Products > Test Equipment
Possible GW Instek GDS-1000B hack
danymogh:
dude! you gotta share that parser of yours, it's pretty neat!
danymogh:
A basic info about the Lua App plugins:
The app consists of at least 4 files:
--- Code: ---[app.png] -- App Icon
[app.lua] -- App main lua file
[app.txt] -- App Description
[app.inf] -- App install information (more below)
--- End code ---
first of all, we need a script to swap the nibbles of 2 files.
1- app.txt
2- app.inf
I've created a simple nibbleswap.py python script that does that. for some reason, GW people thought of this as a way to obfuscate the app's info.
the app needs to be GunZipped in a folder with the apps' name just like the examples from the website or the SSH app I wrote as an example.
the [app.txt] is a brief explanation you see on the apps menu before opening the app.
the [app.inf] contains the install information with the following parameters:
--- Code: ---[0x32453030] -- Fix value(most probably)
[0x03] -- App Id - must be unique among all apps (see below)
[0x0] -- UNKNOWN
[/home/dso/DigitalFilter] -- App install location
[DigitalFilter.png] -- App Icon
[DigitalFilter.lua] -- App main lua file
[DigitalFilter.txt] -- App Description
[DigitalFilter.log] -- App log (not sure what the use is)?
[0x0] -- App run mode - 0x3-> embedded(not lua -> e.g. DVM , DataLog) , 0x0 -> from app lua file.
[0x1] -- UNKNOWN
[0x1] -- App uninstall-able flag. setting to 0 disables uninstall!
[V0.00] -- App version. increasing this seems to install another app apparently.
--- End code ---
the App Ids already occupied are :
--- Code: ---0 - Go-nogo
1 - DVM
2 - DataLog
3 - [empty]
4 - [empty]
5 - DigitalFilter
--- End code ---
So if you install the GW website apps you can't use the 0,1,2 and 5 for the ID parameter.
I've used #3 for the SSH app.
some more notes:
editing .inf files from SSH has no effect. the app has to be uninstalled and installed again.
installed information is stored in /home/dso/lua/NewLuaAPPInfo.txt
removing and creating an empty file causes all apps to be removed from the menu. (Excluding GO_NOGO App)
as an example of what can be done with the Lua, you can see the GO_NOGO.lua file which gives a pretty good understanding of how the app runs. the exposed Lua functions are in the /home/dso/lua directory. Also, I think doing a reflection like programming can give more insight into what functions are available on the Lua side.
kcbrown:
--- Quote from: yeager200 on December 12, 2020, 05:34:06 am ---I just got a brand new GDS-1054B with firmware 1.28 and I am running the code in the attached file. Yet it doesn't seem to accept these licenses. The unit gives me an error when I try all the options.
I may not have copied the ClearCode data correctly into the Javascript. I wasn't sure what the value for k should be. Can anyone help?
--- End quote ---
The file you attached is identical to what worked for me. The serial number you enter is case-sensitive. The serial number is what shows up on your scope in the dialog box that it shows when you hit Utility -> System -> System Info. You should enter it exactly as that box shows, case and all. Mine was all upper-case, and worked correctly.
Note that the GDS-1054B will not accept the spectrum analyzer. I didn't try any of the bandwidth keys because it looks like it's not going to have any effect, as it appears that the bandwidth is limited in hardware (see https://www.eevblog.com/forum/testgear/possible-gw-instek-gds-1000b-hack/msg3306636/#msg3306636).
Grifto45:
Hi I know it's been a while and I'm probably out of luck but is it still possible to hack it even after they locked the SSH acess?
ResistorRob:
--- Quote from: Grifto45 on March 10, 2021, 01:35:01 am ---Hi I know it's been a while and I'm probably out of luck but is it still possible to hack it even after they locked the SSH acess?
--- End quote ---
I read the first 2 pages of replies and it said you could downgrade the Firmware to version 1.8. Hack it, and then update the firmware to current.
You might want to read all 9 pages to see what all the latest developments are.
The Instek scope I would really like to hack is their MDO 2000. I've seen 1 comment ever with a guy claiming he did it, but never a post saying how to do it!
If I could get a MDO 4 channel scope for $1,400 then do a free update to unlock the 200MHz and all the decoding that would be very tempting indeed!
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version