Anyone every tried uncapping a

CableKid · Post by **CableKid** » Sat Jan 27, 2007 1:14 pm

Anyone ever tried uncapping a

ARRIS
MODEL: TM502G
Firmware Name: TS040569R_052406_MODEL_4_5_D11PLUS

It also is for Digital phone, This modem is giving out by Timewaner.

Think its possible? Any programs that might uncapp this with out the use of Jtag

tester5 · Post by **tester5** » Sat Jan 27, 2007 3:28 pm

its a lot of woork for usbbdm .....i am sure every device in the worlds that uses broadcom can be jtaged by this usbjtag but the main problem is to make a DLL.....and make the defenition for it you have to find out any device memory ranges...flash size etc,.

and if your thinkind of messing around with phone line then shoot yourself now....

get a 5100 those are the most comun and verry easy to play with.

CableKid · Post by **CableKid** » Sat Jan 27, 2007 4:07 pm

Ya well i was not going to touch the phone line :P,

I do have a Sb3100 sitting in the garage but cant use it since The Phone Needs to be connect to the internet Or else i have no phone.

Post by **usbbdm** » Sat Jan 27, 2007 4:12 pm

If it is Broadcom chip then USB JTAG should have very little trouble to connected to it.

CableKid · Post by **CableKid** » Sat Jan 27, 2007 4:14 pm

Ya but even if it did connect i would not even know where to start.

shappyking · Post by **shappyking** » Sun Nov 16, 2008 10:43 pm

usbbdm wrote:If it is Broadcom chip then USB JTAG should have very little trouble to connected to it.

so can you help me in programming a tm502g in order to restore connection, it was disconnected from the service provider

UserName · Post by **UserName** » Mon Nov 17, 2008 11:35 am

it can be jtaged

shappyking · Post by **shappyking** » Mon Nov 17, 2008 12:07 pm

UserName wrote:it can be jtaged

This is a pic of the inside of the TM602g modem, i circled 2 areas which i think might be the jtag spots. can you tell me which is the right one? and how can i go about modding it, i dont see that modem as an option in the usbjtag software

Post by **usbbdm** » Mon Nov 17, 2008 12:20 pm

Standard EJTAG has pin 2,4,6,8 ground.This might help you find which one is JTAG

shappyking · Post by **shappyking** » Mon Nov 17, 2008 12:28 pm

usbbdm wrote:Standard EJTAG has pin 2,4,6,8 ground.This might help you find which one is JTAG

Ok that means it's number 1 now what software can i use with my usbjtag in order to get it re-connected. Also, i sent an email to my friend at ebay and he is working on the issue.. He said he'll get the items from the cloner off..

Naztheros · Post by **Naztheros** » Mon Nov 17, 2008 12:34 pm

it has a TNET processor.. so there won't be much things to do with it, specially coz there's no hacked firmware for it (sigma/ambit/haxorware)

UserName · Post by **UserName** » Mon Nov 17, 2008 1:03 pm

you can only clone the mac from another one like it...or fnd shell firmware to change mac or learn how to change mac in the cfg area and clone a mac with docsis 1.0 config.

shappyking · Post by **shappyking** » Mon Nov 17, 2008 5:48 pm

UserName wrote:you can only clone the mac from another one like it...or fnd shell firmware to change mac or learn how to change mac in the cfg area and clone a mac with docsis 1.0 config.

The tm602g has 4 macs it has the

EMAC
CMAC
MTA-MAC
USB-MAC

holy1pope · Post by **holy1pope** » Thu Nov 20, 2008 7:37 am

shappyking wrote:The tm602g has 4 macs it has the

EMAC
CMAC
MTA-MAC
USB-MAC

only one mac matters and that is the CMAC in our case. and its very easy to get valid MAC addresses i have hundreds of them Shappyking.

shappyking · Post by **shappyking** » Thu Nov 20, 2008 12:48 pm

holy1pope wrote:only one mac matters and that is the CMAC in our case. and its very easy to get valid MAC addresses i have hundreds of them Shappyking.

Ok, what yeah getting the valid macs is 1 but changing the ones in the TM602g is the hard part. I have been only able to change the USBMAC

Anyone every tried uncapping a

Anyone every tried uncapping a

Who is online