Thanks Thanks:  34
Likes Likes:  47
Dislikes Dislikes:  0
Page 1 of 4 1234 LastLast
Results 1 to 15 of 46

Thread: TV Hacking

  1. #1
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default TV Hacking

    Deschid un topic dedicat modificarii televizoarelor.
    Nu ne ocupam de cele deja "rezolvate".
    Aici adunam date despre celelalte si purtam discutii pe aceasta tema.
    Eu am un LG cu chipset MTK si vreo 7 vestel care majoritatea au MSTAR.
    Seria de la Samsung care nu e "doborata" e bazata pe MSTAR.
    Atasez o documentatie de LG bazat pe MSTAR.
    Attached Files Attached Files
    Sh40, AML, prime focus 1,5m si altele ...

  2. #2
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    Nu am renuntat la proiect. Am avut mult de lucru (asta e bine la buzunar si .... la bugetu de stat).
    Sh40, AML, prime focus 1,5m si altele ...

  3. #3
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    Intre timp lucrurile nu au stat pe loc. La televizoarele VESTEL s-a decriptat fisierul de setari.
    La seriile din ultimii 5 ani de LCD-led Plasma de la Vestel puteai doar sa vevi setarile, mofificari se puteau face doar prin intermediul unor fisiere furnizate de producator.
    In scurt timp voi prezenta metoda prin care intrii in consola pe tv, descarci din linuxul televizorului cele 2 file, le prelucrezi pe pc si le reincarci.
    Viitorul suna bine. Eu am 2 LG-uri si vreo 10 Vestel (am mai dat si la parinti)
    Pentru cei care nu stiu, pe televizoare nu scrie Vestel, de ex scrie toshiba , sharp, philips etc.
    Sh40, AML, prime focus 1,5m si altele ...

  4. #4
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    Am reusit sa pornesc toate optiunile ascunse.
    CEC merge mult mai bine decat pe LG !
    Aveau toate televizoarele functia CEC disabled !
    Am dezactivat si criptatea la inregistrare si multe altele.
    Azi plec la Craiova ... am si acolo material de studiu !
    Sh40, AML, prime focus 1,5m si altele ...

  5. #5
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    scarttors2327vf.th.jpg

    Nu merge cu adaptor USB normal, am reusit cu cel cu care programez procesoarele Atmega.


    Using a SCART <-> RS 232 cable to a CP2102 I could get to the console.

    10 and 12 (RX / TX PIN SCART try out best ) And GND easy to chassis.

    Thus, I was able to:
    cp /apsettings/profile/median_swprofile.bin /mnt/usb/sda1/median_swprofile.bin

    La loc se pot pune automat.
    La versiunea asta de mainboard se copiaza in radacina stickului apoi Meniu 7425 > USB Operations si le preia automat televizorul.


    save the file to USB and change:
    cp /mnt/usb/sda1/median_swprofile.bin /apsettings/profile/median_swprofile.bin
    chmod 0744 /apsettings/profile/median_swprofile.bin

    Now I was able to successfully unlock the software. HDMI Switch works just like PVR! Thanks also to jufoda for the Java file.

    Herewith I could also advance extract the software from the firmware:
    https://github.com/jrspruitt/ubi_reader
    apsettings:
    ubi_reader-master> extract_files.py -s751714 upgrade.pkg

    nv_backup:
    ubi_reader-master> extract_files.py -s2717862 upgrade.pkg

    (could be the most interesting since there was vestel.bin and then analyzed by IDA) basic_partition
    ubi_reader-master> extract_files.py -s4684010 upgrade.pkg

    Greetings and thanks again
    Sh40, AML, prime focus 1,5m si altele ...

  6. #6
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    Momentan salvez pasaje aici. In final le pun cap la cap si le corectez.

    ---------- Post added at 12:26 ---------- Previous post was at 12:24 ----------

    Here is jufodas Java program in a simplified variant: Vestl profile Readers V2

    You only have to unpack everything and put the sw_profile file into the folder "Vestel profiles Reader" and open the Vestel.bat. At the end of 4 text files are created of which the contents of the software profile shows in decrypted form of hex addresses.

    And I have thanks to a helpful user found out from another forum how to activate Bildaufbesser function calling itself "Vestel Pixellence" is the name of the functional and forth with the "Bravia engine" of sony to compare is. See quote:
    Quote:
    First original Vestel integrated circuit, with genuine Vestel patented video processing algorithms, Entirely designed by Vestel R & D. Pixellence1 video processing algorithms includes color enhancement, skin tone detection and correction, sharpness and contrast enhancement technologies improvement. Pixellence1 technology had been presented to customer first in 2007 with the aim of Improving Vestel TV's picture quality level to the higher. Pixellence1 video processing algorithms Provides all details of the picture with high contrast, vivid and natural colors at high picture quality level.
    Whether this can now keep up really high with the Sony would have to be tested.
    and although you may have to adjust these values ​​as follows:
    Code:

    [0x74a4] PixellenceWorkingMode = 2 [0x2] - [0xa863b7c0] [0x305] [0x4] (default 0)
    [0x74cc] PixellenceControlInvisible = 0 [0x1] - [0xec8082b6] [0x205] [0x4] (default value

    ---------- Post added at 12:53 ---------- Previous post was at 12:26 ----------

    So this goes back up that way.
    USB stick size matter, format it with FAT32.
    On the Create stick to a file named -> DownloadProfile.mb95
    This file must therefore be the only one in the root directory at the top without subfolders. Now plug in the stick and press the Menu key and go into Service mode switch 4-7-2-5 there to the point USB Operations go and confirm with OK waarten briefly and then lie on the stick 3 files (mb95_hwprofile.bin, mb95_langprofile.bin, mb95_swprofile.bin) secure it on the PC first, best in a folder name Profile. Then stick format and create the following file DownloadSpi.mb90 these are very, very important elementary files (edid.edid, mb90_credentials.bin,
    mb90_ddr.bin, mb90_hdcp.bin, mb90_hdcp2.bin, mb90_mac.bin), this does not change but save on the PC in a SPI folder.
    the replay of the amended mb95_swprofile.bin, goes like this. Create a folder on the stick profile name, therein lay the modified file and perform the same procedure as for the secure, the file size is copied back into the machine. This can also be done with the SPI files in case something should go wrong as MAC zerschossen or other important things, but to create a spi folder on the stick and lay all SPI files there, then save the same procedure as in.

    The Internet portal Who does not like the rest, because it is the branding with Telefunken, or because it has too few apps that should have some variety for VESTEL portal, there is even an app store on TV. This can be set in the software profiles.
    Sh40, AML, prime focus 1,5m si altele ...

  7. #7
    RSP - TEAM horatyu's Avatar
    Join Date
    16 Aug 2007
    Location
    SIBIU
    Posts
    5,748
    Mentioned
    63 Post(s)
    Rep Power
    113

    Default

    Quote Originally Posted by zildan View Post
    Am reusit sa pornesc toate optiunile ascunse.
    CEC merge mult mai bine decat pe LG !
    Aveau toate televizoarele functia CEC disabled !
    Am dezactivat si criptatea la inregistrare si multe altele.
    Azi plec la Craiova ... am si acolo material de studiu !
    pentru clarificare CEC = " The CEC (Consumer Electronics Control) capability allows HDMI devices to control each other when necessary and allows the user to operate multiple devices with one remote control handset.[5] "
    LA TOTI NI GREU
    "SGU Stargate Universe"

  8. #8
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    Merge telecomanda de la televizor ca si cum ar fi a receptorului !
    Bomba bombelor ar fi acum, ca am ajuns la Craiova si am un orion care nu are NET !
    Dar in service se vede ca decriptand fila de setari se poate activa prin stick wireless.
    Evident ca am stick, sa vedem acum ! Va tin la curent.
    Sh40, AML, prime focus 1,5m si altele ...

  9. #9
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    Am mai rezolvat un Oron la Craiova, dar unu fara net si smart ma tine in sah.
    E musai sa intru in el pe seriala ca sa descarc cele 2 file de setari.
    Maine ma mobilizez !
    Sh40, AML, prime focus 1,5m si altele ...

  10. #10
    RSP - TEAM horatyu's Avatar
    Join Date
    16 Aug 2007
    Location
    SIBIU
    Posts
    5,748
    Mentioned
    63 Post(s)
    Rep Power
    113

    Default

    deci vrei sa spui ca il poti face sa aiba si wi-fi ? ar fi ceva sa putem face si asa ceva, adica sa facem un tv SMART doar din setari
    LA TOTI NI GREU
    "SGU Stargate Universe"

  11. #11
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    Am reusit sa intru in consola pe TV.
    Code:
    testtool > cat /proc/cpuinfo
    system command : 'cat /proc/cpuinfo'
    Processor       : ARMv6-compatible processor rev 4 (v6l)
    BogoMIPS        : 1402.47
    Features        : swp half thumb fastmult edsp java
    CPU implementer : 0x41
    CPU architecture: 7
    CPU variant     : 0x0
    CPU part        : 0xb76
    CPU revision    : 4
    Cache type      : write-back
    Cache clean     : cp15 c7 ops
    Cache lockdown  : format C
    Cache format    : Harvard
    I size          : 16384
    I assoc         : 4
    I line length   : 32
    I sets          : 128
    D size          : 16384
    D assoc         : 4
    D line length   : 32
    D sets          : 128
    
    Hardware        : MT5365
    Revision        : 0000
    Serial          : 0000000000000000
    testtool >
    Code:
    testtool > uname -a
    system command : 'uname -a'
    Linux mt5391 2.6.27 #1 PREEMPT Mon Jan 28 12:32:39 EET 2013 armv6l GNU/Linux


    ---------- Post added at 19:35 ---------- Previous post was at 18:12 ----------

    Imi trebuie drivere pentru adaptorul de net USB, adica trebuie sa le iau dintr-un televizor cu acelasi procesor care le are !
    Am reusit sa ii fac sa inregistreze necodat ! Asta se poate face pe toate.
    Sh40, AML, prime focus 1,5m si altele ...

  12. #12
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    Asta cu decodarea e obiectivul final !
    Se pare ca se poate la modelul asta cu MTK.
    Celelalte tv-uri de la am au MSTAR .
    Momentan caut o versiune de soft care sa aiba driverele de net pe USB.
    Am facut backup la tot televizorul.
    Lipsesc cateva scripturi si driverul de stick wireless pe USB.

    ---------- Post added at 14:46 ---------- Previous post was at 14:37 ----------

    Mutam topicul la club?

    ---------- Post added at 15:38 ---------- Previous post was at 14:46 ----------

    Asa imi vede linuxul adaptorul de net.
    E adaptorul care il vinde oficial Vestel ! Wezy200
    http://www.unex.com.tw/product/dnur-v72

    Code:
    T:  Bus=01 Lev=02 Prnt=02 Port=03 Cnt=02 Dev#=  4 Spd=12  MxCh= 0
    D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
    P:  Vendor=148f ProdID=5572 Rev= 1.01
    S:  Manufacturer=Ralink
    S:  Product=802.11 n WLAN
    S:  SerialNumber=1.0
    C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=450mA
    I:* If#= 0 Alt= 0 #EPs= 5 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
    E:  Ad=81(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
    E:  Ad=01(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
    E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
    E:  Ad=03(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
    E:  Ad=04(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
    Sh40, AML, prime focus 1,5m si altele ...

  13. #13
    Old Member mondo's Avatar
    Join Date
    31 Jan 2007
    Location
    Romania
    Posts
    2,428
    Mentioned
    38 Post(s)
    Rep Power
    87

    Default

    Quote Originally Posted by zildan View Post
    Mutam topicul la club?
    Afirmativ!

  14. #14
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    De peste un an am sapat la metode de modificare aparate Vestel
    Meniu 4725 iti confirma ca e facut de ei un TV.
    Nu te iei dupa eticheta.
    Trebuie sa desfac un firmware de Vestel cu MTK seria 81 cu net ca sa iau ce imi lipseste .
    Dupa ce fac teste lansand de pe stick scripturile trec la rescrierea partiala flash.
    Cea mai grea parte e DVB-API.
    Sa reusesc sa adaptez oscamul !
    MTK si Mstar deja sunt proprietatea MTK.
    Mtk e pe LG si pe cateva serii de Vestel, Mstar e pe Samsungurile "nerezolvate" si pe seriile noi de Vestel.

    Nu are rost sa incerc alte stickuri.
    M-am uitat deja in linuxul televizorului si am vazut ca sunt sterse intentionat driverele !
    Exista o parte comentata de wireles.
    Sh40, AML, prime focus 1,5m si altele ...

  15. #15
    RSP - TEAM zildan's Avatar
    Join Date
    05 Dec 2007
    Location
    Sudul Romaniei
    Posts
    8,512
    Mentioned
    93 Post(s)
    Rep Power
    100

    Default

    Am reusit sa fac update la un tv de 50" din seria M95 de la Vestel cu un firmware beta.
    S-a schimbat total si partea de SMART, acum are vreo 50 de aplicatii.
    Studiez cum fac sa deblochez si opera TV store.
    Am vazut ca se poate seta CI sa fie cu sau fara +
    Pasul urmator ar fi emu!

    ---------- Post added at 17:44 ---------- Previous post was at 17:28 ----------

    Are MSTAR procesor ca seriile SAMSUNG nerezolvate inca.
    O sa fac cateva studii.
    Sh40, AML, prime focus 1,5m si altele ...

Page 1 of 4 1234 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •