WiFo Posted August 16, 2006 CID Share Posted August 16, 2006 I have done alot of work on "customizing" motorola cable modems, adding features, etc (changing MAC adress, removing filters, adding a better internal firewall). Having been an application developer for over 8 years, I have plenty of experience in embedded MCU's. Does anyone have any schematics of the 7000 or 6000 units? My first goals are to able to dump the firmware, and run it through IDA . I can easily enough write some ASM, and inject it where needed to acheive the desired results. After that, I would like to be able to dump the data from the RF side of the unit in real time, that should give us some insight on what can be improved. Oh, and this is a great site you have here Quote Link to comment Share on other sites More sharing options...
dlewis23 Posted August 16, 2006 CID Share Posted August 16, 2006 WiF welcome to the forum, im sure if you looked around on google you could find a schematic for one of them. Some of the stuff you want ot do looks pertty intersting, good luck with it. Quote Link to comment Share on other sites More sharing options...
WiFo Posted August 16, 2006 Author CID Share Posted August 16, 2006 I found an image of the board. Looks like I can easily add a serial port to the 7000. Also looks like a simple JTAG to dump the DWAY firmware. I have yet to find any good schematics, or hi res close ups of the mainboard. Anyone have a dead 7000 laying around? That could be put to very good use. Cheers Quote Link to comment Share on other sites More sharing options...
LLLL Posted August 16, 2006 CID Share Posted August 16, 2006 I would be careful, Hughesnet is know to be very strict about modding their equipment. But hell ALL power to ya! Quote Link to comment Share on other sites More sharing options...
Bird Fan Posted August 16, 2006 CID Share Posted August 16, 2006 http://www.copperhead.cc/DW7000.htm Quote Link to comment Share on other sites More sharing options...
WiFo Posted August 16, 2006 Author CID Share Posted August 16, 2006 Yep, I found that one. I need even more detail, particularly the other side, so I can check a few ideas I had on the trace paths. Thanks! Quote Link to comment Share on other sites More sharing options...
Bird Fan Posted August 16, 2006 CID Share Posted August 16, 2006 Yep, I found that one. I need even more detail, particularly the other side, so I can check a few ideas I had on the trace paths. Thanks! If you're going to do all of this work on it, why don't you just buy one yourself and tinker around with it? Quote Link to comment Share on other sites More sharing options...
WiFo Posted August 17, 2006 Author CID Share Posted August 17, 2006 I have one, I just do not want to JTAG my subbed unit, one error and its dead. If I could get a dead unit with an intact firmware I can do this safely. Quote Link to comment Share on other sites More sharing options...
WiFo Posted August 17, 2006 Author CID Share Posted August 17, 2006 Update : It looks like I may be able to have the unit send me the loaded and backup firmware images. Worst case I can inject raw ASM to get some handy features working. As a side note, I just realized it is running my old friend VxWorks Same as the surfBoards. Anyone want to start a pool to buy a test 7000 modem ? I had one IM already offering. That or if someone can come up with one, that would work too. Cheers Quote Link to comment Share on other sites More sharing options...
Bird Fan Posted August 17, 2006 CID Share Posted August 17, 2006 I have one, I just do not want to JTAG my subbed unit, one error and its dead. If I could get a dead unit with an intact firmware I can do this safely. Just buy a cheap 6000 of Ebay.. Quote Link to comment Share on other sites More sharing options...
WiFo Posted August 17, 2006 Author CID Share Posted August 17, 2006 Wow, they are cheap on ebay. I might just do that, However at this point, a 7000 would still be usefull as well. Quote Link to comment Share on other sites More sharing options...
tommie gorman Posted August 17, 2006 CID Share Posted August 17, 2006 Welcome to the forum WiFo Go dude. If I had one I would help. Just out of curiousity, is any of that possible on the 4000 modem. SInce they are set up differently as far as updates are considered? I think I said that right. Maybe it was supposed to be firmware. Quote Link to comment Share on other sites More sharing options...
WiFo Posted August 17, 2006 Author CID Share Posted August 17, 2006 Thanks for the warm welcome. Since cable modem is no longer available, i will focus my efforts on DirecWay The 4000 is the usb model correct? If so, it is still highly modifiable, however it takes a slightly different approach. See these 6000 and 7000's run a RTOS (real time OS) called vxworks, much like the cable modems, some DSS receivers, and a few parts of most modern cars. This provides an enormous amount of flexibility. Because of where I work, I also have access to the WindRiver compilers to create custom builds of vxworks, and add-ons. I can also inject Assembly into empty code sections, to provide full access to these units. From there I can create .NET applications so anyone can easily manipulate settings, add features, etc. Let me say this right off the bat. I am not an advocate of theft of service, but I am all for being able to do anything we want with the hardware we pay for. You can expect a lot of info / development from me over the coming months. I can / will only go so far with my subbed 7000 right now, as I need it for internet, and cant risk frying it. I have already found power user access to the shell, the next step is to gain access to the TWO firmware Quote Link to comment Share on other sites More sharing options...
php Posted August 17, 2006 CID Share Posted August 17, 2006 Interesting... I'll be following this As far as the new forum... there's not really enough to warrant that yet... Quote Link to comment Share on other sites More sharing options...
tommie gorman Posted August 17, 2006 CID Share Posted August 17, 2006 Actually the 4000 is real cheap on ebay. I purchased 2 of them. One for $10 the other for $20. http://search.ebay.com/search/search.dll?MfcISAPICommand=GetResult&ht=1&shortcut=0&from=R41&query=directway+4000+modem&category0= They also have one right now for $ .99 Lol http://cgi.ebay.com/DIRECWAY-4000-DW4000-SATELITE-MODEM-WITH-POWER-SUPPLY_W0QQitemZ180018184810QQihZ008QQcategoryZ86717QQssPageNameZWD7VQQrdZ1QQcmdZViewItem Quote Link to comment Share on other sites More sharing options...
dlewis23 Posted August 17, 2006 CID Share Posted August 17, 2006 you can get a 7000 for 10 bucks http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=170011296764&ssPageName=MERC_VI_RSCC_Pr4_PcY_BIN_Stores_IT&refitem=5778433048&itemcount=4&refwidgetloc=active_view_item&usedrule1=StoreCatToStoreCat&usedrule2=CategoryProximity&refwidgettype=cross_promot_widget Quote Link to comment Share on other sites More sharing options...
tommie gorman Posted August 17, 2006 CID Share Posted August 17, 2006 I don't know what the catch is yet dlewis23, but I just e-mailed the seller to find out. That does not make sense. Would be a very good buy though. "HughesNet HN7000 Satellite System Directway Direct Way High Speed Satellite Internet System with $100 Rebate!" just does not make sense for $10. I just think it is tooooo gooood! Quote Link to comment Share on other sites More sharing options...
dlewis23 Posted August 17, 2006 CID Share Posted August 17, 2006 I don't know what the catch is yet dlewis23, but I just e-mailed the seller to find out. That does not make sense. Would be a very good buy though. "HughesNet HN7000 Satellite System Directway Direct Way High Speed Satellite Internet System with $100 Rebate!" just does not make sense for $10. I just think it is tooooo gooood! his stuff is gotta be stolen, but he has a few sales of the 7000. he is selling a 7700 for 2grand. and hes got 20 of them :haha: http://cgi.ebay.com/HughesNet-7700-Satellite-System-Directway-Direct-Way_W0QQitemZ5782771506QQihZ008QQcategoryZ86717QQcmdZViewItem Quote Link to comment Share on other sites More sharing options...
tommie gorman Posted August 17, 2006 CID Share Posted August 17, 2006 Well if I was going to sell them for $10, I would have stupid tatooed on my forhead. I think it is for the entire system including the sat dish and a $100 rebate. And hughes will never commission them that way. So good luck to anyone who tries to buy those hot little items. And make $90 in rebates in the process. But I guess what WiFo wants it for, it would not much matter. Quote Link to comment Share on other sites More sharing options...
WiFo Posted August 17, 2006 Author CID Share Posted August 17, 2006 Thats a great deal if it is real. Someone buy a couple, I will paypal you money if its legit Quote Link to comment Share on other sites More sharing options...
dlewis23 Posted August 17, 2006 CID Share Posted August 17, 2006 Thats a great deal if it is real. Someone buy a couple, I will paypal you money if its legit ya ok sure, let me just throw my money into something that might not be legit. :haha: Quote Link to comment Share on other sites More sharing options...
WiFo Posted August 17, 2006 Author CID Share Posted August 17, 2006 On second look : "No place else on Ebay can you find a complete system for only $9.95 (activation fee) that includes professional installation included. No upfront cost and a $100 mail in rebate. Yes, we dispatch out an installer to deliver the system to you and install it the very same day! The HN7000S Complete Satellite system comes with the following. " I think he is selling the activation service only Quote Link to comment Share on other sites More sharing options...
tommie gorman Posted August 17, 2006 CID Share Posted August 17, 2006 The 4000 is the modem though. Like I said, they are cheap. But so tweakable. At least that is what I have heard. WiFo my contract is up this month or next, and since the 6000 has less D/L than the 4000 and the same U/L I was figuring on changing that way for cheap. Like I said I have 2 waiting in the closet and am anxious to get started. If you have something on the 4000 tweak info, I am sure some of the 4000 diehards would also like to know. Quote Link to comment Share on other sites More sharing options...
WiFo Posted August 17, 2006 Author CID Share Posted August 17, 2006 As soon as I get a 4000, I will RE it. I have a suspiscion about somethin, the boot config in particular. It seems to me certain things will be easily adjusted / reset once I get a little further with the 7000. I am sure the 4000 is less involved. If anyone has a 4000 (or any system for that matter, dead or not), they want to get rid of, please let me know. It will go to great use. I just bought a complete 6000 system (used) locally, so I can JTAG it and atain root access. Looks like I may have to wire up a serial port on it to get console access. I must also note, the 7000 does indeed use fttp/ftp to grab its radio side boot config (not firmware that i know of yet). Cheers Quote Link to comment Share on other sites More sharing options...
tommie gorman Posted August 17, 2006 CID Share Posted August 17, 2006 If you want to send me your address by PM, or PO Box I will send you a moneyorder for the purchase of a 4000. $20 OK? just realized you might be UK. That was in US dollars. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.