Hacking CA system challenge *Tandberg [ NO Keys Allowed in Chat Section/s ]*

kebien

Registered
Messages
1,329
Does this key not open the caracol channel of the Intelsat 21 - 58ºw satellite?

This key 0B should open channels using EID 0B in any satellite....whatever the name of the channel is.
If caracol and RCN use the same EID,the key works for both.
 

hoffmann

Registered
Messages
313
Hacking CA system challenge *Tandberg [ NO Keys Allowed in Chat Section/s

Hi Kebien!
EID Would be the SID of the channel?
 

kebien

Registered
Messages
1,329
Guys
Whenever you find yourself not knowing what the keys are for,go back to the start of the thread.
It explain everything about this EMM keys,in simple form.
Then new changes are also explained in this thread.
Please be kind and try to read back what is posted.
Makes no sense to post everything again.
I know is a long thread,but read,make your notes,and you do not have to read again.Or question what are this keys for.
Just a friendly advice.
 

kebien

Registered
Messages
1,329
Thank you, I was in the former blade citation in the modernization of the first nano, but now I do not know how to do so

They introduced a new descriptor in the EMM,and latest POC is updated to handle it.
Look for the post for the latest POC,and read some pages back for explanation of the new descriptor.
 

LoveMyDish

Registered
Messages
155
They introduced a new descriptor in the EMM,and latest POC is updated to handle it.
Look for the post for the latest POC,and read some pages back for explanation of the new descriptor.

Where is the latest POC? What section on Sat-Universe? or is it external links?

Thanks
 

kebien

Registered
Messages
1,329
T 0006 01 9EFB526D76BC7501 ; 800-T2MI_RCN(40.5°W)
Please take note that this is not normal TS channel. So at the moment I have not test it validity. My best guess is that we decrypt the pid 1000 and then we play what ever is on it. I do not know! Hopefully some one will explain.

Key is valid,Vplug does show good ECM decryption/CWs.

Now if someone can post Video and audio PIDs of this channel,please.
PMT uses unknown descriptors,so some devices cannot pick them up.
Some will lock but won't be able to understand T2 MI PLP anyway.
This is PMT,if anyone understand the descriptors please post for others to learn
00 02 B0 25 03 20 C5 00 00 FF FF F0 0B 0E 03 C0 C5 91

[09 04 10 10 E3 87} CA descriptor 09,lenght,CA ID,ECM pid

06 F0 00 F0 08 52 01 01 0E 03 C0 C5 44 89 2D AE D1
Last line is where audio and video pid is,but descriptors are unknown

MODERATORS
if you feel this response should not be here,please MOVE it to appropriate section,please do not delete.
 
Last edited:

drhans

Registered
Messages
116
The PIDs are on Lyngsat :)
But since it's T2-MI, the whole mux is contained in PID 1000, including the PMTs.
I think it's a little nice challenge for aspiring coders to write a simple stream-relay-type tool that will decrypt, demux and stream.
 
Top