TV Hacking

O sa iau de la service-ul autorizat firmware de reparatie oficial pe serie.
Deja am inceput tratativele.
La celelalte am asa ceva !

---------- Post added at 22:43 ---------- Previous post was at 22:35 ----------

Code:

top - 20:42:44 up 4 min, 0 users, load average: 0.17, 0.19, 0.09 Tasks: 32 total, 2 running, 30 sleeping, 0 stopped, 0 zombie Cpu(s): 3.3%us, 2.6%sy, 0.7%ni, 92.1%id, 0.0%wa, 0.7%hi, 0.7%si, 0.0%st Mem: 277072k total, 123664k used, 153408k free, 176k buffers Swap: 0k total, 0k used, 0k free, 61920k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 241 root 20 0 799m 59m 35m S 5.6 22.0 0:29.18 aurora.elf 240 root 20 0 2912 912 752 R 0.3 0.3 0:00.04 telnetd 616 root 20 0 3056 1616 1296 R 0.3 0.6 0:00.10 top 1 root 20 0 2848 960 816 S 0.0 0.3 0:00.16 init 2 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kthreadd 3 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ksoftirqd/0 4 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 events/0 5 root 15 -5 0 0 0 S 0.0 0.0 0:00.01 khelper 8 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 async/mgr 45 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kblockd/0 65 root 20 0 0 0 0 S 0.0 0.0 0:00.00 pdflush 66 root 20 0 0 0 0 S 0.0 0.0 0:00.01 pdflush 67 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 kswapd0 183 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 mtdblockd 184 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 nftld 221 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubi_bgt0d 225 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubi_bgt1d 227 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubifs_bgt1_0 228 root 20 0 2912 1168 976 S 0.0 0.4 0:00.04 rcS 232 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubifs_bgt0_0 235 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 ubifs_bgt1_1 340 root 15 -5 0 0 0 S 0.0 0.0 0:00.92 khubd 384 root 15 -5 0 0 0 S 0.0 0.0 0:00.00 scsi_eh_0 385 root 15 -5 0 0 0 S 0.0 0.0 0:00.01 usb-storage 401 root 20 0 0 0 0 S 0.0 0.0 0:00.00 scsi-polling th 467 root 24 4 0 0 0 S 0.0 0.0 0:00.18 RtmpTimerTask 468 root 24 4 0 0 0 S 0.0 0.0 0:00.73 RtmpMlmeTask 469 root 24 4 0 0 0 S 0.0 0.0 0:00.00 RtmpCmdQTask 470 root 24 4 0 0 0 S 0.0 0.0 0:00.00 RtmpWscTask 554 root 24 4 20160 15m 0 S 0.0 5.7 0:02.90 linux-mipsel-sk 608 root 20 0 2912 1152 976 S 0.0 0.4 0:00.02 sh 614 root 20 0 2912 1152 976 S 0.0 0.4 0:00.02 sh

---------- Post added at 23:48 ---------- Previous post was at 22:43 ----------

Am uitat sa precizez ca sunt pe wireles conectat pe net!

Code:

# ifconfig lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:28105 errors:0 dropped:0 overruns:0 frame:0 TX packets:28105 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:6646500 (6.3 MiB) TX bytes:6646500 (6.3 MiB) ra0 Link encap:Ethernet HWaddr 60:02:B4:5E:69:2D inet addr:192.168.1.145 Bcast:192.168.1.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1300 Metric:1 RX packets:110895 errors:0 dropped:0 overruns:0 frame:0 TX packets:7355 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:25660171 (24.4 MiB) TX bytes:2020910 (1.9 MiB) #

Merg aplicatiile mipsel perfect !
Am pus alt busybox, pentru ca cel original avea putine comenzi.

Code:

# ./busybox-mipsel BusyBox v1.19.0 (2011-08-14 23:54:25 CDT) multi-call binary. Copyright (C) 1998-2011 Erik Andersen, Rob Landley, Denys Vlasenko and others. Licensed under GPLv2. See source distribution for full notice. Usage: busybox [function] [arguments]... or: busybox --list[-full] or: function [arguments]... BusyBox is a multi-call binary that combines many common Unix utilities into a single executable. Most people will create a link to busybox for each function they wish to use and BusyBox will act like whatever it was invoked as. Currently defined functions: [, [[, acpid, add-shell, addgroup, adduser, adjtimex, arp, arping, ash, awk, base64, basename, beep, blkid, blockdev, bootchartd, brctl, bunzip2, bzcat, bzip2, cal, cat, catv, chat, chattr, chgrp, chmod, chown, chpasswd, chpst, chroot, chrt, chvt, cksum, clear, cmp, comm, cp, cpio, crond, crontab, cryptpw, cttyhack, cut, date, dc, dd, deallocvt, delgroup, deluser, depmod, devmem, df, dhcprelay, diff, dirname, dmesg, dnsd, dnsdomainname, dos2unix, du, dumpkmap, dumpleases, echo, ed, egrep, eject, env, envdir, envuidgid, ether-wake, expand, expr, fakeidentd, false, fbset, fbsplash, fdflush, fdformat, fdisk, fgconsole, fgrep, find, findfs, flock, fold, free, freeramdisk, fsck, fsck.minix, fsync, ftpd, ftpget, ftpput, fuser, getopt, getty, grep, groups, gunzip, gzip, halt, hd, hdparm, head, hexdump, hostid, hostname, httpd, hush, hwclock, id, ifconfig, ifdown, ifenslave, ifplugd, ifup, inetd, init, insmod, install, ionice, iostat, ip, ipaddr, ipcalc, ipcrm, ipcs, iplink, iproute, iprule, iptunnel, kbd_mode, kill, killall, killall5, klogd, last, less, linux32, linux64, linuxrc, ln, loadfont, loadkmap, logger, login, logname, logread, losetup, lpd, lpq, lpr, ls, lsattr, lsmod, lspci, lsusb, lzcat, lzma, lzop, lzopcat, makedevs, makemime, man, md5sum, mdev, mesg, microcom, mkdir, mkdosfs, mke2fs, mkfifo, mkfs.ext2, mkfs.minix, mkfs.vfat, mknod, mkpasswd, mkswap, mktemp, modinfo, modprobe, more, mount, mountpoint, mpstat, mt, mv, nameif, nbd-client, nc, netstat, nice, nmeter, nohup, nslookup, ntpd, od, openvt, passwd, patch, pgrep, pidof, ping, ping6, pipe_progress, pivot_root, pkill, pmap, popmaildir, poweroff, powertop, printenv, printf, ps, pscan, pstree, pwd, pwdx, raidautorun, rdate, rdev, readahead, readlink, readprofile, realpath, reboot, reformime, remove-shell, renice, reset, resize, rev, rm, rmdir, rmmod, route, rpm, rpm2cpio, rtcwake, run-parts, runlevel, runsv, runsvdir, rx, script, scriptreplay, sed, sendmail, seq, setarch, setconsole, setfont, setkeycodes, setlogcons, setserial, setsid, setuidgid, sh, sha1sum, sha256sum, sha512sum, showkey, slattach, sleep, smemcap, softlimit, sort, split, start-stop-daemon, stat, strings, stty, su, sulogin, sum, sv, svlogd, swapoff, swapon, switch_root, sync, sysctl, syslogd, tac, tail, tar, tcpsvd, tee, telnet, telnetd, test, tftp, tftpd, time, timeout, top, touch, tr, traceroute, traceroute6, true, tty, ttysize, tunctl, ubiattach, ubidetach, ubimkvol, ubirmvol, ubirsvol, ubiupdatevol, udhcpc, udhcpd, udpsvd, umount, uname, unexpand, uniq, unix2dos, unlzma, unlzop, unxz, unzip, uptime, users, usleep, uudecode, uuencode, vconfig, vi, vlock, volname, wall, watch, watchdog, wc, wget, which, who, whoami, whois, xargs, xz, xzcat, yes, zcat, zcip

---------- Post added at 14:39 ---------- Previous post was at 13:17 ----------

Code:

# ./oscam 12:38:34 0 s >> OSCam << cardserver started, version 1.20-unstable_svn, build r10458 (mipsel-unknown-linux-gnu) 12:38:34 0 s (main) System name = Linux 12:38:34 0 s (main) Host name = (none) 12:38:34 0 s (main) Release = 2.6.28.10 12:38:34 0 s (main) Version = #31 PREEMPT Wed Aug 14 18:55:38 CST 2013 12:38:34 0 s (main) Machine = mips 12:38:34 0 s (main) creating pidfile /tmp/.oscam/oscam.pid with pid 923 12:38:34 0 s (main) signal handling initialized 12:38:34 54B890 h (webif) webif: decompressed 152402 bytes back into 366512 bytes 12:38:34 54B890 h (webif) HTTP Server running. ip=0.0.0.0 port=8888 12:38:34 0 s (stat) loadbalancer: can't read from file /tmp/.oscam/stat 12:38:34 0 s (main) waiting for local card init 12:38:34 0 s (main) init for all local cards done 12:38:34 0 s (emmcache) can't read emmcache from file /tmp/.oscam/oscam.emmcache 12:38:34 0 s (emmcache) can't read emmstats from file /tmp/.oscam/oscam.emmstat 12:38:34 0 s (anticasc) anti cascading disabled 12:38:34 54EEC0 c (client) plain dvbapi-client granted (anonymous, au=off) 12:38:34 54EEC0 c (dvbapi) dvbapi channelcache can't read from file /var/tuxbox/config/oscam.ccache 12:38:34 54EEC0 c (dvbapi) ERROR: Could not detect DVBAPI version.

---------- Post added at 14:42 ---------- Previous post was at 14:39 ----------

Poti sa pui server de oscam si cccam pe tv. Ramane sa se gaseasca o cale de DVB-API !

---------- Post added at 15:11 ---------- Previous post was at 14:42 ----------

Am desasamblat executabilul !
Aurora se numeste softul .

Quote:

Ramane sa se gaseasca o cale de DVB-API

acolo-i buba... :D ...cum spuneam: dau o bere!!!.. :drinks:

Am descoperit cateva functii noi, metode de a face autobackup.
O sa dureze sa inteleg din IDAPro.

Am gasit si procedurile de CI, le zice ICE.
Se vad intre ele televizoarele !
Poti sa te uiti pe inregistrari intre ele.
Am pornit si WIFI-Direct.
Are suport si pt USB-Network.

Azi am intrat intr-un vestel care are procesor Broadcom dual core:

Code:

# cat /proc/cpuinfo system type : BCM97xxx Settop Platform build target : 3548b0-smp-nand processor : 0 cpu model : BMIPS4380 V4.4 FPU V0.1 cpu MHz : 402.43 BogoMIPS : 402.43 ( udelay_val : 201216 HZ = 1000 ) wait instruction : yes microsecond timers : yes tlb_entries : 32 extra interrupt vector : yes hardware watchpoint : no ASEs implemented : mips16 VCED exceptions : not available VCEI exceptions : not available RAC setting : Unknown unaligned access : 7 rdhwr/brdhwr traps : 0 / 0 process migrations : 1414 processor : 1 cpu model : BMIPS4380 V4.4 FPU V0.1 cpu MHz : 404.48 BogoMIPS : 404.48 ( udelay_val : 202240 HZ = 1000 ) wait instruction : yes microsecond timers : yes tlb_entries : 32 extra interrupt vector : yes hardware watchpoint : no ASEs implemented : mips16 VCED exceptions : not available VCEI exceptions : not available RAC setting : Unknown #

Asteptam mai multe stiri...cam ce se poate modifica, daca tot ai intrat in el , ceva noutati...

3 Attachment(s)

Un manual de service pentru 17MB35 gasim? Nu am nicio optiune "editabila" la panel.
In afara de resetarea "on time si st by time" nu are nimic important.
Finlux(vestel)
[Only registered and activated users can see links. Click Here To Register...][Only registered and activated users can see links. Click Here To Register...][Only registered and activated users can see links. Click Here To Register...]

Se modifica din optiunea 7 da nu e public nimic.
Nu te sfatuiesc sa umblii.

2 Attachment(s)

Optiunea 7 + CEC :
[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

Pentru cei care nu stiau ce inseamna VESTEL:
[Only registered and activated users can see links. Click Here To Register...]

si in domeniul militar:

[Only registered and activated users can see links. Click Here To Register...]

Am trecut la Vestel UHD, e mainboard 17MB100, prezent pe seriile 2015 final de an Panasonic.
Se poate face backup la setari, au schimbat insa codarea lor dupa ce au fost decodate.
Am activat logul prin interfata TTL-USB, nu merge insa decat in citire.
Ori am gresit ceva la fire, desi am sapat 3 ore aseara (am relevat cablu adaptor SCART-mufa TV, care e special) si am decodat corespondenta pinilor (nu mai merge combinatia 17MB95).

Code:

[AT][MBoot][Boot Nuttx][1980] ## Booting kernel from Legacy Image at 20400000 ... Image Name: Linux-3.10.23 Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 3280280 Bytes = 3.1 MiB Load Address: 20208000 Entry Point: 20208000 Verifying Checksum ... OK

Code:

[CPU INFO] cpu openCPUIoctl - MDrv_CMD_CPU_QueryClock ## Software Version: V.0.1.33.17 SVN 192281 MBoot Version: MB100-068 PM ver: 1027 NAND Size: 0 DDR Freq: 0M CPU Freq: 756M DDR Size: 1536MB

E posibil sa lipseasca o rezistenta pe cablaj ca sa nu pot edita prin consola rcS sa pornesc telnet.
Nu il desfac inca televizorul.

Are tunere C, C2, T, T2, S2, merg UHD-urile in HEVC, si Youtube4k in Vp9, e 3D activ si merge BT cu orice device, am conectat o boxa externa la el si merge fb.

Nu stie decat diseq 1.0, nu muta HH, isi masoara cu mare grija curentul si da mesaje de eroare daca apare ceva scurgeri.

Am o noua jucarie :)

2 Attachment(s)

Au rezolvat deja turcii cu mobile file. Acum studiez.

Sent from my Q6T7IN4G using Tapatalk

---------- Post added at 14:41 ---------- Previous post was at 13:03 ----------

Am activat DTS , Pvr necodat , iptv, epg html, si mai multe maruntisuri

---------- Post added at 16:11 ---------- Previous post was at 14:41 ----------

Cea mai tare faza e ca stie sa faca streaming catrere tablete telefoane etc, e o aplicatie pe market la Android si IOS care poate controla televizorul, si pe care poti sa vezi emisiunea, poti opri ecraul televizorului din ea.
Face streaming la canalele UHD ! Cred ca le reencodeaza in timp real.
Evident si functia asta era oprita cand l-am cuparat.

---------- Post added at 16:32 ---------- Previous post was at 16:11 ----------

Captura din telefon
[Only registered and activated users can see links. Click Here To Register...]

Incredibil e ca face streaming de pe intrarile HDMI !

Castile BT noname, schimba postul la tv.

Mai ai să-i pui aripi și elice... :)
In rest , l-ai cam făcut "cap de serie".

1 Attachment(s)

Asta e pe BT:

Am avansat cu televizorul. O sa deschid topic special.

Pe interfata "backdoor" se pot da sute de comenzi, printre care si captura de imagine pe stick, captura pe care o salveaza 1080 indiferent ce rezolutie are postul.
[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

Saptamanile astea sunt la Craiova fara 4K.
Veste-lul de care am scris mai sus e identic cu : [Only registered and activated users can see links. Click Here To Register...]

Prin interfata secreta se pot da cateva sute de comenzi.

Am activat telnet si FTP, astfel ca pot copia captura de pe stick fara sa ma deplasez la tv.

capteaza meniurile

[Only registered and activated users can see links. Click Here To Register...]

capteaza imaginea

[Only registered and activated users can see links. Click Here To Register...]

capteaza meniul Youtube !

[Only registered and activated users can see links. Click Here To Register...]

capteaza imaginea Youtube !

[Only registered and activated users can see links. Click Here To Register...]