![]() |
|
|
Thread Tools | Display Modes |
![]() |
#1 |
Badcaps Veteran
Join Date: Sep 2015
City & State: tehran
My Country: iran
Line Voltage: 220VAC 50Hz
I'm a: Knowledge Seeker
Posts: 206
|
![]() Hi
need flash dump for tp link modem:TD-W8961N rev:2 CPU part number:MT7505N tnx |
![]() |
![]() |
![]() |
#2 |
Great Sage 齊天大聖
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 26,431
|
![]() |
![]() |
![]() |
![]() |
#3 |
Badcaps Veteran
Join Date: Sep 2015
City & State: tehran
My Country: iran
Line Voltage: 220VAC 50Hz
I'm a: Knowledge Seeker
Posts: 206
|
![]() tnx stj
i need rom or bin file.firmware is in RAS format and can not reprogram by programer. |
![]() |
![]() |
![]() |
#4 |
Great Sage 齊天大聖
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 26,431
|
![]() post a dump of the original.
the ras file probably just has some extra junk at the ends to remove. |
![]() |
![]() |
![]() |
#5 |
5000!
Join Date: Dec 2011
City & State: South Greeley, Wyoming
My Country: US
Line Voltage: 13.9kv HT service and some 240v center tap oddity.
I'm a: Professional Tech
Posts: 4,029
|
![]() Here is what it looks like walking the binary
Code:
DECIMAL HEXADECIMAL DESCRIPTION -------------------------------------------------------------------------------- 63643 0xF89B ZyXEL rom-0 configuration block, name: "dbgarea", compressed size: 0, uncompressed size: 0, data offset from start of block: 16 63892 0xF994 ZyXEL rom-0 configuration block, name: "dbgarea", compressed size: 0, uncompressed size: 0, data offset from start of block: 16 85043 0x14C33 LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 66696 bytes 118036 0x1CD14 Unix path: /usr/share/tabset/vt100:\ 118804 0x1D014 ZyXEL rom-0 configuration block, name: "spt.dat", compressed size: 0, uncompressed size: 0, data offset from start of block: 16 118824 0x1D028 ZyXEL rom-0 configuration block, name: "autoexec.net", compressed size: 25972, uncompressed size: 11886, data offset from start of block: 16 128002 0x1F402 GIF image data, version "89a", 200 x 50 136194 0x21402 GIF image data, version "89a", 560 x 50 253333 0x3DD95 Neighborly text, "neighbor of your ADSL Router that will forward the packet to the destination. On the LAN, the gateway </font>e destination. On the LAN, the gateway </font>" 349586 0x55592 Copyright string: "Copyright (c) 2001 - 2015 TP-LINK TECHNOLOGIES CO., LTD." 386471 0x5E5A7 Copyright string: "Copyright © 2015 TP-LINK Technologies Co., Ltd. All rights reserved." 386489 0x5E5B9 TP-Link firmware header, firmware version: 17256.26992.22113, image version: " Co., Ltd. All rights reserved.", product ID: 0x6E42746E, product version: 1131375727, kernel load address: 0x72002223, kernel entry point: 0x46463939, kernel offset: 4475203, kernel length: 1347765096, rootfs offset: 1768969317, rootfs length: 2020868163, bootloader offset: 1347747908, bootloader length: 1229148245 806847 0xC4FBF LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 2853276 bytes
__________________
Things I've fixed: anything from semis to crappy Chinese $2 radios, and now an IoT Dildo.... "Dude, this is Wyoming, i hopped on and sent 'er. No fucking around." -- Me Excuse me while i do something dangerous You must have a sad, sad boring life if you hate on people harmlessly enjoying life with an animal costume. Sometimes you need to break shit to fix it.... Thats why my lawnmower doesn't have a deadman switch or engine brake anymore ![]() Tomorrow Is Nearly Yesterday And Everyday Is Stupid! Last edited by goontron; 11-04-2016 at 11:47 AM.. |
![]() |
![]() |
![]() |
#6 |
Senior Member
Join Date: Mar 2008
City & State: Vilnius
My Country: Lithuania, EU
I'm a: Professional Tech
Posts: 151
|
![]() That binwalk output looks like gibberish to me.
|
![]() |
![]() |
![]() |
#7 |
Badcaps Veteran
Join Date: Sep 2015
City & State: tehran
My Country: iran
Line Voltage: 220VAC 50Hz
I'm a: Knowledge Seeker
Posts: 206
|
![]() Hi
here is original dump |
![]() |
![]() |
![]() |
#8 |
Great Sage 齊天大聖
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 26,431
|
![]() o.k.
the first 64k is the bootloader, the last 64k is the settings, the bit in the middle is the firmware. so try this one i patched together. |
![]() |
![]() |
![]() |
#9 |
5000!
Join Date: Dec 2011
City & State: South Greeley, Wyoming
My Country: US
Line Voltage: 13.9kv HT service and some 240v center tap oddity.
I'm a: Professional Tech
Posts: 4,029
|
![]() So the firmware is not a complete ROM
Code:
DECIMAL HEXADECIMAL DESCRIPTION -------------------------------------------------------------------------------- 40960 0xA000 ZyXEL rom-0 configuration block, name: "dbgarea", compressed size: 0, uncompressed size: 0, data offset from start of block: 16 49172 0xC014 ZyXEL rom-0 configuration block, name: "spt.dat", compressed size: 0, uncompressed size: 0, data offset from start of block: 16 49192 0xC028 ZyXEL rom-0 configuration block, name: "autoexec.net", compressed size: 25972, uncompressed size: 11886, data offset from start of block: 16 129179 0x1F89B ZyXEL rom-0 configuration block, name: "dbgarea", compressed size: 0, uncompressed size: 0, data offset from start of block: 16 129428 0x1F994 ZyXEL rom-0 configuration block, name: "dbgarea", compressed size: 0, uncompressed size: 0, data offset from start of block: 16 150579 0x24C33 LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 66696 bytes 183572 0x2CD14 Unix path: /usr/share/tabset/vt100:\ 184340 0x2D014 ZyXEL rom-0 configuration block, name: "spt.dat", compressed size: 0, uncompressed size: 0, data offset from start of block: 16 184360 0x2D028 ZyXEL rom-0 configuration block, name: "autoexec.net", compressed size: 25972, uncompressed size: 11886, data offset from start of block: 16 193538 0x2F402 GIF image data, version "89a", 200 x 50 201730 0x31402 GIF image data, version "89a", 560 x 50 318869 0x4DD95 Neighborly text, "neighbor of your ADSL Router that will forward the packet to the destination. On the LAN, the gateway </font>e destination. On the LAN, the gateway </font>" 415122 0x65592 Copyright string: "Copyright (c) 2001 - 2015 TP-LINK TECHNOLOGIES CO., LTD." 452007 0x6E5A7 Copyright string: "Copyright © 2015 TP-LINK Technologies Co., Ltd. All rights reserved." 452025 0x6E5B9 TP-Link firmware header, firmware version: 17256.26992.22113, image version: " Co., Ltd. All rights reserved.", product ID: 0x6E42746E, product version: 1131375727, kernel load address: 0x72002223, kernel entry point: 0x46463939, kernel offset: 4475203, kernel length: 1347765096, rootfs offset: 1768969317, rootfs length: 2020868163, bootloader offset: 1347747908, bootloader length: 1229148245 872383 0xD4FBF LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 2853276 bytes 2035732 0x1F1014 ZyXEL rom-0 configuration block, name: "spt.dat", compressed size: 0, uncompressed size: 0, data offset from start of block: 16 2035752 0x1F1028 ZyXEL rom-0 configuration block, name: "autoexec.net", compressed size: 25972, uncompressed size: 11886, data offset from start of |
![]() |
![]() |
![]() |
#10 |
Great Sage 齊天大聖
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 26,431
|
![]() no, the one from tp-link does not include the bootloader, or the settings block.
the missing settings block was expected because it probably has the mac's in it. |
![]() |
![]() |
![]() |
#11 |
Badcaps Veteran
Join Date: Sep 2015
City & State: tehran
My Country: iran
Line Voltage: 220VAC 50Hz
I'm a: Knowledge Seeker
Posts: 206
|
![]() tnx so much stj
with your file i can not login to setup(user name or password is incorrect( message)). i have this problem with original rom file too. |
![]() |
![]() |
![]() |
#12 |
Great Sage 齊天大聖
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 26,431
|
![]() so do a factory reset - it's in the manual.
http://static.tp-link.com/res/down/d...UN)_V2_QIG.pdf |
![]() |
![]() |
![]() |
#13 |
Badcaps Veteran
Join Date: Sep 2015
City & State: tehran
My Country: iran
Line Voltage: 220VAC 50Hz
I'm a: Knowledge Seeker
Posts: 206
|
![]() tnx all friend to help
rest by button did not work and by setup not impossible because i can not enter to setup. here i uploaded working dump updated with last firmware. tnx again stj |
![]() |
![]() |
![]() |
#14 |
Great Sage 齊天大聖
Join Date: Dec 2009
City & State: Europe
My Country: some shithole run by Israeli agents
I'm a: Professional Tech
Posts: 26,431
|
![]() so it works now?
|
![]() |
![]() |
![]() |
#15 |
Badcaps Veteran
Join Date: Sep 2015
City & State: tehran
My Country: iran
Line Voltage: 220VAC 50Hz
I'm a: Knowledge Seeker
Posts: 206
|
![]() yes.every things is ok.
|
![]() |
![]() |
![]() |
#16 |
New Member
Join Date: Sep 2017
City & State: syria
My Country: hama
I'm a: Knowledge Seeker
Posts: 2
|
![]() pleas I need full dump for 2 router tplink
8961nd v3 + w8901G v3 file format bin |
![]() |
![]() |
![]() |
#17 |
New Member
Join Date: May 2018
City & State: tiaret
My Country: algerie
I'm a: Knowledge Seeker
Posts: 1
|
![]() please dump modeme tp-link w8901G
|
![]() |
![]() |
![]() |
#18 |
New Member
Join Date: Jun 2018
City & State: alger
My Country: algeria
I'm a: Knowledge Seeker
Posts: 1
|
![]() thanks
|
![]() |
![]() |
![]() |
#19 |
New Member
Join Date: Jun 2021
City & State: Isfahan
My Country: Iran
I'm a: Knowledge Seeker
Posts: 1
|
![]() Thanks
|
![]() |
![]() |
![]() |
#20 |
New Member
Join Date: Jul 2020
City & State: baghdad
My Country: iraq
I'm a: Knowledge Seeker
Posts: 3
|
![]() HI EVERY ONE
I NEED w8961n(un) ver 4.0 IS THERE ANY ONE HAS THIS ONE?>? |
![]() |
![]() |
![]() |
Thread Tools | |
Display Modes | |
|
|