View Full Version : s01rev647
@nunn@ki
05-19-2009, 04:33 AM
can somebody tellme if this card can be open,s01rev647and in nagramasterit says 301rev647 thx 4 ur help
gizmolite
05-19-2009, 05:31 AM
ask and ye shall recieve....have fun
http://bellexpress.vu/forum/local_links.php?catid=25
@nunn@ki
05-19-2009, 05:56 AM
ask and ye shall recieve....have fun
http://bellexpress.vu/forum/local_links.php?catid=25
what am suposed to be looking for/at here,i need some step by step info.I have a modified miikobu 3
flight
05-19-2009, 07:07 AM
what am suposed to be looking for/at here,i need some step by step info.I have a modified miikobu 3
Look for Sox Extras and SOX Reader / Writer Full
Zerokill
05-19-2009, 07:41 AM
I thought only the low REVs (602 & 802) could be opened with the script??
gizmolite
05-19-2009, 02:57 PM
these instruction were passed down to me by crazy....use in conjunction with the scripts in the VIP section
you don't want to close winexplorer
Steps for Doing S0x First thing flash loader with Newd13a
1. Load Glitching script glitch into card (once glitched in do not close window)
2. Read Image
3. Load image in n2eeprom Editor (Provided in folder)
4. Set tiers
5. Apply change keys patch.eps01 to bin
6. Apply Datespatch.eps01 to bin
7. save bin
8. write bin inside script that should still be opened
9. once wrote close script put card in iso and load n2edit (provided in folder)
10. load s02 update.d2c in n2edit's comm window and run twice reset atr
11. if atr returns s02 rev809 stream card and enjoy tv...
@nunn@ki
05-19-2009, 04:22 PM
these instruction were passed down to me by crazy....use in conjunction with the scripts in the VIP section
you don't want to close winexplorer
Steps for Doing S0x First thing flash loader with Newd13a
1. Load Glitching script glitch into card (once glitched in do not close window)
2. Read Image
3. Load image in n2eeprom Editor (Provided in folder)
4. Set tiers
5. Apply change keys patch.eps01 to bin
6. Apply Datespatch.eps01 to bin
7. save bin
8. write bin inside script that should still be opened
9. once wrote close script put card in iso and load n2edit (provided in folder)
10. load s02 update.d2c in n2edit's comm window and run twice reset atr
11. if atr returns s02 rev809 stream card and enjoy tv...
what script do i load in winex,justwant to get it right i don't want to mess the card up,sorry for all the ????s
Zerokill
05-19-2009, 04:43 PM
Well, even if you do get into that card, you have anywhere from 2-14 days left of the N2 stream (according to the pop-up messages), so you might as well as throw it to the wind.
I am pretty sure that the script in question (actually the "package") was designed to glitch ROM S0X, REV 602 or 802 (NO OTHER REV's!!). Not sure if anyone has looped a card trying, so you are probably safe there.
Also, the card in question MUST not be a virgin (looking at the REV, I doubt it is a virgin).
Also, the user stated he has a "modified MIK3", which leads me to believe that he has older (slower) chips (4053's) which probably will not work with this script.
@nunn@ki
05-19-2009, 06:32 PM
TX Data : 90
RX Data : 4E 44 31 33
Let the 102 Glitching/UNLOOPING begin....
===========================================
Glitch Success!! ATR RECIEVED
3F FF 95 Received!!
VCC = 38 (~1.09803921568627 vdc)
Glitch ATRDelay = 0070
Glitch type 07
ATR length was = h1B
====================
Zerokill
05-19-2009, 06:58 PM
It looks like you hit the glitch. The important test is if you can successfully dump the card, fix the data, and then rewrite it.
I have glitched a few cards that hit, but would not dump. I have quite a few boxes running S0X cards right now...for the few days they have left.
Let us know if you successfully dump the card/rewrite it....I will certainly eat my words and apologize!
@nunn@ki
05-19-2009, 07:42 PM
It looks like you hit the glitch. The important test is if you can successfully dump the card, fix the data, and then rewrite it.
I have glitched a few cards that hit, but would not dump. I have quite a few boxes running S0X cards right now...for the few days they have left.
Let us know if you successfully dump the card/rewrite it....I will certainly eat my words and apologize!
I keep getting this message when i try to read card ,Timeout from 58 command,WHY?
adrenaline
05-19-2009, 08:38 PM
I thought only the low REVs (602 & 802) could be opened with the script??
I believe you're right .
@nunn@ki
05-19-2009, 10:03 PM
Initial Parameters = Delay:0280 VCC:5A Glitch Type:09
TX Data : B0 5A
TX Data : 06 10 01 03 50 1A 00
RX Data : 06 1B
RX Data : 3F FF 95 00 FF 91 81 71 FF 47 00 44 4E 41 53 50
53 30 31 20 52 65 76 36 34 37 02
12121212121212121212121212121212121212121212121212 12121212121212121212121212121212
Delay:0281 VCCStart:5A Glitch Type:09Elapsed = 00:00:24
12121212121212121212121212121212121212121212121212 12121212121212121212121212121212
Delay:0282 VCCStart:5A Glitch Type:09Elapsed = 00:00:48
12121212121212121212121212121212121212121212121212 12121212121212121212121212121212
Delay:0283 VCCStart:5A Glitch Type:09Elapsed = 00:01:13
1212121212 When i use the sox script from the filedownload area this is what i get ,do i need a switch for the pot ,I have a 2.2k resistorsolder to it.
gizmolite
05-19-2009, 11:18 PM
looks to me like that cam is open....good job @nunn@ki
@nunn@ki
05-19-2009, 11:22 PM
[quote=gizmolite;518220]looks to me like that cam is open....good job @nunn@ki[/quote
Zerokill
05-20-2009, 12:49 AM
I keep getting this message when i try to read card ,Timeout from 58 command,WHY?
You are trying to READ it?? You should be trying to DUMP it with the script that you glitched it with. Then you do the Magic with the tiers and dates (while leaving the glitch script open) and then re-write the modified DUMP back to the same card. And then run the REV bump script until your card is good and can take key updates.
If you are getting errors when trying to dump, then it's the REV of the card...
We all have gotten "Success" when glitching Higher REV S0X cards, but they just won't DUMP.
Zerokill
05-20-2009, 12:51 AM
Initial Parameters = Delay:0280 VCC:5A Glitch Type:09
TX Data : B0 5A
TX Data : 06 10 01 03 50 1A 00
RX Data : 06 1B
RX Data : 3F FF 95 00 FF 91 81 71 FF 47 00 44 4E 41 53 50
53 30 31 20 52 65 76 36 34 37 02
12121212121212121212121212121212121212121212121212 12121212121212121212121212121212
Delay:0281 VCCStart:5A Glitch Type:09Elapsed = 00:00:24
12121212121212121212121212121212121212121212121212 12121212121212121212121212121212
Delay:0282 VCCStart:5A Glitch Type:09Elapsed = 00:00:48
12121212121212121212121212121212121212121212121212 12121212121212121212121212121212
Delay:0283 VCCStart:5A Glitch Type:09Elapsed = 00:01:13
1212121212 When i use the sox script from the filedownload area this is what i get ,do i need a switch for the pot ,I have a 2.2k resistorsolder to it.
Is this the card that you got the "success" message with? or a different card?
This one looks like the glitch is not hitting anything...or the card is virgin?
@nunn@ki
05-20-2009, 01:26 AM
no it's the same card just different script,how do i dump it???
@nunn@ki
05-20-2009, 07:19 PM
Is this the card that you got the "success" message with? or a different card?
This one looks like the glitch is not hitting anything...or the card is virgin?
the card in question comes with a 301.10 bev reciever so my quess is it's been around the block a couple of times http://www.dssftp.com/forum/images/icons/icon10.gif
fierofan8488
05-20-2009, 07:25 PM
TX Data : 90
RX Data : 4E 44 31 33
Let the 102 Glitching/UNLOOPING begin....
===========================================
Glitch Success!! ATR RECIEVED
3F FF 95 Received!!
VCC = 38 (~1.09803921568627 vdc)
Glitch ATRDelay = 0070
Glitch type 07
ATR length was = h1B
====================
Seems to me you ran some type of an old unlooping rom102 script that verifies that you received an ATR. This means nothing. And I seriously doubt you get in that card with anything public.
Zerokill
05-20-2009, 07:40 PM
There IS a script for S0X REV 602/802 cards. It DOES work. I have opened and written MANY cards with this script. It requires a loader/unlocker with 4619 chips, 9vDC @ 500mA, resistance at about 210 ohms (for me). I use a PowerSync with the Diode mod, SW1 only (mod turned off), flashed with ND13.
The card in question MUST NOT BE A VIRGIN, must have seen the stream and been activated at one time (for CAID, BOXKEY, and KEYSET info to be transferred).
The major point here is, the card HAS to be at REV 602/802. The script is optimized for these REVs. I have TRIED and TRIED with other REVs (I have about 50 cards) and have never successfully dumped an S0X card at any other REV than 602/802 (some at this REV have not dumped for me).
The script you use glitches the card. When it "gets in" (hits the bug), it offers you several options. Two of these are DUMP the card and WRITE the card. This is the ONLY script you can perform these options with. Once you close the script, you have to re-glitch in (it does not "open" the card, but rather "holds it open" until the script is terminated).
Once you hit the ATR, you have to DUMP the card, keeping the script open, use a tier manipulation program and change the tiers to your satisfaction, change the tier & card expiration dates to a date far in the future, save the new image, and write THAT image back to the card. After this, you must apply either a seperate script or a DC2 to update the cards REV (thus, forever locking you out of this card...so make sure you get it right the first time!!!) to the current REV. Then you stream the card.
You must match your receiver to the info contained on the card...you cannot manipulate the receiver info on the card.
Use GEN-DT08/Sk for this to create your "new" TSOP to write to your receiver.
I have done this with DN cards...NEVER Bev S0X cards (I am unsure if there ever was Bev S0X cards?).
There is an entire thread dedicated to this on the Realm. I don't think the Mods or Mili wants me to link to another site. PM me if you can't find the other thread.
P.S. Hurry, Hurry...you only have a few days of N2 left!!! LMAO!
fierofan8488
05-20-2009, 07:56 PM
There IS a script for S0X REV 602/802 cards. It DOES work. I have opened and written MANY cards with this script. It requires a loader/unlocker with 4619 chips, 9vAC @ 500mA, resistance at about 210 ohms (for me). I use a PowerSync with the Diode mod, SW1 only (mod turned off).
Was this directed at me? Im WELL aware there is a SCRIPT for s0x. My point was that his glitch SUCCESS was NOT from the s0x script. It apprears to be from an old fake unlooping script if its verifying the return of an ATR. No script other than unlooper type will have that output. And like I said, that cam is at rev647, hence you will not get into it with anything PUBLIC.
YEP, i know how to use the CAPS button too. :p
Zerokill
05-21-2009, 01:42 AM
No, it wasn't directed at you. It was directed at @nunn@ki because other users keep suggesting that getting into that card IS possible and urging him on. Believe me, if I ever try to FLAME you, you won't have to ask to whom it is directed, I name names and point fingers.
I know for a fact that it is not possible with (released public) scripts- I have tried them ALL.
I have heard rumors that there are private scripts (I don't know why anyone would keep anything N2 a secret at this point).
People that don't know the answer to a question should not suggest that there is a possibility unless they can quote a thread or point the poor user to proper instructions.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I expended over 19,000 rounds from a .50 calibre machine gun mounted in a Chinook helicopter over a three hour period in a densely populated area of Iraq....the two officers I was with were awarded Combat Action Badges for absolutely no reason- I was awarded with...
Z e r o K i l l s
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@nunn@ki
05-22-2009, 08:45 PM
I would like to swap out the two 4053 chip in my miikobu 6.2, ??? is could i get the max 4619 cse at the source, or any electrical component store would have carry them?,i know i missed the appetizer they clearing the tables "n2" is gone L:DL,just getting ready for when dinner is serve "n3" we will eat again just have 2 wait till a disgruntled:mad: chef steal the recipe http://www.dssftp.com/forum/images/icons/icon1.gif
Zerokill
05-23-2009, 12:55 AM
For all of the trouble you would encounter swapping the chips out of that Mik (I am pretty sure they are soldered- not socketed), you can buy an unlocker from Mili for about $40.
You might want to hold out....when (and if) they ever crack into the G3 card, you might need a loader/unlocker/glitcher with a different crystal speed/different other speed, ect.
Now is not the time to buy "old" technology...you can sample some "new" technology (if you have the cash for that) or wait on a reliable fix to emerge AFTER the stream has turned 100% over.
vBulletin® v3.8.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.