼──────────┼─────────────────────────────────────────────────────┤
│ PWR    │ ----     │ Integrated Power Analysis                           │
╘════════╧══════════╧═════════════════════════════════════════════════════╛
--- End code ---
asp:
UPDATE:
Check this post for the latest version:
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso8204-mso8000/msg5556207/#msg5556207

After a bit of |O |O, we did manage to activate all the licenses on the MSO8204. None of this would be possible without the help of BTO and DrMefistO.

I am not sure it will work on 8000A's but the script can be modified to accommodate that. I will try to update the script in the near future in order to upgrade the bandwidth as well (e.g. from MSO8064 to MSO8204)

In order to activate the MSO8000 you need to create a temp dir, download the attached script to the temp dir and than cd to temp dir.

1. python rigol_mso8000_kg.py -r <mso8000_ip>
    # this will generate a .priv file. do not delete it
2. reboot scope (REALLY IMPORTANT) -> wait for the scope to be up and running again
3. python rigol_mso8000_kg.py <mso8000_ip>
4. done

##notice the second time you need to run it without -r
traxpalicaru:
Officially RIGOL MSO8204 is hacked after 2 white nights :-DD  After the update, the licenses remain active :-// :-DD

Thanks and rate to  asp   BTO   DrMefistO.  :-+
 





Now we are going to sleep (4:54am Romania)  :=\ :=\
BTO:

--- Quote from: traxpalicaru on June 26, 2024, 10:58:24 pm ---Hi, I've been the happy owner of a Rigol MSO8204 2GHz 10GSa/ for a week now.  And of course, why not, we have to do tests on it.  More precisely, let's activate all the licenses.  I've seen it possible on earlier versions like the MSO5000.  As a result, with the help of user https://www.eevblog.com/forum/index.php?action=profile;u=94961BTO and a friend from Romania user https://www.eevblog.com/forum/profile/?u=92610 asp because I'm not as good at software as they are, I tried the script version for MSO5000.  At first my MSO8204 oscilloscope could not be accessed either via ADB or SSH. :-BROKE   But with his big brain asp managed to make a so-called update for opening port 22 for SSH.  After a few lost hours he also found the area in CFRAM where there should be Keys for licenses.  But at the moment the script is not right, the licenses do not activate.  I'm opening this topic more to thank them for trying to find a solution and because I want to post pictures of the inside of the oscilloscope because I couldn't find it on the web.  And maybe eventually someone will find the license solution.

--- End quote ---


--- Quote ---I'm opening this topic more to thank them for trying to find a solution
--- End quote ---
You're Welcome mate, No problem, it was fun.


--- Quote --- And maybe eventually someone will find the license solution.
--- End quote ---
:-DD

Oh yess...  Eventually, Eon's from now a race of superintelligent human beings will figure out the solution to this problem that has plagued
mankind for eon's

MEANWHILE.............
AND.... THE VERY NEXT DAY
- A SOLUTION WAS FOUND
- AND WE OURSELVES FOUND THE SOLUTION
 :-DD
BTO:

--- Quote from: asp on June 27, 2024, 01:24:21 am ---After a bit of |O |O, we did manage to activate all the licenses on the MSO8204. None of this would be possible without the help of BTO and DrMefistO.

I am not sure it will work on 8000A's but the script can be modified to accommodate that. I will try to update the script in the near future in order to upgrade the bandwidth as well (e.g. from MSO8064 to MSO8204)

In order to activate the MSO8000 you need to create a temp dir, download the attached script to the temp dir and than cd to temp dir.

1. python rigol_mso8000_kg.py -r <mso8000_ip>
    # this will generate a .priv file. do not delete it
2. reboot scope (REALLY IMPORTANT) -> wait for the scope to be up and running again
3. python rigol_mso8000_kg.py <mso8000_ip>
4. done

##notice the second time you need to run it without -r

--- End quote ---



--- Quote ---I am not sure it will work on 8000A's but the script can be modified to accommodate that.
--- End quote ---
So.. What are your thoughts on the MSO7000 Series ? 
i think it should be possible..Right ?


--- Quote ---I will try to update the script in the near future in order to upgrade the bandwidth as well (e.g. from MSO8064 to MSO8204)

--- End quote ---
Didn't you already get it on 2GHz though ?

Navigation
Message Index
Next page
There was an error while thanking
Thanking...

Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod