Products > Test Equipment
Sniffing the Rigol's internal I2C bus
<< < (565/899) > >>
hari:

--- Quote from: zombie28 on February 01, 2014, 08:10:30 pm ---https://mega.co.nz/#!MdcEWTgL!0EEmSr-Q6TxaFSsyEmjhRrgqDvFCoXg9K49BalL5Uxc

No need for JTAG memory dumps anymore, just send *IDN? command and you'll get your license encryption keys in response (tested on my DS2072A that has just arrived).

--- End quote ---
Zombie28, may I kindly ask you to provide a md5 or sha sum of your patched firmware file?

thank you very much,
hari
Spikee:
I'm sorry to bother you guys but it is not working with my rigol Ds2072(A?).
I think my key/memory dump is to long:

the dump part: Rigol Ds2072

--- Code: ---3E3C0E435D39DB813C3CC643093CD6837C7C87C78D0CC3833D0101000000000100000000000000000000000000000000000000000000001E0000006400000000000000001100000012000002130000001400000015000000160000001700000018000000190002001A0000001B0004001C0000001D0000001E0000001F00000020000100
--- End code ---
My Model number is: DS2A143101119

Could anyone be so kind to try / fix this for me ?

Thanks!
(the idn return count is 305 , i tried several times)
cepphus:

--- Quote from: zombie28 on February 01, 2014, 08:10:30 pm ---
--- Quote from: poida_pie on January 29, 2014, 04:17:18 am ---What chances are there to patch a firmware so that it outputs the key and serial when you send it
"*IDN?". That would be good.

--- End quote ---

Done!

https://mega.co.nz/#!MdcEWTgL!0EEmSr-Q6TxaFSsyEmjhRrgqDvFCoXg9K49BalL5Uxc

No need for JTAG memory dumps anymore, just send *IDN? command and you'll get your license encryption keys in response (tested on my DS2072A that has just arrived).

--- End quote ---

Amazing!
Now, the JTAG adapter I ordered will show up way too late as it seems, or is there still an interest for any of you superhackers to get access to more memory dumps from 2072A scopes? If so, I'll be happy to share mine..
np:

[/quote]
I didn't check it yet, but I think that 300 MHz + all options should be set by value of 0x1C0C7 (NS8H).
[/quote]

Thanks zombie28 for the IDA plugin ;)

I comfirm, 0x1C0C7 is the good option for permanent 300Mhz + all options (screenshot) Timebase : 1ns


Congratulations for all the team members as done that possible
zombie28:

--- Quote from: Spikee on February 03, 2014, 04:50:49 pm ---I'm sorry to bother you guys but it is not working with my rigol Ds2072(A?).
[...]
My Model number is: DS2A143101119

--- End quote ---

Apparently you have non-A model, so there are no keys to dump in your scope. Just use the 'riglol' keygen.
Navigation
Message Index
Next page
Previous page
There was an error while thanking
Thanking...

Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod