Please post anything that you need to debrick in here.

Post a reply


This question is a means of preventing automated form submissions by spambots.
Smilies
:) :o :D ;) :p :mad: :confused: :( :shock: :? 8) :lol: :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :rolleyes:

BBCode is OFF
Smilies are ON

Topic review
   

Expand view Topic review: Please post anything that you need to debrick in here.

calix 836GE ont

by sandhead » Tue Jan 20, 2015 11:50 am

anyone know how to jtag broadcom BCM68181FSBG processor

Trying to debrick an IP telephone

by zippydan » Fri Dec 12, 2014 3:32 pm

I have a several IP telephones that have been bricked due to bad/incomplete/interrupted firmware flashes. I'm looking for a way to read the firmware from a working unit and then program it to a bricked unit.

The thing is I don't have any experience with JTAG. I'm looking for guidance on which JTAG adapter I need and what software I need, and just general suggestions or advice.

Here are some pics of the phone's circuit board: http://imgur.com/a/i55O8

by usbbdm » Sun Oct 19, 2014 4:22 pm

If you can detect CPU and you need to know the address definition, this flash (S29GL256P) should support CFI and it should be easy to access.

BlackCat JTAG

by filter4ever » Sun Oct 19, 2014 3:06 pm

OK, I've got my BlackCat USB JTAG to detect the CPU, but it still won't detect the flash. Another user told me I needed to bring the 'flash enable' chip 'HIGH' (3.3v) to enable flash. Is this the little 16-pin SMD 74HC153D directly above the serial header? If I can get this chip to enable, I assume it will write memory, and I can write a script for it.

I've got an Arduino and would love to do this for a school project. If anyone has any info, let me know, I can tell it to go 'high' at the right time, etc.

Wzr-hp-g300nh

by filter4ever » Sat Oct 18, 2014 4:55 pm

I found a site containing a lot of firmware and bootloaders for various routers, including my WZR-HP-G300NH.

Here's the site for everyone who needs firmware files, hope it helps:

ftp.maddes.net

If you poke around the 'openwrt', and 'maddes.net' folders, you'll find a bunch of full-flash images, as well as source code files for UBOOT, etc. I haven't looked, but it seems there is a TON of useful data for multiple routers, for us 'Low Level' hardware troubleshooters.

I'm still working on getting my WZR-HP-G300NH back alive. I pried the cage off and found the flash chip, a 256 MBit/ 32MB Spansion S29GL256P. I have a BlackCat JTAG as well, does anyone know if this would work?

Buffalo WZR-HP-G300-NH Firmware Dump

by filter4ever » Fri Oct 17, 2014 11:59 pm

Anyone have full firmware, or at least the UBOOT portion, for a WZR-G300-NH A0 D0?

I 'mtd erase flash' ed it, now I gotta resurrect it from the dead. I only get power light, and switches between 'movie engine' thing. I'd do TFTP, but I get no 'link' lights on the Ethernet. Nadda.

I tried serial but got no response

Next is JTAG, and on Monday, I'm getting a TL866A EPROM burner with ICSP. Gonna try ICSP, and as a last-ditch effort... removing the SMD chip and programming it.

If anyone has ideas on how to debrick from this state, please shout them out.

sb5100 flash

by gcan » Sun Apr 20, 2014 10:23 am

hi i will like a little help here please i have 2 sb5100 and the lights are not coming on no more. i need a good flash for the sb5100. any help is appreciated

by Hyperion » Fri Nov 15, 2013 3:25 am

need sb5120 bootloader
can someone upload it pls?

by robbie1223 » Mon Apr 22, 2013 5:51 am

syankey1970 wrote:This method has saved my ass sooooo many times....

If that fails then I resort to the 3.3v jumpstart which usually does the trick.
Thank U for the reply

by syankey1970 » Sun Apr 21, 2013 6:15 pm

This method has saved my ass sooooo many times....

If that fails then I resort to the 3.3v jumpstart which usually does the trick.

by CAPONE » Sat Apr 13, 2013 6:16 pm

robbie1223 wrote:Yes USBBDM....I tried that many times and could not get the chipset detected so it wont let me reprogram the boot file I erased.

I will try again tomorrow and a friend of mine is bringing over his dct700 so I can try what Capone suggested.

Thanks for helping this lady out....you guys are great....
Yes, I have also tried and same result as you. Try the Switch Method and it will work for sure. Here is How I do it

1. Pick All Flash tab then Load Known Good Flash backup
2. Connect both boxes
3. Detect good box then quickly switch USBJTAG NT Connector to Bad Box.
4. Type "sprogram 90000000 200000" [Enter] and wait for it to program entire flash.

by robbie1223 » Sat Apr 13, 2013 6:09 pm

usbbdm wrote:Have you watched this?
http://usbjtag.com/tutorial/dct700/dct700debrick1.php


Yes USBBDM....I tried that many times and could not get the chipset detected so it wont let me reprogram the boot file I erased.

I will try again tomorrow and a friend of mine is bringing over his dct700 so I can try what Capone suggested.

Thanks for helping this lady out....you guys are great....

by CAPONE » Sat Apr 13, 2013 5:59 pm

robbie1223 wrote:Do you suggest trying to detect first with another dct700 and then switch back to the bricked cbox and then sprogram it with the back up bin?


Thanks for answering so fast
YES, That is Exactly what I would do, as I have posted as well. Has worked well for me.

by usbbdm » Sat Apr 13, 2013 5:30 pm

robbie1223 wrote:Do you suggest trying to detect first with another dct700 and then switch back to the bricked cbox and then sprogram it with the back up bin?


Thanks for answering so fast
Have you watched this?
http://usbjtag.com/tutorial/dct700/dct700debrick1.php

by robbie1223 » Sat Apr 13, 2013 2:07 pm

CAPONE wrote:No Light = You erased flash but did not program it right after erase.

It is Fixable. Good Luck ;)



Do you suggest trying to detect first with another dct700 and then switch back to the bricked cbox and then sprogram it with the back up bin?


Thanks for answering so fast

Top