Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| inbox:toh:arcadyan:astoria:arv7520cw22-a_lt_aka_orange_livebox_2.1_v2_2015 [2021/09/17 10:45] – [OEM bootlog] mandrake-lee | inbox:toh:arcadyan:astoria:arv7520cw22-a_lt_aka_orange_livebox_2.1_v2_2015 [2021/09/17 15:30] – [HACKS] mandrake-lee | ||
|---|---|---|---|
| Line 204: | Line 204: | ||
| ==== HACKS ==== | ==== HACKS ==== | ||
| + | |||
| + | === Soft hacks === | ||
| + | While switching on the router, a certain combo of buttons will grant you access to hidden functions. You will notice you're there because of the fancy movement of the leds. | ||
| + | |||
| + | == Access to tiny kernel/ | ||
| + | If buttons //reset & wifi// are pressed together during switching on, you will get access to recovery menu at < | ||
| + | |||
| + | {{ : | ||
| + | |||
| + | == Access to VR9 menu == | ||
| + | If buttons //reset & wifi & wps// are pressed together during switching on, you will jump immediatly in the serial console to VR9 menu: | ||
| + | < | ||
| + | ROM VER: 1.1.4 | ||
| + | CFG 06 | ||
| + | NAND | ||
| + | NAND Read OK | ||
| + | DDR PARAM flash addr 1700000 | ||
| + | DDR PARAM: | ||
| + | 88888888 | ||
| + | 001a2520 | ||
| + | 001a2120 | ||
| + | 00566301 | ||
| + | 00566501 | ||
| + | 00000200 | ||
| + | |||
| + | DDR autotuning Rev 1.0 | ||
| + | DDR check ok... start booting... | ||
| + | |||
| + | END TUNE DDR | ||
| + | Start booting........... | ||
| + | |||
| + | |||
| + | |||
| + | ======================================================================= | ||
| + | Wireless ADSL IAD VR9 Loader v2.01.07 build Oct 22 2014 16:13:17 | ||
| + | Arcadyan Technology Corporation | ||
| + | ======================================================================= | ||
| + | |||
| + | |||
| + | |||
| + | [VR9 Boot]: | ||
| + | </ | ||
| + | \\ | ||
| + | === Hard hacks === | ||
| During boot, specific NAND flash pins can be shorcircuited in order to provoke a boot fail and therefore access to bootfail options. | During boot, specific NAND flash pins can be shorcircuited in order to provoke a boot fail and therefore access to bootfail options. | ||
| Line 209: | Line 253: | ||
| - | === Access to UART mode === | + | == Access to UART mode == |
| - Switch off the device | - Switch off the device | ||
| - Shortcircuit pin 8&9. See diagram at the bottom. Use the tip of a needle, thin screwdriver, | - Shortcircuit pin 8&9. See diagram at the bottom. Use the tip of a needle, thin screwdriver, | ||
| Line 222: | Line 266: | ||
| \\ | \\ | ||
| - | === Access to VR9 menu === | + | == Access to VR9 menu == |
| This hack will need some training and skill. Don't give up! | This hack will need some training and skill. Don't give up! | ||
| Basically, we will let the system jump to brnboot and corrupt the loading of any further image from NAND flash. | Basically, we will let the system jump to brnboot and corrupt the loading of any further image from NAND flash. | ||
| Line 1718: | Line 1762: | ||
| ==== OEM tiny kernel bootlog ==== | ==== OEM tiny kernel bootlog ==== | ||
| - | This mode can only be accessed via VR9 menu hack, option [k]. | + | This mode can be accessed via soft hack. Check above. |
| <WRAP bootlog> | <WRAP bootlog> | ||
| < | < | ||