Hacking CA system challenge *Tandberg [ NO Keys Allowed in Chat Section/s ]*

[Rambohack]

After 2 years with the same key, last week Unimas mux @ 103 west changed.

Anybody kind enough to decode the Tandberg key for this channel please?

Here is a 2 minute .Ts recording (232Mb) archive:

http://www.mediafire.com/file/mhfdq...255_-_Unimas_East_HD_-_instant_record.ts/file

Thank you very much for your help, i really appreciate it

 

[leehrat]

if anyone has the new 103 west unimas mux keys yet please pm me. thanks

 

[ooOO_SORGOS_OOoo]

FOX NETWORK 42E

[Emu] nano 0xE4, mode 1
[Emu] GetEMMKey: key_index(66), keySet: 2
emmKey:
26 3E 76 9E 6B 16 C7 A7

DOESNT FOUND ECM KEYS

@RAMBO I CANT FIND KEYS YOUR TS FILE

 

[ooOO_SORGOS_OOoo]

POC V1.6 AND LATEST VER. V1.6 MOD2 CANT FOUND fox network keys 42e

we need some help..

 

[ooOO_SORGOS_OOoo]

nat geo hd log.

poc_1.6_mod_2 exracted but no keys :S

 

[ooOO_SORGOS_OOoo]

FTS-FX_HD_12461_V_20800_20190308_2222_VPID-2957


renamed it 2.ts
13107 sid number

poc.exe 2.ts 13107 1.ts

pause

it cant found

 

[harshy]

So where did we get to any chance for breaking this encryption.

 

[Rumuz34]

Do you have a new key? Outside the FX channel.

 

[ooOO_SORGOS_OOoo]

fox network using different 3 ecm keys,olld logs but most different keys

poc how to found it?

 

[ooOO_SORGOS_OOoo]

fox network using emm keys ; key index

88 piece , key index 6A
90 piece , key index 6B
89 piece , key index 6C
88 piece , key index 6D
90 piece , key index 6E
89 piece , key index 6F
-------------------------------------------
90 piece , key index 60
89 piece , key index 61
88 piece , key index 62
90 piece , key index 63
89 piece , key index 64
88 piece , key index 65
89 piece , key index 66
88 piece , key index 67
90 piece , key index 68
89 piece , key index 69

 

[ooOO_SORGOS_OOoo]

fox crime 17 march
~~ 2 hours emm records

not found keys
**POC.EXE
***RUN.BAT

*****ERROR SAYS : Bad len. EOF.

 

[ooOO_SORGOS_OOoo]

if you want to brute force:
(1) brute force the cw with the rainbow table tool (like BISS) -> this gives you the cw
(2) get the E1 nano tag from the 83 table, that was sent during the brute forced cw period -> this will give you the encrypted cw
(3) you now have cw and (des-)encrypted cw, you can assume that the last byte of the des key is 00. now brute force the des key -> this is the ecm key

how to make this :S

 

[chk8210]

Finally this Fox pack is working or not with emu792?
I tried with new idents (1005-100C)/old keys. Based on OSCAM log it's open, but black screen.

 

[chk8210]

Is there any changes regarding America TV Peru (40.5W 3923L)?
Based on log it's opening but black screen.

 

[kebien]

Is there any changes regarding America TV Peru (40.5W 3923L)?
Based on log it's opening but black screen.

It happens with certain receivers.
What are you using?
Try asking a friend with a PC card to check.

 

[chk8210]

It happens with certain receivers.
What are you using?
Try asking a friend with a PC card to check.

OK, I will try. Now I'm using VU+Zero 4K with OpenATV 6.2.

 

[Celal Gul]

Nat Geo log

https://mega.nz/#!GmARRA4Z!Jv2HaWZQUNnADk3jyjJ7tKgfK92TCYsP8CbL7vzWaXk

 

[velid2125]

24kitchem emmlog

https://mega.nz/#!poJThAxZ!0F4HiIWeQlU_KVp9o5v6n9-aOFMyKnMvReLmZ8TnqMA

 

[velid2125]

Hi tandberg key hunters
Can you see this bin file. Easy for everyone. Good evening.:thum:

https://mega.nz/#!ExQEgASZ!J-DF7rukM7I5Xnb9KxHepGIk5snOnPnFgB1e6iBJOpY

 

[velid2125]

poc 1.6_mod
TS mode
[Emu] info: FFDecsa parallel mode = 32
[Emu] stream found emm_pid: 1F4 What is this?
emm:
82 70 B4 01 DE 1D 82 01 44 6A DA 02 08 00 10 AB
66 F0 2C E0 2A FF 01 00 00 10 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01
DE 1D 82 01 55 3B DA 02 08 00 10 68 63 F0 2C E0
2A FF 01 00 00 10 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 01 DE 1D 82 01
8E 17 91 02 08 00 10 D4 63 F0 2C E0 2A FF 01 00
00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00
[Emu] got EMM nano tag E0 (EMM_TAG_RECEIVER_ALLOCATION_DESCRIPTOR) for the first time
emm:
82 70 B4 01 DE 1D 82 01 22 30 91 02 08 00 10 77
63 F0 2C E0 2A FF 01 00 00 10 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01
DE 1D 82 01 2E 30 91 02 08 00 10 CC 63 F0 2C E0
2A FF 01 00 00 10 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 01 DE 1D 65 01
4C F5 0F 02 08 00 10 6F 86 F0 2C E0 2A FF 01 00
00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00
emm:
82 70 B4 01 DE 1D 82 01 66 28 91 02 08 00 10 82
63 F0 2C E0 2A FF 01 00 00 20 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01
DE 1D 82 01 19 5C DA 02 08 00 10 C7 63 F0 2C E0
2A FF 01 00 00 10 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 01 DE 1D 82 01
45 2E 91 02 08 00 10 43 6E F0 2C E0 2A FF 01 00
00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00