STI7111 CPU CORE

ndsndsnds

Banned
Messages
29
Dear friends,
I did not understand clearly .. what is actually happening .
Chapa have some dvb-s2 i think its dishtvSD . BOX solution issue ...
He belive devloper did not solve it good .... but did he pay to deloper for some issue ?
Was this deal happened on this board......
Sorry friends its not clear .... can some one explain from the start what exactly happen.
Which country mr devloper is ?-----
 

ndsndsnds

Banned
Messages
29
"ndsndsnds" im work with her dumps for many cpu
im reverse her dumps and they full have wath i need keys soo!! who said devloper not good man ... he sure not know wath do after dump and still watch only !

Dear sir ... you said her ...... twice ... are you sure you are talking about some one ...... " HER "
 

sambas33

Registered
Messages
37
what a mess here goes!
dump(Chapa)was not correct, with some tricks stayed good, now you will not pick up the 3des key of dump, the facilities ended! lol
 
Last edited:

boost

Registered
Messages
19
stopped cry like the childs devloper is expert and good man no descution in this ... but who are don't know wath he need i think he must go find other forum to post shit
sambas33 is right ...thank you for the real idea
 

ndsndsnds

Banned
Messages
29
I can Confirms Devloper is good . . . Not So many information about him i can share here ... because he do not want me tell his ability in forums .. . only one WORD.
He is good .
 

Pepesuriano

Registered
Messages
10
Hi all, I got a irdeto STB with STI7111 and I get serial access to it, besides it has not a busybox or similar, is it possible to extract anything from it?

Thanks!
 

n3bk

Registered
Messages
34
possible, but only info on net is by Adam Gowdiak

Not all adams work, there is some other info´s around hard to find...or to be understood even if found.

All in all u can forget the easy days, like it has been said all along for such a long time now.

forget firmware flash dumps, new keys used are stored inside the CPU.

How to get them? thats another completely different story, and i doubt anyone who knows how to will share any info.
 

sambas33

Registered
Messages
37
Not all adams work, there is some other info´s around hard to find...or to be understood even if found.

All in all u can forget the easy days, like it has been said all along for such a long time now.

forget firmware flash dumps, new keys used are stored inside the CPU.

How to get them? thats another completely different story, and i doubt anyone who knows how to will share any info.
Truth is that I made a dump via usb and was there the block 016c in plain text, mod1, mod2, data50, mod50, aeskey, session key and perhaps others that I do not know ...
 
Last edited:

maxious

Registered
Messages
7
I have a st7111 box (Videocon d2h).
My box has a 10 pin jtag port and i decided to use one sample from the web

www.avi-plus.com/media/kunena/attachment...n-st-jtag-pinout.png

however i am stuck with the below status.
can someone help, should i change the mb411stb7100 to something else for st7111

(gdb) mb411stb7100 STMCLT1000A "msglevel=all jtagreset -inicommand mb411stb7100bypass_setup
The target is assumed to be little endian
The target architecture is assumed to be sh4
SDI [INFO] :: [SERVER] sdi_Configure(1)
SDI [DEBUG] :: [SERVER] sdi_Configure: argv[0]: jtagreset=
SDI [INFO] :: [SERVER] sdi_Configure(1)
SDI [DEBUG] :: [SERVER] sdi_Configure: argv[0]: endian=little
SDI [INFO] :: [SERVER] sdi_Configure(1)
SDI [DEBUG] :: [SERVER] sdi_Configure: argv[0]: deviceid=STMCLT1000A
SDI [DEBUG] :: [SERVER] host_JTAG_Open: Ignoring device identifier []
SDI [DEBUG] :: [SERVER] host_JTAG_Open: Ignoring device identifier []
SDI [DEBUG] :: [SERVER] host_JTAG_Open: Ignoring device identifier []
SDI [DEBUG] :: [SERVER] host_JTAG_Open: Ignoring device identifier []
SDI [ERROR] :: [SERVER] host_JTAG_DeviceID: Unknown device identifier STMCLT1000A
SDI [ERROR] :: [SERVER] processSDICommand: sdi_Initialise failed
SDI [ERROR] :: Command SDI_INITIALISE failed (0)
SHDEBUG [ERROR] :: Unable to initialise SDI interface
Unable to connect to remote target STMCLT1000A
<all jtagreset -inicommand mb411stb7100bypass_setup"
The target is assumed to be little endian
The target architecture is assumed to be sh4
SDI [INFO] :: [SERVER] sdi_Configure(1)
SDI [DEBUG] :: [SERVER] sdi_Configure: argv[0]: jtagreset=
SDI [INFO] :: [SERVER] sdi_Configure(1)
SDI [DEBUG] :: [SERVER] sdi_Configure: argv[0]: endian=little
SDI [INFO] :: [SERVER] sdi_Configure(1)
SDI [DEBUG] :: [SERVER] sdi_Configure: argv[0]: deviceid=STMCLT1000A
SDI [INFO] :: [SERVER] sdi_JtagMode(0)
SDI [DEBUG] :: [SERVER] host_JTAG_Mode: Manual mode
SDI [INFO] :: [SERVER] sdi_JtagControl({tck=0, tdo=0, tms=0, ntrst=1, nrst=0, asebrk=0, stmmx=0, triggerout=0})
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tck(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdo(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tms(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: ntrst(1) = 0
SDI [DEBUG] :: [SERVER] host_JTAG_Control: nrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: asebrk(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: stmmx(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: triggerout(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdi(1) = 0
SDI [INFO] :: [SERVER] sdi_JtagControl({tck=0, tdo=0, tms=0, ntrst=0, nrst=1, asebrk=0, stmmx=0, triggerout=0})
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tck(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdo(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tms(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: ntrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: nrst(1) = 0
SDI [DEBUG] :: [SERVER] host_JTAG_Control: asebrk(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: stmmx(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: triggerout(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdi(1) = 0
SDI [INFO] :: [SERVER] sdi_JtagControl({tck=0, tdo=0, tms=0, ntrst=0, nrst=0, asebrk=1, stmmx=0, triggerout=0})
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tck(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdo(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tms(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: ntrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: nrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: asebrk(1) = 0
SDI [DEBUG] :: [SERVER] host_JTAG_Control: stmmx(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: triggerout(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdi(1) = 0
SDI [INFO] :: [SERVER] sdi_JtagControl({tck=0, tdo=0, tms=0, ntrst=0, nrst=1, asebrk=0, stmmx=0, triggerout=0})
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tck(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdo(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tms(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: ntrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: nrst(1) = 1
SDI [DEBUG] :: [SERVER] host_JTAG_Control: asebrk(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: stmmx(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: triggerout(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdi(1) = 0
SDI [INFO] :: [SERVER] sdi_JtagControl({tck=0, tdo=0, tms=0, ntrst=0, nrst=0, asebrk=1, stmmx=0, triggerout=0})
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tck(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdo(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tms(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: ntrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: nrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: asebrk(1) = 1
SDI [DEBUG] :: [SERVER] host_JTAG_Control: stmmx(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: triggerout(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdi(1) = 0
SDI [INFO] :: [SERVER] sdi_JtagControl({tck=0, tdo=0, tms=0, ntrst=1, nrst=0, asebrk=0, stmmx=0, triggerout=0})
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tck(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdo(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tms(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: ntrst(1) = 1
SDI [DEBUG] :: [SERVER] host_JTAG_Control: nrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: asebrk(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: stmmx(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: triggerout(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdi(1) = 0
SDI [INFO] :: [SERVER] sdi_JtagControl({tck=2, tdo=2, tms=2, ntrst=2, nrst=0, asebrk=0, stmmx=0, triggerout=0})
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tck(2) = 00
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdo(2) = 00
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tms(2) = 00
SDI [DEBUG] :: [SERVER] host_JTAG_Control: ntrst(2) = 01
SDI [DEBUG] :: [SERVER] host_JTAG_Control: nrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: asebrk(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: stmmx(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: triggerout(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdi(2) = 00
SDI [INFO] :: [SERVER] sdi_JtagMode(0)
SDI [DEBUG] :: [SERVER] host_JTAG_Mode: Manual mode
SDI [INFO] :: [SERVER] sdi_JtagControl({tck=5, tdo=5, tms=5, ntrst=5, nrst=0, asebrk=0, stmmx=0, triggerout=0})
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tck(5) = 01010
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdo(5) = 01111
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tms(5) = 00000
SDI [DEBUG] :: [SERVER] host_JTAG_Control: ntrst(5) = 00011
SDI [DEBUG] :: [SERVER] host_JTAG_Control: nrst(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: asebrk(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: stmmx(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: triggerout(0) = <empty>
SDI [DEBUG] :: [SERVER] host_JTAG_Control: tdi(5) = 00000
SDI [INFO] :: [SERVER] sdi_JtagMode(3)
SDI [DEBUG] :: [SERVER] host_JTAG_Mode: Normal mode
SDI [INFO] :: [SERVER] sdi_Attach(-1)
SDI [DEBUG] :: [SERVER] sdi_Attach: JTAG reset
SDI [DEBUG] :: [SERVER] host_JTAG_Mode: Normal mode
SDI [ERROR] :: [SERVER] host_UDI_SDDR_FIFO_POLL: Missing data transfer handshake in SDSR register (0)
SDI [ERROR] :: [SERVER] loadSegments: Unable to load segment at 0xfc000000
SDI [ERROR] :: [SERVER] loadOverlay: Unable to load segments (Boot/Reset)
SDI [ERROR] :: [SERVER] sdi_Attach: Unable to load overlay (Boot/Reset)
SDI [ERROR] :: [SERVER] processSDICommand: sdi_Attach failed
SDI [ERROR] :: Command SDI_ATTACH failed (0)
SDI [INFO] :: [SERVER] sdi_DeInitialise()
SDI [INFO] :: [SERVER] hbc_DeInitialise()
SDI [INFO] :: [SERVER] bp_DeInitialise()
SDI [INFO] :: [SERVER] host_JTAG_DeInitialise()
Unable to attach to remote target STMCLT1000A
 

Newtman

Registered
Messages
22
Hello,
I have got an STB with STI7101 using conax with pairing.
Anyone have the solution?
I can remove safety the CPU but I don't know what programmer I must use to dump it...
Thanks.
 

mybuntu

Registered
Messages
4
Hello, i have sti7111 nagra cak7 merlin. rx tx connected. Flash dumped and decrypted, but stuck now. All help/info welcome.
 

sat100

Registered
Messages
75
Hi All Friends and Expert i need some info about cwpk

i want to know in what block header are store cwpk

in Nagra its block header: 00000097
 
Top