Trying to hack a Samsung LT24D310 TV

[anonymous40863083]

Hi,I am trying to hack a Samsung LT24D310 TV with a T-NVTUSACM-1004.0 firmware through the hospitality mode exploit but i cant get the hack to run anything from USB
I tried the following two hacks:
https://forum.samygo.tv/viewtopic.php?f=22&t=3501
https://forum.samygo.tv/viewtopic.php?t ... +mode+hack
And they all imported successfully w/o any errors but the TV still doesnt execute anything from USB
Using symlinks in the Media Play function i was able to see that the exploit did create the SamyGo.sh file in /mtd_rwarea but there is no start.sh file there
I can also give info about directory structure if requested
The TV does not support linux file systems(The XFS file system still works for the hotel mode exploit) but using symlinks in an NTFS filesystem in USB created w/ the ln -s command in linux i am able to see the directory structure of the TV as well as the existence of any file in Media Play but i cant open anything
I would also like for a way to be able to dump the entirety of the TV file system to USB if possible through the hospitality mode exploit

[anonymous40863083]

I also want to be able to run a telnet server on the TV over USB even if i cant run SamyGO on it

[anonymous40863083]

I found a way to use the hotel mode exploit to dump any file(but not folders) from the TV's internal storage to USB
1.Flash any of the two images of this exploit to USB
https://wiki.samygo.tv/index.php?title= ... arm_models
2.Copy one of the T-something folders to PC.Format the first partition of the USB with the NTFS file system and then copy the folder back
3.Change the name of the copied folder in the USB to T-NVTUSACM and make sure that the paths in the Clone.dat file of the Clone subfolder of the T-NVTUSACM folder are pointing to files in /dtv/usb/sda1 not /dtv/usb/sda2.Change the paths using a hex editor if they arent WITHOUT changing the size of the Clone.dat file
4.On the second partition of the USB delete the link0_Temp file
5.Now do the following things on the USB using ln -s
Make the link0_Temp file on the second partition a symlink that points to /dtv/usb/sda1/filecontents.txt
And make the link0 file on the Clone subfolder of the T-NVTUSACM folder of the first partition of the USB a symlink that points to whatever file on the TV's internal storage you want to dump to the USB(For example:the rc.local file in /mtd_exe)(Delete the link0 file first or else you wont be able to create the symlink)
6.Eject the USB from your PC
7.Make sure that your TV is turned on and then plug the USB into it and wait for it to recognize the USB
8.On the remote press the following keys in rapid sucession(MUTE,1,1,9,ENTER)
9.Set Hospitality Mode to ON if you have it set to OFF(the default value of the Hospitality Mode setting)
10.Go to Cloning
11.Select Clone USB to TV and then OK.The TV will dump the file that you selected for dumping to a link0_Clone file on the first partition of the USB.After done you will get a confirmation message and after dismissing it the TV will reboot twice

[anonymous40863083]

With this modification to the exploit i was able to dump the rc.local and exeDSP files of the /mtd_exe partition of my TV
I have uploaded them to a zip file here
https://mega.nz/file/7cMwXZ6L#TTbyepCeL ... lojeC3FpJ8

[anonymous40863083]

The Hotel Mode exploit doesnt work for writing files to the TV internal storage but it works for dumping them.I was able to create a SamyGo.sh file on /mtd_rwarea not through the exploit but by making the .0013 file on the root of a NTFS-formatted USB stick a symlink that points to /mtd_rwarea/SamyGo.sh

[anonymous40863083]

But the file has some stuff about a "device id" or something like that

[anonymous40863083]

The Hotel Mode exploit doesnt even work for writing to files that the Hotel Mode Clone features are supposed to write to(such as the SSDAT file of the /mtd_rwarea partition).I have tried using the exploit to write t to /mtd_rwarea/SSDAT and nothing happened