Jump to content
Sign in to follow this  
WiFo

7000 Hardware Info ?

Recommended Posts

I have done alot of work on "customizing" motorola cable modems, adding features, etc (changing MAC adress, removing filters, adding a better internal firewall). Having been an application developer for over 8 years, I have plenty of experience in embedded MCU's.

Does anyone have any schematics of the 7000 or 6000 units?

My first goals are to able to dump the firmware, and run it through IDA . I can easily enough write some ASM, and inject it where needed to acheive the desired results.

After that, I would like to be able to dump the data from the RF side of the unit in real time, that should give us some insight on what can be improved.

Oh, and this is a great site you have here ;)

Share this post


Link to post
Share on other sites

I found an image of the board.

Looks like I can easily add a serial port to the 7000.

Also looks like a simple JTAG to dump the DWAY firmware.

I have yet to find any good schematics, or hi res close ups of the mainboard.

Anyone have a dead 7000 laying around? That could be put to very good use.

Cheers

Share this post


Link to post
Share on other sites

Yep, I found that one. I need even more detail, particularly the other side, so I can check a few ideas I had on the trace paths. Thanks!

If you're going to do all of this work on it, why don't you just buy one yourself and tinker around with it?

Share this post


Link to post
Share on other sites

Update : It looks like I may be able to have the unit send me the loaded and backup firmware images. Worst case I can inject raw ASM to get  some handy features working.

As a side note, I just realized it is running my old friend VxWorks ;) Same as the surfBoards.

Anyone want to start a pool to buy a test 7000 modem ? I had one IM already offering. That or if someone can come up with one, that would work too.

Cheers

Share this post


Link to post
Share on other sites

Welcome to the forum WiFo   :wave:

Go dude.  :thumbsup:

If I had one I would help.  :twisted:

Just out of curiousity, is any of that possible on the 4000 modem. SInce they are set up differently as far as updates are considered? I think I said that right. Maybe it was supposed to be firmware.  :shrug:

Share this post


Link to post
Share on other sites

Thanks for the warm welcome. Since cable modem is no longer available, i will focus my efforts on DirecWay ;)

The 4000 is the usb model correct? If so, it is still highly modifiable, however it takes a slightly different approach.

See these 6000 and 7000's run a RTOS (real time OS) called vxworks, much like the cable modems, some DSS receivers, and a few parts of most modern cars. This provides an enormous amount of flexibility. Because of where I work, I also have access to the WindRiver compilers to create custom builds of vxworks, and add-ons. I can also inject Assembly into empty code sections, to provide full access to these units. From there I can create .NET applications so anyone can easily manipulate settings, add features, etc.

Let me say this right off the bat. I am not an advocate of theft of service, but I am all for being able to do anything we want with the hardware we pay for.

You can expect a lot of info / development from me over the coming months.

I can / will only go so far with my subbed 7000 right now, as I need it for internet, and cant risk frying it. I have already found power user access to the shell, the next step is to gain access to the TWO firmware

Share this post


Link to post
Share on other sites

I don't know what the catch is yet dlewis23, but I just e-mailed the seller to find out. That does not make sense.

Would be a very good buy though.

"HughesNet HN7000 Satellite System Directway Direct Way

High Speed Satellite Internet System with $100 Rebate!" just does not make sense for $10.

I just think it is tooooo gooood!  ;)

Share this post


Link to post
Share on other sites

I don't know what the catch is yet dlewis23, but I just e-mailed the seller to find out. That does not make sense.

Would be a very good buy though.

"HughesNet HN7000 Satellite System Directway Direct Way

High Speed Satellite Internet System with $100 Rebate!" just does not make sense for $10.

I just think it is tooooo gooood!  ;)

his stuff is gotta be stolen, but he has a few sales of the 7000.

he is selling a 7700 for 2grand. and hes got 20 of them  :haha: :haha:

http://cgi.ebay.com/HughesNet-7700-Satellite-System-Directway-Direct-Way_W0QQitemZ5782771506QQihZ008QQcategoryZ86717QQcmdZViewItem

Share this post


Link to post
Share on other sites

Well if I was going to sell them for $10, I would have stupid tatooed on my forhead. I think it is for the entire system including the sat dish and a $100 rebate. And hughes will never commission them that way. So good luck to anyone who tries to buy those hot little items.

And make $90 in rebates in the process.  :haha:

But I guess what WiFo wants it for, it would not much matter.  ;)

Share this post


Link to post
Share on other sites

On second look :

"No place else on Ebay can you find a complete system for only $9.95 (activation fee) that includes professional installation included. No upfront cost and a $100 mail in rebate. Yes, we dispatch out an installer to deliver the system to you and install it the very same day! The HN7000S Complete Satellite system comes with the following. "

I think he is selling the activation service only :)

Share this post


Link to post
Share on other sites

The 4000 is the modem though. Like I said, they are cheap.

But so tweakable.

At least that is what I have heard.

WiFo my contract is up this month or next, and since the 6000 has less D/L than the 4000 and the same U/L I was figuring on changing that way for cheap. Like I said I have 2 waiting in the closet and am anxious to get started. If you have something on the 4000 tweak info, I am sure some of the 4000 diehards would also like to know.  ;)

Share this post


Link to post
Share on other sites

As soon as I get a 4000, I will RE it. I have a suspiscion about somethin, the boot config in particular. It seems to me certain things will be easily adjusted / reset once I get a little further with the 7000. I am sure the 4000 is less involved.

If anyone has a 4000 (or any system for that matter, dead or not), they want to get rid of, please let me know. It will go to great use. I just bought a complete 6000 system (used) locally, so I can JTAG it and atain root access. Looks like I may have to wire up a serial port on it to get console access.

I must also note, the 7000 does indeed use fttp/ftp to grab its radio side boot config (not firmware that i know of yet).

Cheers

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

×
×
  • Create New...