Siglent SDS1052DL+ / SDS1102CML+ hack

• #75 Reply
  Posted by tv84 on 01 Sep, 2020 16:33
• So, basically, the language menu is as attached.
  
  

  Quote from: PiXEL8 on 01 Sep, 2020 15:56

  Copying the original config back to both locations brought the model number back and forced Chinese language.
  

  
  That is great news!
  
  Later, I'll share a few more .CFG to see their behavior.

  ---

  
• #76 Reply
  Posted by tv84 on 01 Sep, 2020 18:53
• Test this one, please.

  ---

  Siglent_CML_1FF0.zip
• #77 Reply
  Posted by PiXEL8 on 01 Sep, 2020 19:16
• Quote from: tv84 on 01 Sep, 2020 18:53

  Test this one, please.
  

  
  No change, still model SDS1202F+ and forced Chinese language.
• #78 Reply
  Posted by Chris Roubis on 05 Oct, 2020 01:53
• Don't worry... Tv84 will eventually sort it out for you.
• #79 Reply
  Posted by Lama12 on 06 Oct, 2020 10:52
• Hi, I just ordered an SDS1072CML +. Will anyone still have information on how to convert it to SDS1152CML +.
  Could you please kindly send me a PM how you did it.
  Thank you in advance.
• #80 Reply
  Posted by tv84 on 30 Dec, 2020 21:05
• Quote from: miyagi on 10 Oct, 2019 01:51

  Thank you Tautech and rf-loop.  This confirms my assumption, so me and my friend did some work.  The result is  pleasing.
  This is verified on SDS1102CML+ with FW version  6.01.01.21R2 and SDS1052DL+ with FW version 6.02.01.10R2.
  The trick is the same.
  1) Input below command in a Notepad file and rename the file as startup.sh
  #! /bin/sh
  telnetd
  

  ---

  telnet_CML+.zip
• #81 Reply
  Posted by quinty on 28 Jan, 2021 13:44
• SDS1072CML+ with FW version  6.01.01.21R2 confirmed, works like a treat.
  Is anybody has problems with file coding then use file from " Reply #80".
  
  Lama12, użyj załączonego pliczku, jak sam robiłem plik to nie działało. Telnet na porcie 23.
• #82 Reply
  Posted by JTRACKER on 02 Feb, 2021 22:04
• I know it's been a while, but can I ask what SCPI command was executed, to get the 1152 from the 1052?
  
  Thanks
• #83 Reply
  Posted by tv84 on 03 Feb, 2021 10:02
• It's the usual command to change BW:
  
  MCBD <BW_lic>
• #84 Reply
  Posted by Raima010 on 18 Mar, 2021 17:49
• Wondering if someone have experience hacking SDS1102X+ oscilloscopes. All backdoors are closed to read memdump. Scope has ID xxxx.yyyy.zzzz so missing last 4 numbers. Tried some code calculators from forum which give some unlock codes with only 12 digits input but none of them work.
  Some way to read memdump with disassembly? Other ideas?
• #85 Reply
  Posted by oz2cpu on 28 Nov, 2021 18:02
• sorry to kick this thread alive again..
  but I find no other threads about SDS1102CML hack
  
  new trick : i was not able to connect via putty, correct ip number, tribble checked it was corrent,
  none of the mentionened ports, SSH or telnet, no way. also checked with nmap where they could be..
  
  The solution : get siglent software EasyScopeX
  this will connect to the scope just fine,
  its command interface also accept the hack code, and you can up the bandwidth that way
• #86 Reply
  Posted by Toolworker on 18 Dec, 2021 02:31
• I can connect to my SDS1102CML+ on the LAN with EasyScopeX, and ping it, but can not Telnet to it even after rebooting with startup.sh on the USB drive, or bring up the IP address in a browser.
  
  The firmware version is 6.01.01.22, the 8/6/21 update.
  
  Any suggestions?
• #87 Reply
  Posted by tautech on 18 Dec, 2021 03:01
• Quote from: Toolworker on 18 Dec, 2021 02:31

  I can connect to my SDS1102CML+ on the LAN with EasyScopeX, and ping it, but can not Telnet to it even after rebooting with startup.sh on the USB drive, or bring up the IP address in a browser.
  
  The firmware version is 6.01.01.22, the 8/6/21 update.
  
  Any suggestions?
  

  Check item #4 on P13 of the programming guide:
  https://siglentna.com/wp-content/uploads/dlm_uploads/2021/01/SDS1000-SeriesSDS2000XSDS2000X-E_ProgrammingGuide_PG01-E02D.pdf
• #88 Reply
  Posted by Toolworker on 18 Dec, 2021 04:43
• Quote from: tautech on 18 Dec, 2021 03:01

  Check item #4 on P13 of the programming guide:
  https://siglentna.com/wp-content/uploads/dlm_uploads/2021/01/SDS1000-SeriesSDS2000XSDS2000X-E_ProgrammingGuide_PG01-E02D.pdf
  

  Thanks. But that just opens an SCPI command processor, which can also be done with EasyScopeX through a LAN or USB connection.
  
  After trying a couple of USB drives with startup.sh, I was finally able to telnet to a Linux login prompt with one of the drives.
• #89 Reply
  Posted by tautech on 18 Dec, 2021 06:23
• Oh, sorry. I knew some instruments need to have a port specified for access and believed 5024 was open for CML+. Then I found this:
  https://siglentna.com/operating-tip/instrument-socket-and-telnet-port-information/
• #90 Reply
  Posted by razer.zt on 02 Feb, 2022 02:00
• Hello
  I need help.
  My device 2190e (sds1152cml+) was fully erased.
  Attention !!! Don't run "run mmc-all" from uboot. This command contains "run chip.erase"!!! This will fully erase nand .
  
  Factory partitions with calibration data was erased too.
  Who can share partitions from working device.
  
  For now the device is not usable.
  
  Thank you for help.
• #91 Reply
  Posted by makersLabs on 17 Jul, 2022 11:52
• Hi,
  
  I have a SDS1122E+ from SIGLENT
  My version was in Chinese only, I would appreciate changing to English
  I try to DL from their website  here : https://int.siglent.com/upload_file/zip/firmware/Oscilloscope/SDS1000CML+_6.01.01.21R2_EN.zip
  
  I finally succeed to flash BUT I cannot change to anything else than Chinese  :-(
  
  How to change this and access to language options other than only Chinese?
  
  Rgds