LExxB650 T2P CI+ hacking

[arris69]

I did dd /dev/bml0/20 , 18 & 16 to files on my USB-stick.

You'll find them here:
http://217.148.84.117/ext/bml0.16.dd (120Mb)
http://217.148.84.117/ext/bml0.18.dd (1Mb)
http://217.148.84.117/ext/bml0.20.dd (1Mb)

At your service!
Arris, need anything more?

Jeroen

nice thanks, looks 18 and 20 realy holds some keys. (question is what are crypted with them firmware or just needed by authuld)

for me has the SamyGOntrol Panel precedence now

thnx a lot for the dump may some (crypto guru) can need the keys

arris

[arris69]

I got a LE46B650T2PXXN; looks like a CI+ device to me....

I can use the Telnet enabler (https://sourceforge.net/projects/samygo ... z/download), dump it on an USB-stick, and do the magic.

It just executes the program without any serious warning in the logs....

Only downside is that it's not persistent; after a reboot you will have to start it again.

SamyGO Telnet Enabler is on non ci+ devices also not persistent, its designed for manual start if required.
so same behavior as on other devices, only strange thing in the log it looks like you started it 4 times, but who cares if its working

arris