How to Hack paired keys

Find out this trick!

About paired keys.

We know, that newcs supports nd$ paired cards with undocumented options:
<ekpair>********************************</ekpair>

<hwkey>****FA7********F6B803C58A****</hwkey>

(you can simply find *** values in attached dump to compare with yours dump )
(Latest Gbox.net also supports that paired cards.)
So how to get that keys?
It possible to get keys from memory dump.

How to get into box.........
open the box
and look for j514on pcb
there you have 4 pin connection via
this is 232 ttl
connect 232 ttl to this j514 it is 4 pins via there..(add....using any ttl to rs232 converter)
and have putty or serial conection sw
baudrate is 115200 8N1
you will see console booting up from box..
you have linux console now

how to extract the hwkeys and ekpariedkey...
you need the card and valid subscribtion for hd channels for this box
switch off the power box..
but before that switching off the box... tune in the HD chanell first
and turn on the power without SC
you get information insert smartcard in the reader.... OSD on tv
!!!!!!! don't do that.! (don't insert card yet)
you have connect 232 and have console now
shell is busybox
go to /***/bin/
start /.mor_epg_zapviasat &
you will get now the same OSD message now.. "insert sc in the reader"
do that..
you got hd picture now
switch off the box on the front of box..
not power cable..
take dump from /dev/mem
with dd cmd dd if=/dev/mem of=/mnt/usb/somefile.bin
but you have to mount usb firstbecause too big file

about 268 mbyte
take this dump out and connect t
final step
just look in memory for 30 00 00 01 tag or 30 00 01

and after what 16 byte is the first key

and the second one is 10 00 00 tag from memory
You got paired keys

Zum Vergrößern anklicken....

So if anybody could take a look at this sample mg.cfg config

Old GBOX as a server

- add conax cas7 support

Mgcamd as a client

this is mfg_cfg:

M: { 00 }
C: { 00 }
A: { 00 }
U: { 01 }
T: { 00 }
G: { 24 }
N: { 07 } 5 30
K: { 05 }
Q: { 600 }
P: { 00 }
O: { 00 }
S: { 00 } 80
L: { 00 }
E: { 15 }
H: { 00 }
R: { 00 }
D: { 00 }
B: { 00 }
F: { 00 }

this is peer.cfg:

X: { 16 }
I: ( 05 }
N: { 0 0 0 0 3000 4500 }
S: { 0 0 0 0 1000 3000 }
U: { 01 }
C: { 00000000000000000903E47111111111111111111111677D37 86D316B621 11111111C789DAA739F4111111111111111118D849B9600000 0000000000 0000FB9B013 }
M: { xxxxxxxx.dyndns.org { xxxxxxxx }}
C: { 000000000000000000000094CA5C444214149CF6A111111111 1111111111 4F23F74A4BAD11111111111111111111111111111111F3D05F 0000000000 000000000000000000CB18F19118837D }

a UDP port now needs to be open on the router.

works just fine on enigma2, any box.

ONLY mgcamd 1.35 a working.

Zum Vergrößern anklicken....

Edwin* schrieb:

DigitALB HD works with MgCamd 1.35a



Une per momentin kom pagu vetem kanalet normale dhe ato i kam te celme ashtu kshtu.

kush i ka HD e DGA te pagume i cel vetem me ket config per momentin.

kur te ket dicka te re ju lajmeroj vet perseri.

ju lutem no PN.
[TABLE="class: tableinborder, align: center"]
[TR]
[TD="class: tablecat, align: left"][/TD]
[/TR]
[TR="class: normalfont"]
[TD="class: inposttable, align: left"][/TD]
[/TR]
[/TABLE]

Zum Vergrößern anklicken....