Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revisionBoth sides next revision
inbox:toh:arcadyan:astoria:arv7520cw22-a_lt_aka_orange_livebox_2.1_v2_2015 [2021/09/17 10:45] – [OEM bootlog] mandrake-leeinbox:toh:arcadyan:astoria:arv7520cw22-a_lt_aka_orange_livebox_2.1_v2_2015 [2021/09/17 15:30] – [HACKS] mandrake-lee
Line 204: Line 204:
  
 ==== HACKS ==== ==== HACKS ====
 +
 +=== Soft hacks ===
 +While switching on the router, a certain combo of buttons will grant you access to hidden functions. You will notice you're there because of the fancy movement of the leds.
 +
 +== Access to tiny kernel/Restore Tool ==
 +If buttons //reset & wifi// are pressed together during switching on, you will get access to recovery menu at <code>http://192.168.1.1</code>
 +
 +{{ :media:arcadyan:arv7520:tiny_kernel.jpg?direct&400 |}}
 +
 +== Access to VR9 menu ==
 +If buttons //reset & wifi & wps// are pressed together during switching on, you will jump immediatly in the serial console to VR9 menu:
 +<code>
 +ROM VER: 1.1.4
 +CFG 06
 +NAND
 +NAND Read OK
 +DDR PARAM flash addr 1700000
 +DDR PARAM:
 +88888888
 +001a2520
 +001a2120
 +00566301
 +00566501
 +00000200
 +
 +DDR autotuning Rev 1.0
 +DDR check ok... start booting...
 +
 +END TUNE DDR
 +Start booting...........
 +
 +
 +
 +=======================================================================
 +Wireless ADSL IAD VR9 Loader v2.01.07 build Oct 22 2014 16:13:17
 +                    Arcadyan Technology Corporation
 +=======================================================================
 +
 +
 +
 +[VR9 Boot]:
 +</code>
 +\\
 +=== Hard hacks ===
 During boot, specific NAND flash pins can be shorcircuited in order to provoke a boot fail and therefore access to bootfail options. During boot, specific NAND flash pins can be shorcircuited in order to provoke a boot fail and therefore access to bootfail options.
  
Line 209: Line 253:
  
  
-=== Access to UART mode ===+== Access to UART mode ==
   - Switch off the device   - Switch off the device
   - Shortcircuit pin 8&9. See diagram at the bottom. Use the tip of a needle, thin screwdriver, etc   - Shortcircuit pin 8&9. See diagram at the bottom. Use the tip of a needle, thin screwdriver, etc
Line 222: Line 266:
 \\ \\
  
-=== Access to VR9 menu ===+== Access to VR9 menu ==
 This hack will need some training and skill. Don't give up! This hack will need some training and skill. Don't give up!
 Basically, we will let the system jump to brnboot and corrupt the loading of any further image from NAND flash. Basically, we will let the system jump to brnboot and corrupt the loading of any further image from NAND flash.
Line 1718: Line 1762:
  
 ==== OEM tiny kernel bootlog ==== ==== OEM tiny kernel bootlog ====
-This mode can only be accessed via VR9 menu hack, option [k].+This mode can be accessed via soft hack. Check above.
 <WRAP bootlog> <WRAP bootlog>
 <nowiki> <nowiki>
  • Last modified: 2021/09/23 08:39
  • by mandrake-lee