Author Topic: Possible GW Instek GDS-1000B hack  (Read 72885 times)

deano76 and 1 Guest are viewing this topic.

Online nctnico

  • Super Contributor
  • ***
  • Posts: 26752
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #225 on: March 10, 2021, 05:46:32 am »
Hi I know it's been a while and I'm probably out of luck but is it still possible to hack it even after they locked the SSH acess?

I read the first 2 pages of replies and it said you could downgrade the Firmware to version 1.8. Hack it, and then update the firmware to current.
You might want to read all 9 pages to see what all the latest developments are.

The Instek scope I would really like to hack is their MDO 2000. I've seen 1 comment ever with a guy claiming he did it, but never a post saying how to do it!
If I could get a MDO 4 channel scope for $1,400 then do a free update to unlock the 200MHz and all the decoding that would be very tempting indeed!
A different route is to buy a GDS2000-E series (IIRC there is a 4 channel 70MHz model) and enable the MDO feature. That will work.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline danymogh

  • Regular Contributor
  • *
  • Posts: 51
  • Country: ge
Re: Possible GW Instek GDS-1000B hack
« Reply #226 on: March 10, 2021, 07:12:10 am »
Hi I know it's been a while and I'm probably out of luck but is it still possible to hack it even after they locked the SSH acess?

you can use my SSH enable app, however, the SSH has nothing to do with the license.

 
The following users thanked this post: tatel

Online Mortymore

  • Frequent Contributor
  • **
  • Posts: 434
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #227 on: March 10, 2021, 11:50:25 am »
Hi I know it's been a while and I'm probably out of luck but is it still possible to hack it even after they locked the SSH acess?

I read the first 2 pages of replies and it said you could downgrade the Firmware to version 1.8. Hack it, and then update the firmware to current.
You might want to read all 9 pages to see what all the latest developments are.

The Instek scope I would really like to hack is their MDO 2000. I've seen 1 comment ever with a guy claiming he did it, but never a post saying how to do it!
If I could get a MDO 4 channel scope for $1,400 then do a free update to unlock the 200MHz and all the decoding that would be very tempting indeed!
A different route is to buy a GDS2000-E series (IIRC there is a 4 channel 70MHz model) and enable the MDO feature. That will work.

And unlock it up to 300MHz, that's something that they don't even sell.
EDIT: Only 2000A series goes up to 300MHz, not the 2000E's ("officially" up to 200MHz)

« Last Edit: March 10, 2021, 12:04:13 pm by Mortymore »
 

Offline tatel

  • Frequent Contributor
  • **
  • Posts: 427
  • Country: es
Re: Possible GW Instek GDS-1000B hack
« Reply #228 on: April 19, 2021, 11:34:20 pm »
Got my GDS-1054B this afternoon. It has firmware 1.28. Serial decoding was already enabled. Firmware 1.29 just adds a couple translations so I'm leaving it out.

Downgrade wasn't needed. All done straight in FW 1.28.

Upgraded with the file posted by Mortymore (reply #83). Edited to change lines 26-27 so it gets the last clear code posted by wgoeo (reply #136)

Code: [Select]
a[0] = (a[0] + ((16 * a[1] + 0x19495CFF) ^ (a[1] + k) ^ ((a[1] >> 5) + 0x257130A3)))|0;
a[1] = (a[1] + ((16 * a[0] + 0x3D1B58BA) ^ (a[0] + k) ^ ((a[0] >> 5) + 0x74B0DC51)))|0;

Changes saved. Extension changed to .html. Loaded in web browser (up-to-date firefox). Worked like a charm.

SA option doesn't work. I wasn't expecting it to work, but after reading some previous post, I tried it. So it didn't worked for me, either.

BW upgraded to 100 MHz. Segmented memory and search enabled, too.

Apps installed, too. Datalog, digital filter, DVM... and SSH (last one has been somewhat orgasmic) :-+

SSH app installed with Danymog's SSH.7z file posted in reply #226. However, I'm not sure how password reset is supposed to work. I tried setting a user password in I/O->ethernet menu, also resetting (to what?) password in SSH app, but I was unable to log in until I tried the password posted by wgoeo in reply #3

Now I'm in >:D

@Danymog: so now it's known how to write Lua apps that work in these scopes, I guess...  :clap:

Many thanks to all contributors.
 
The following users thanked this post: Mortymore

Offline danymogh

  • Regular Contributor
  • *
  • Posts: 51
  • Country: ge
Re: Possible GW Instek GDS-1000B hack
« Reply #229 on: April 20, 2021, 05:58:42 pm »

Apps installed, too. Datalog, digital filter, DVM... and SSH (last one has been somewhat orgasmic) :-+

SSH app installed with Danymog's SSH.7z file posted in reply #226. However, I'm not sure how password reset is supposed to work. I tried setting a user password in I/O->ethernet menu, also resetting (to what?) password in SSH app, but I was unable to log in until I tried the password posted by wgoeo in reply #3

Now I'm in >:D

@Danymog: so now it's known how to write Lua apps that work in these scopes, I guess...  :clap:

Many thanks to all contributors.

reset to wgoeo password. I didn't state it intentionally. also you can choose a password of your choosing by editing the lua file ;)
 

Offline tatel

  • Frequent Contributor
  • **
  • Posts: 427
  • Country: es
Re: Possible GW Instek GDS-1000B hack
« Reply #230 on: April 20, 2021, 09:09:22 pm »
Understood. Thank you!
 

Offline fbugallo

  • Newbie
  • Posts: 1
  • Country: ar
Re: Possible GW Instek GDS-1000B hack
« Reply #231 on: May 26, 2021, 03:10:33 pm »
Hello :),
I am from Argentina, I just bought the GDS-1202b equipment.
I have no previous experience with an oscilloscope.

It came with Firmware version 1.29.
The script works perfect and enable all the functions except the one titled "fixed 4 measurement".
What is this function for?
can it be enabled?

Greetings.
 

Offline woodbinka

  • Newbie
  • Posts: 1
  • Country: cz
  • Wubba-lubba dub dub
Re: Possible GW Instek GDS-1000B hack
« Reply #232 on: July 17, 2021, 02:44:41 pm »
Hello there. I have a GW Instek 1104B and I wanted to install the hacks. I managed to downgrade to 1.12 (boy, the scope is picky with USB flashdiscs), install most of the licenses and upgrade back to 1.29 successfully. However I couldn't install the Spectrum Analyzer. Is there a way to get it working or is it simply not supported at all on 1104B?

Also is there a way to enable the Fix 4 Measurement setting?
 

Offline kcbrown

  • Frequent Contributor
  • **
  • Posts: 880
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #233 on: July 19, 2021, 05:34:42 pm »
Hello there. I have a GW Instek 1104B and I wanted to install the hacks. I managed to downgrade to 1.12 (boy, the scope is picky with USB flashdiscs), install most of the licenses and upgrade back to 1.29 successfully. However I couldn't install the Spectrum Analyzer. Is there a way to get it working or is it simply not supported at all on 1104B?

Looks to me like it's not supported at all.  I also attempted to install it and it failed.


Quote
Also is there a way to enable the Fix 4 Measurement setting?

I think I tried to do that as well and failed.  This is different from the DMM app, right?  It's been long enough that I just don't remember.

 
The following users thanked this post: nctnico

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: Possible GW Instek GDS-1000B hack
« Reply #234 on: March 25, 2022, 01:48:23 am »
I like this scope because it has Arctan in math mode, I want test resolver sensor, this sensor has sin and cos output, you can get electric angle with arctan(sin/cos), someone has test this? other intersanting feature can be filtering app, I have an Agilent DSOX2002a and this has filter on Math mode, is nice because in modulated signals like VFD you can get sin waveform for example.
 

Offline meppr

  • Newbie
  • Posts: 3
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #235 on: March 25, 2022, 09:36:27 pm »
Does anyone know how to enable SSH on the GDS-2000E with latest firmware (1.42)?

I've tried the SSH.7z file from a few messages back but no luck.  Trying the .7z file directly I can't even select it to install; if I unpack that first and install the extracted .gz I get an error "App installation error! Please contact your dealer."

Feel like I'm missing something obvious  :-\

[EDIT] Figured it out, I needed to:

* unpack SSH.7z's contents into a folder called SSH
* run nibbleswap.py (earlier message) on SSH.inf
* Change the magic number on line 1 to 0x32453030
* Change the app Id on line 2, as it seems some more Ids have been used up (I used 0x20)
* run nibbleswap again to produce a new SSH.inf
* tar up SSH folder and call it SSH.gz

That then installed and works :D
« Last Edit: March 26, 2022, 12:53:03 am by meppr »
 
The following users thanked this post: edavid

Offline mjgillen

  • Newbie
  • Posts: 5
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #236 on: May 23, 2022, 05:27:31 pm »
Hey guys, I've had my GW Instek GDS-1054B for about a year and just now getting around to the hacks in this thread. Thank you very much for all that contributed!

I installed the license keys one at a time, restarting in between, and I notice something weird. If I left the USB stick in when I powered back on I got the "error loading license check license version" error however if I left it out and inserted it after I was in the File menu it worked just fine no error. Weird stuff I just wanted to mention in case anyone else ran into this issue.

My system is a Mac Mini running the latest (as of this post) macOS Monterey v12.3.1 and using the default Safari browser. Just so if anyone wants to know if this process will run on a Mac yes it does.

Cheers!
Michael
 

Offline silar

  • Contributor
  • Posts: 10
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #237 on: July 27, 2022, 01:52:52 am »
Got my GDS-1054B this afternoon. It has firmware 1.28. Serial decoding was already enabled. Firmware 1.29 just adds a couple translations so I'm leaving it out.

Downgrade wasn't needed. All done straight in FW 1.28.

Upgraded with the file posted by Mortymore (reply #83). Edited to change lines 26-27 so it gets the last clear code posted by wgoeo (reply #136)

Code: [Select]
a[0] = (a[0] + ((16 * a[1] + 0x19495CFF) ^ (a[1] + k) ^ ((a[1] >> 5) + 0x257130A3)))|0;
a[1] = (a[1] + ((16 * a[0] + 0x3D1B58BA) ^ (a[0] + k) ^ ((a[0] >> 5) + 0x74B0DC51)))|0;

Changes saved. Extension changed to .html. Loaded in web browser (up-to-date firefox). Worked like a charm.

SA option doesn't work. I wasn't expecting it to work, but after reading some previous post, I tried it. So it didn't worked for me, either.

BW upgraded to 100 MHz. Segmented memory and search enabled, too.

Apps installed, too. Datalog, digital filter, DVM... and SSH (last one has been somewhat orgasmic) :-+

SSH app installed with Danymog's SSH.7z file posted in reply #226. However, I'm not sure how password reset is supposed to work. I tried setting a user password in I/O->ethernet menu, also resetting (to what?) password in SSH app, but I was unable to log in until I tried the password posted by wgoeo in reply #3

Now I'm in >:D

@Danymog: so now it's known how to write Lua apps that work in these scopes, I guess...  :clap:

Many thanks to all contributors.

Followed this and all worked correctly on a GDS-1054B with 1.29 firmware.
 

Offline ufpl

  • Newbie
  • Posts: 2
  • Country: ar
Re: Possible GW Instek GDS-1000B hack
« Reply #238 on: October 03, 2022, 04:48:16 am »
Hi, i want to buy a gds1072b, it can be upgraded to 200mhz?
 

Offline idolclub

  • Regular Contributor
  • *
  • Posts: 57
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #239 on: November 21, 2022, 10:54:03 pm »
GW Instek GDS-1000B New Firmware v1.30 ~ 2022-11-21

Release Notes:

1. Updated Russian translation.

2. Fixed the issue that the data is not synchronized when the "DataLog" function saves pictures and waveforms together. 

3. Fixed the FFT calculation when the memory length is 1k.

4. Fixed the related SCPI return string of measurement function.

5. Improved internal memory usage.

6. The EXT trigger level is limited to +/-2.5V (specification revision).

7. Updated the display issue of the attenuation factor.

8. Fixed an issue with the "Math" function in calculating values containing Deskew value.

9. The Vertical scale display changed to 3 digits (supplemental change).

 

Offline tatel

  • Frequent Contributor
  • **
  • Posts: 427
  • Country: es
Re: Possible GW Instek GDS-1000B hack
« Reply #240 on: February 08, 2023, 10:34:17 am »
There are contradictory reports about GDS1054B bandwidth on this thread. So I got one of Leo Bodnar's pulsers, just because curiosity got the best of me.

I tried the pulser on my improved GDS1054B. Used 50R inline termination. 1x attenuation. Capture is attached.

Since I'm not sure I did it all right,  if you have any suggestions, I will try to put in practice. I'm on a hurry now, I have to get out for some days, but I'll do once back at home
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16560
  • Country: 00
Re: Possible GW Instek GDS-1000B hack
« Reply #241 on: February 08, 2023, 10:44:22 am »
How old is your GDS1054B?

Maybe older ones "upgrade" better.
 

Offline tatel

  • Frequent Contributor
  • **
  • Posts: 427
  • Country: es
Re: Possible GW Instek GDS-1000B hack
« Reply #242 on: February 08, 2023, 11:19:08 am »
Got it on April, 19, 2021. You can see my report a few posts above this
 

Offline 2N3055

  • Super Contributor
  • ***
  • Posts: 6447
  • Country: hr
Re: Possible GW Instek GDS-1000B hack
« Reply #243 on: February 08, 2023, 11:59:56 am »
There are contradictory reports about GDS1054B bandwidth on this thread. So I got one of Leo Bodnar's pulsers, just because curiosity got the best of me.

I tried the pulser on my improved GDS1054B. Used 50R inline termination. 1x attenuation. Capture is attached.

Since I'm not sure I did it all right,  if you have any suggestions, I will try to put in practice. I'm on a hurry now, I have to get out for some days, but I'll do once back at home

2.8 ns risetime is 100MHz+ BW ... We can safely assume it is not 50 MHz anymore... You did unlock something...
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16560
  • Country: 00
Re: Possible GW Instek GDS-1000B hack
« Reply #244 on: February 08, 2023, 12:10:26 pm »
2.8 ns risetime is 100MHz+ BW ... We can safely assume it is not 50 MHz anymore... You did unlock something...

I'd zoom in as far as possible to make sure the number is accurate.
 

Offline tatel

  • Frequent Contributor
  • **
  • Posts: 427
  • Country: es
Re: Possible GW Instek GDS-1000B hack
« Reply #245 on: February 15, 2023, 07:29:58 pm »
I'm back at home. Just calibrated the scope and got some screenshots

@ fungus: By zooming, I guess you mean to have the lowest timing per division, am I right?

I see rise time oscillating between 2,9 and 3,2 ns on all channels.

The more channels I activate, the (much) worse rise times... 5 ns and more with all channels activated? I could gladly take more screenshots if (any of) you have more suggestions

Screenshots attached
 

Offline tatel

  • Frequent Contributor
  • **
  • Posts: 427
  • Country: es
Re: Possible GW Instek GDS-1000B hack
« Reply #246 on: February 15, 2023, 09:56:16 pm »
FW 1.31 available:

Version 1.31
The channel's deskew range are expanded to +/- 1us.
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16560
  • Country: 00
Re: Possible GW Instek GDS-1000B hack
« Reply #247 on: February 15, 2023, 10:16:59 pm »
The more channels I activate, the (much) worse rise times... 5 ns and more with all channels activated? I could gladly take more screenshots if (any of) you have more suggestions

more channels = lower sample rate.
 

Offline tatel

  • Frequent Contributor
  • **
  • Posts: 427
  • Country: es
Re: Possible GW Instek GDS-1000B hack
« Reply #248 on: February 16, 2023, 11:17:55 am »
more channels = lower sample rate.

Yep.

Anyway I think 3,2 ns rise time mean bandwidth could be a little > 100 MHz. It would agree with numbers reported by TK in reply #110 https://www.eevblog.com/forum/testgear/possible-gw-instek-gds-1000b-hack/msg2378559/#msg2378559
 

Offline danymogh

  • Regular Contributor
  • *
  • Posts: 51
  • Country: ge
Re: Possible GW Instek GDS-1000B hack
« Reply #249 on: March 12, 2023, 04:51:44 pm »
FW 1.31 available:

Version 1.31
The channel's deskew range are expanded to +/- 1us.

is it me or is their website download speed super slow?! can you upload the 1.31 firmware somewhere please?
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf