| Products > Test Equipment |
| Siglent .ads firmware file format |
| << < (8/85) > >> |
| janekivi:
After some needed help and more notepad and head scratching my SDG2000X-P21R2 user is root and password is... you guess... |
| janekivi:
If You take SDG2000X-P21R2.rar and let bspatch to use difference on it like: bspatch.exe SDG2000_V200R001B01D01P21R2.ADS NewFirmware.ADS difference and SDG2042X accept NewFirmware.ADS and new password, 7 char, lowercase, starting with ee, everybody know here... http://www.daemonology.net/bsdiff/ |
| new299:
--- Quote from: janekivi on August 05, 2016, 09:58:56 pm ---If You take SDG2000X-P21R2.rar and let bspatch to use difference on it like: bspatch.exe SDG2000_V200R001B01D01P21R2.ADS NewFirmware.ADS difference and SDG2042X accept NewFirmware.ADS and new password, 7 char, lowercase, starting with ee, everybody know here... http://www.daemonology.net/bsdiff/ --- End quote --- Neat! I wonder if the same trick can be used on the SDG800 I tried editing the flash dumps directly but I think I screw up the UBI filesystem. I'm planning to try properly mounting the FS and changing /etc/shadow but on my last attempt it didn't mount cleanly (not sure why, some kind of header). I might try doing it on the device using the sdg800_transitional.ads rootfs (which exposes a bash prompt) to mount the other FS. |
| janekivi:
I can try this but You must test it : ) I don't have many instruments here... It would be as easy as sdg1042x if I get somehow 271 bytes packed data of shadow file for zip to replace. So You come up with all kind of password hash and pack new shadow file and if packed size is 271 bytes, send zip to me... I was using the same salt for sdg2042x but it doesn't matter now. https://quickhash.com/crypt3-md5-online This part is cut from P12R2 where needed new data(bytes 40 - 14E) There is cool hex editor: 010 Editor, where You can use templates to analyze all kind of files and it is decoding all fields for You, it will calculate checksums and do more of other stuff... |
| janekivi:
Here was a bit silence... but now possibly I can make new ZIP files for firmware and replace files in it. And passwords too. Supported are this kind of firmware files where is that same format. For SDG800 possibly can be replaced boot logo. But for now I can only confirm working files with SDG2048X and some hacks with SDG1025. Nobody else haven't reported anything back... |
| Navigation |
| Message Index |
| Next page |
| Previous page |