TUTORIAL 5101i

Hello everyone I'm a bit short of time so they put the steps something fast, but they will make amend SB5101 to give them a link included with the files. bin and ambit250 necessary. the blackat not published because there are many links.

http://rapidshare.com/files/154132565/hack_5101.rar.html


TUTORIAL 5101i

Tools and programs.
Ambit.250.
fullflash-250hack_dump_telnet.bin
Firmware-sb5101.mod.10.2.by.fercsa.bin
blackcat-v.128-programer

1-As your full flash flasher.
First check that your connection is correct. Open blackcat.v128. In the console tab.
After seeing that has a bcm3348. This tells you everything is. Ok
Open blackcat.v128. In the flash tab, open there look. WRITE ALL. --- And you put the 250hack_dump_telnet. Bin ---.
This will last you a lot. at least 2 hours.

2-FIRMWARE ACTUALIZASION
At the same flash tab. opened in WRITE. and you put the sb5101.mod.10.2.by.fercsa.bin
In this case the writing starts at 0x10000

3-ACCESS TO THE INTERFACE OF TELNET
This will serve two to see if you and if your moden design work.
Enter through http://192.168.100.1
Remember to respect the capital letters.
login: Infinite password: SetValue

4-CONFIGURATION AND CHANGES BY TELNET MODEN
A-to activate the BIS.
Run cmd.exe ... ... ... ..
Write clik enter telnet -----
Type or ------ clik enter 192.168.100.1
login: admin password: infinite
You give him two times while inside enter
Write non-vol cd clik enter ----
Cd write clik enter DOCSIS -----
Enable bpi true write clik enter -----
0 ------ write clik enter bpi_version
Write write clik enter -----

5-CHANGE OF MAC
can be done by telnet and ambit250.
I set some options.
For telnet:
Stop scanning frequency:
cd / cm_hal
scan_stop
September custom config:
cd / non-vol/docsis
force_cfgfile enable true
dhcp_settings
[Just press enter]
[Just press enter]
[Just press enter]
yes
10.10.10.10 (this your tftp server address - local tftp server not allowed, this is a bug ..)
config.cfg (config name)
[Just press enter]
[Just press enter]
write
Change MAC address to 00:11:22:33:44:55
cd
2155776876 write_memory 0x00
2155776877 write_memory 0x11
2155776878 write_memory 0x22
2155776879 write_memory 0x33
2155776880 write_memory 0x44
0x55 write_memory 2155776881
cd / non-vol
write

DOWN BY SOME THAT AMBIT250.HAY necessary patches.
The only thing I see with suspicion is that the lights do not work but everything works well, to see the functionality of the moden have to go screen telnet interface.