Rebelserf 10C unlocker script

[mili]

I have not tried it having no 10C card, try it at your own risk if you must then report back.
http://bellexpress.vu/forum/local_links.php?action=jump&id=2163&catid=25

mili

[fubr]

we got a bit of success here already.
http://www.dssftp.com/forum/showthread.php?t=75574

will be nice to see more positive results here in this thread as well

[no_bser]

program works just fine on 10c cards.

damn shame it had to be leaked. was nice when it was private.

[MetM]

where will it hurts?

[no_bser]

what?

[MetM]

Why is it bad it leaked..

[greenie-monster]

Why is it bad it leaked..

Cause you can expect harsher ECMs and Rev 10D out SOON

[MetM]

That will fuck the 138 of us.....

[Crazy1_79]

LOL yeah

[HCCAfan]

Cause you can expect harsher ECMs and Rev 10D out SOON

omg, more key changes?? lol.....

as for 10d, it was bound to happen anyways, 10c hasnt secured their signal.

[MetM]

So.. you get one of these 10b that rain everywhere and stream it to 10c ?
(or it works also on 10b?)

[ruciz]

if you got a 10b, don't update to 10C to glitch. use a 10b script.... they make each revision slightly harder to get into, so the lower is better despite whatever script is out..

Good news for those who still got a subbed ROM102 tho.. :)

[HCCAfan]

So.. you get one of these 10b that rain everywhere and stream it to 10c ?
(or it works also on 10b?)

u lost me....

[greenie-monster]

u lost me....

He's asking if you can use this script on other revisions, or does it have to be 10c exclusively.

I still dont know myself, so I cant answer.

[HCCAfan]

i guess it depends on how reliable of script it is. i know for the longest time, it was easier to pop a 10b than a rev109.
so i guess time will tell.

[dishdude666]

The file is no longer there?? I get a stupid txt file that says thief.

I am not a thief, just making use of the signal that’s trespassing my backyard.

[dishnewguy]

I agree....

[hammer2002]

Can someone please PM me the real script or re-post it and provide a link. Thanks,
Hammer

[snaplunt]

Why is the file gone?

[fubr]

http://bellexpress.vu/forum/local_links.php?action=jump&id=2092&catid=25

[snaplunt]

file still not in there!
it has a notepad with the word "THIEF!"

[hammer2002]

Fubr, that link points to a bogus file. Can some somebody report if there was a real release or was this bogus.

[no_bser]

the program will unlock all revs current to date. rom102 only.

does have some support for 103 also.

and yes, better when it was private, not just for myself or rebel, but for everyone. i just think rebel isn't given enough credit for the work he's done and information and knowledge he has shared.

one of the best at what he does ...

[Mezlo]

Well my original post was moved and now is deleted but it contained a valid link through rapid share. Not sure if rapidshare links are allowed since it was deleted. Was posted here 6 - 8 hours before Mili started this thread. Will repost link. Mods I apoligize if this is not allowed. If it is deleted again I will assume no radpidshare links allowed.

hxxp://rapidshare.com/files/80868926/RM_1A.zip

This is the complete file

[Ohms]

hmmm.. .the link at the top of this thread still works. The one Mili posted.

[fubr]

http://bellexpress.vu/forum/local_links.php?action=jump&id=2110&catid=25

try now

[fubr]

hmmm.. .the link at the top of this thread still works. The one Mili posted.
it did not earlier Ohms, It was fucked up for sure, Maybe mili fixed it

[lightning0009]

blue nexus, switches two and five, 200ohms. rev10b. First card attempted popped in two minutes.

Initial Parameters-> Delay:00AE VCC:28 Glitch Type:B0/07 Timeout Factor:04

.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
.......... !!!!!!!

******* Good response received! *********
55
===========================================
55 was hit at: Delay:00AE VCC:0025 GlitchType:B0/07
Timeout Factor:04
Elapsed: 00:02:27
VCC Resolution: 0.0625
Delay Range: 00AE to 00CE
********************************
* Rom102, Rev10B CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************

[Crazy1_79]

i have been hammering a rev 289 all night, it hasn't popped yet, or looped. still going

[The Lizard King]

i have been hammering a rev 289 all night, it hasn't popped yet, or looped. still going
I've been hammering my old lady all night, and I haven't popped or looped yet, either. Damn condoms... Can't feel a goddamn thing with 'em...

TLK :cool:

[greenie-monster]

i have been hammering a rev 289 all night, it hasn't popped yet, or looped. still going

whats the equivalent of a REV289 in plastic?

[0zone]

whats the equivalent of a REV289 in plastic?

Rev 10B

[chikita]

opend Rom 102_Rev 10C _ Blue Nexs _ 2.2 2&5 down SEE TIME ELAPS
Be patient , may loop but it open this one.


Parameters-> Delay:00CD VCC:14 Glitch Type:B0/07 Timeout Factor:04
Elapsed: 07:01:18

.................................................. ...................
.................................................. ...................
.................................................. ...................
.............. !!!!!!!

******* Good response received! *********
55
===========================================
55 was hit at: Delay:00CD VCC:000E GlitchType:B0/07
Timeout Factor:04
Elapsed: 07:02:11
VCC Resolution: 0.03125
Delay Range: 00AE to 00CE
********************************
* Rom102, Rev10C CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************

[Crazy1_79]

let it run i guess.

[tjperry]

what flash should i put my white nexus with, cause i only get error .... I have 13 flashed at the present time

[litedir4650]

What dip switches and loader settings should I use?
6000
JVC
856P
white nexus loader

[Wiley-X]

blue nexus, switches two and five, 200ohms. rev10b. First card attempted popped in two minutes.

Initial Parameters-> Delay:00AE VCC:28 Glitch Type:B0/07 Timeout Factor:04


******* Good response received! *********
55
===========================================
55 was hit at: Delay:00AE VCC:0025 GlitchType:B0/07
Timeout Factor:04
Elapsed: 00:02:27
VCC Resolution: 0.0625
Delay Range: 00AE to 00CE
********************************
* Rom102, Rev10B CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************


Congrats! What flash are you running on your loader with this script? ND13? NDRS?

[mannybeef]

the two appropriate flashes are included

[Bandit5906]

They don't call you carkilla' for nothing!

[blkstangca]

It Worked

Parameters-> Delay:03C1 VCC:005B Glitch Type:B5/0A
Elapsed: 00:00:56
-----------------------+88 !!!!!!!
******* Good response received! *********
55
===========================================
55 was hit at: Delay:03C1 VCC:0050 GlitchType:B5/09
Elapsed: 00:00:57
VCC Resolution: 0.5
Delay Range: 03C0 to 0420
********************************
* Rom102, Rev10C CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************

[kings322]

has anybody had any success with rom 103 rev 389 or higher??

[Wiley-X]

It Worked

Parameters-> Delay:03C1 VCC:005B Glitch Type:B5/0A
Elapsed: 00:00:56
-----------------------+88 !!!!!!!
******* Good response received! *********
55
===========================================
55 was hit at: Delay:03C1 VCC:0050 GlitchType:B5/09
Elapsed: 00:00:57
VCC Resolution: 0.5
Delay Range: 03C0 to 0420
********************************
* Rom102, Rev10C CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************

Congrats....
When posting a snapshot of your successfully opened ROM102 REV 10C, please include your loader type (MikYellow, NEXUSBlue, NEXUSWhite, ect), the ohms (i.e. 2.2Kohm) and any other specs that might help the rest of us....remember to also post if you loop one! Lets get a good idea of how well this program works!

Thanks!

~Wiley~

[Bacab]

This app will give you better results than most unlocker scripts. The key is to dial your loader properly... read the readme. I found that the lower the ohms the better.

[eric keri]

I just looped a 10c on this program.. Ran it for 113 minutes then it looped....I can't set ohm low....I get a improper cmd22 error if ohms are low.....
Blue nexus
diode mod
2 and 5 dip down
ohm's probably over 800
power supply 9v ..600ma

[doeling]

Holy Sh-t! ******* Good response received! *********
55
===========================================
55 was hit at: Delay:00B3 VCC:0015 GlitchType:B0/07
Timeout Factor:04
Elapsed: 00:16:23
VCC Resolution: 0.0625
Delay Range: 00AE to 00CE
********************************
* Rom102, Rev10C CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************
after looping 3 10b's in a row on the b5 glitcher script I opened a 10c on the first try with this one. Mili's nexus, 2&5 down, kick ass!

[Wiley-X]

I am a little confused by the title of this thread...is RomMaster_LOE v1A the same as Rebelserf 10C unlocker script ??

If so, this little program kicks ass!! I have been trying for four days to unlock a BGA ROM 103 REV 385 with "other scripts".....24 seconds with this program and lookie here:

Parameters-> Delay:03C4 VCC:0026 Glitch Type:B5/09
Elapsed: 00:00:21
---------------------------------------------------------------------
--------------------------------------Rst22 !!!!!!!
******* Good response received! *********
55
===========================================
55 was hit at: Delay:03C4 VCC:0023 GlitchType:B5/0A
Elapsed: 00:00:24
VCC Resolution: 0.5
Delay Range: 03C0 to 0420
********************************
* Rom103, Rev385 CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************

My settings:

White Nexus (Switches 2&5 on) @ 2.5 Kohm

RomMaster Settings:
ComPort=3
CommDelay=4
CommLogging=ON
ImageBackup=ON
ExitPrompt=ON

Very cool...now on to this ROM 102 Rev 10C !!!!

[SEARCHY4]

file still says thief when downloaded.
help!!!

[lump72]

i have been hammering a rev 289 all night, it hasn't popped yet, or looped. still going

have you thought of bring the Rev up 28A ? i don't have one to try , but might be worth a shot .

[Caddylover]

file still says thief when downloaded.
help!!!


I've heard about this. Someone must have uploaded a nice little trojan in that proggy, or picked up a very "interesting" copy that they decided to upload here. I'd be careful if I were you downloading something that when extracted said THIEF now wouldn't you??

The one that I have downloaded at a different site DOES NOT have or do that.

[Wiley-X]

I picked up the one from the rapidshare link that someone above posted...works FINE!

Still hammering away at this ROM 102 REV 10C...8+ hours now. (At least it hasn't looped yet!)

[Wiley-X]

~~ Spoke too soon! ~~

Be very careful! Looped a ROM 102 REV 10C with this program.

White Nexus - 12VDC 500ma - DIPS 2&5 ON

8 hours @ 2.5Kohm = no result
28 minutes @ 2.2Kohm = "No ATR" (LOOP)

I had opened a ROM 103 just 9 hours before at a slightly higher resistance (2.5K)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
So, it's NOT all good news....there are some casualties...

[SEARCHY4]

found at other site. that one is ok.
someone should delete the one here.

[Ohms]

8 hours @ 2.5Kohm = no result
28 minutes @ 2.2Kohm = "No ATR" (LOOP)




I see others reporting success on 10C cams using around 200 ohms. why are you using 2500 ohms?

Just wondering.

[gallo55]

found at other site. that one is ok.
someone should delete the one here.

Scratching my head HUH ????????

[Wiley-X]

I see others reporting success on 10C cams using around 200 ohms. why are you using 2500 ohms?

Just wondering.

For some reason, I have NEVER got results from the 100-1000 ohm range...no matter which script I have used.

I have opened over thirty ROM 102s in the 1700-2500 ohm range with this loader.

I have opened over ten ROM 103s in this same range (including 1 BGA 103 now!)

I have only lost one CAM to a loop...yes, this was my cherry buster...my first.

[Ohms]

yes, this was my cherry buster...my first.

LOL... bummer dude

[greenie-monster]

109 = looped - 215ohms powersync switch 1 - just under 4 hours run (diode mod on).

[lefty]

Rom 102, rev 109, White Nexus (one o' mili's), 215 ohms, 9 dvc 300 ma, dips 2 & 5 on.

I modded the Nexus by added a pair of taps for my ohm meter. If anyone wants that data so as to be able to read the ohms easily, let me know.

********* Good response received! *********
55
===========================================
55 was hit at: Delay:00B8 VCC:0026 GlitchType:B0/07
Timeout Factor:03
Elapsed: 00:31:47
VCC Resolution: 0.0625
Delay Range: 00AE to 00CE
********************************
* Rom102, Rev109 CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************

[pogotv2]

lefty.. can you describe the pot mod you did that enables you to read via a VM.

Pic or short how to would be nice.. :cool:

pogo.....................

[lefty]

lefty.. can you describe the pot mod you did that enables you to read via a VM.

Pic or short how to would be nice.. :cool:

pogo.....................

I'll put one together.

[fairy98]

Parameters-> Delay:00BD VCC:26 Glitch Type:B0/07 Timeout Factor:04
Elapsed: 00:47:33
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
...................................... !!!!!!!
******* Good response received! *********
55
===========================================
55 was hit at: Delay:00BD VCC:0012 GlitchType:B0/07
Timeout Factor:03
Elapsed: 00:49:08
VCC Resolution: 0.0625
Delay Range: 00AE to 00CE
********************************
* Rom102, Rev10C CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************

[jughead69]

I'm gonna let you all try before I put my last cam to the test but I want to help
on pots and reading your meters. here's my 2 cents:

First, if you are going to use real low ohms, like lower than 50 ohms a tiny pot is going to heat up and or fry.

Your best bet is too get a regular 1 watt or bigger resister with an ohms value just above your loader's ohm sweet spot and put that in parallel with your pot. And the bigger wattage the pot the better. I have melted the little blue ones!

A 1K pot will let you vary the ohms anywhere less than the fixed resister value.

IF the glitching gurus agree a pic can be added.

If you are going to post results I have to agree with DVD, state your loader, dips, flash if you didn't use the included one ;-), Rev, Ohms/Power supply Volts measured with a meter...your mother maiden name, anything you think will help.

Flamers will be punished severely

If you don't have the above post as much as you can or ask questions.

GL

[Videosheriff]

Have rom 102 @ 10C

Unknown provider

When trying to read it says...Can't test for backdoor

When trying to open with Rom Master I get.....Improper Cmd 22 response


IS there any hope for this CAM????

Videosheriff

[kufel]

ihave white nexus unlocker from mili popt many
103/105/ .have it 2 years AT 90S2313
never try 109 which i am going to try now
i see mili selling now 4618 .
anybody try 109 with older one:D

[pecker88]

ihave white nexus unlocker from mili popt many
103/105/ .have it 2 years AT 90S2313
never try 109 which i am going to try now
i see mili selling now 4618 .
anybody try 109 with older one:D

the AT90S2313 is the atmel chip, which is TOTALLY UNRELATED to the speed of the glitcher.

Look for a pair of small chips permanently mounted that have either the 2 following numers (either 2x 4053 OR 2x 4619; won't have one of each):
4053 OR 4619

The older, slower glitchers have 4053 chips, which work well for low rev rom102 and rom103 cams. I would say its safe to use this style unlocker for Rom102Rev105 and lower or Rom103Rev385 and lower.

The newer, faster glitchers have the 4619 chips which are reverse conpatable. Thus, they work fine with lower rev and current rev cams, both rom102 and rom103.

[lump72]

have you thought of bring the Rev up 28A ? i don't have one to try , but might be worth a shot .
don't do this !!!!!!!,, some-one report'ed that it will not regonize a Rev-28A !!!!!!!!!!!!!!!

[onestun]

I have a modded t911 with the 4053 chips, would like to change the chips to the 4619, olny problem I have is I dont know the part number off the 4619 chip if someone could please post the number off there chip I thank you very much!!

[kufel]

thanks pecker88 ,ihave good one
i need flash ndrs.... where to find it.

[Wiley-X]

NDRS is not the flash that is recommended for RomMaster 1A.
The "package" includes the flash that was written specifically for the routines in the program (RSX1).

[HCCAfan]

u need 9 volts for the 10c dvd....

[josmed]

Have rom 102 @ 10C

Unknown provider

When trying to read it says...Can't test for backdoor

When trying to open with Rom Master I get.....Improper Cmd 22 response


IS there any hope for this CAM????

Videosheriff

My 2 cents here
send your card out to Mauisun, unless you want to loop it
I sent 2, quick, great service
most important trustworthy

[kings322]

its obvious that this unlocker doesn't have a problem with 10b,c. Has anybody had any success with rom 103 rev 389,38B? i have to cams 389,38b that im gonna try when i get my powersync. Don't really care about loosing these cams cause i know that these cams can easily loop. Just wanted to know if anybody was successful and if so please post settings on OHMS and type of unlocker.

thanks

[Wiley-X]

I ran a ROM 103 REV 385 through it and it opened within a few minutes.
I used a White Nexus. You might not want to try my settings, because I looped a ROM 102 REV 10C a few hours later using practically the same settings (1200-1500 ohms...ya, I know it's high...but for some reason, my loader doesn't work at all on lower settings). Using a 12vdc 500ma power supply.

~Wiley~

[skinerd]

Have rom 102 @ 10C
Unknown provider
When trying to read it says...Can't test for backdoor
When trying to open with Rom Master I get.....Improper Cmd 22 response
IS there any hope for this CAM????
Videosheriff

Chances are this is not a "real" 10C but rather a spoofed one, spoofed by a blocker, so running omniunlocker3A on it may save it.

[verdugo]

I'll put one together.

if you can put pictures will be great i will like to see what you did !!! thaks and i will wait for it

[greenie-monster]

ihave white nexus unlocker from mili popt many
103/105/ .have it 2 years AT 90S2313
never try 109 which i am going to try now
i see mili selling now 4618 .
anybody try 109 with older one:D

Could someone please translate this into english.

[dishdude666]

My 2 cents here
send your card out to Mauisun, unless you want to loop it
I sent 2, quick, great service
most important trustworthy

I dont know them but need them. Can you pm me info please including the price if possible.

Thank you

[0zone]

Originally Posted by kufel
ihave white nexus unlocker from mili popt many
103/105/ .have it 2 years AT 90S2313
never try 109 which i am going to try now
i see mili selling now 4618 .
anybody try 109 with older one

lmao

[kings322]

Hammering at 103 rev 389 for 2 days now without success. No loop also no unlock with powersync at 2.2k. Im gonna try 200 Ohms later and post back if successful.

[Wiley-X]

Be careful about using excessive resistance with 109+ cards...I have looped a ROM 102 REV 10C using 2.2Kohm.

[lefty]

lefty.. can you describe the pot mod you did that enables you to read via a VM.

Pic or short how to would be nice.. :cool:

pogo.....................

Here ya go:

http://i118.photobucket.com/albums/o83/leftynot/nexusmod.jpg