September 09 2010 07:34:14
Navigation
· Home
· Home Hub Hacks
· Downloads
· Web Links
· Contact Me
· Search
Users Online
· Guests Online: 2

· Members Online: 0

· Total Members: 905
· Newest Member: antjunk
Forum Threads
Newest Threads
· Any way to make just...
· Hubphone 2.1 Softwar...
· USB Mass Storage HH1...
· real progress
· Reflash V1 without JTAG
Hottest Threads
· Hacking the BT Ho... [82]
· real progress [36]
· TG797n Has it eve... [27]
· slightly differen... [23]
· BT Home Hub V2 an... [23]
PsiDOC.com » Home Hub V2 » Hacking the Home Hub V2
Hacking the BT Home Hub V2.0A
Username
Password
Register FAQ Members List Today's Posts Search

Print Thread

  Hacking the BT Home Hub V2.0A
by: PsiDOC, 22-12-2009 12:32 AM (#1)

http://www.psidoc...ticle_id=2
The article in the above link describes how to replace the locked firmware in the BT Home Hub 2.0A with an unlocked version developed by myself. It also has FTP and Telnet access. VOIP from non BT providers also works but has to be setup by telnet. Wink
A word of warning on this one. You need to establish what firmware your router has installed and then use the appropriate firmware files and flashing commands. IF YOU MIX THEM UP YOU WILL BRICK THE ROUTER!!! Shock

Psi
 
Edited by PsiDOC 22-12-2009 12:44 AM
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: Coleman, 22-12-2009 05:47 PM (#2)

will this work with Software version 8.1.H.J (Type A) ?
User Avatar
Coleman



Posts: 3
Joined: 22.12.09

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 22-12-2009 08:12 PM (#3)

It works with all Home Hub 2.0A's. Use the firmware form the Any Other Firmware Folder.

PsiDOC
 
To Insanity... And Beyond!
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: dawmat, 27-12-2009 09:20 PM (#4)

Now writing this on HH 2.0A after many hours of jtagging! Thank you PsiDOC for the brilliant work.
Telnet is there but have yet to test voip, dect and wifi.

dm
dawmat
Valued Donator


Forum Support

Posts: 3
Joined: 22.12.09
Location: Beds
Age: 76

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 27-12-2009 09:37 PM (#5)

dawmat wrote:
Now writing this on HH 2.0A after many hours of jtagging! Thank you PsiDOC for the brilliant work.
Telnet is there but have yet to test voip, dect and wifi.

dm

YAY! Nice one Daw
Aye takes a while doesn't it?
Voip, works tested with Sipgate.co.uk
Dect is working. Tested with a 1010 handset as I don't have a HH2 handset.
Wifi is what I use to connect so that's tested to the nth degree as well!
Out of interest did you use the 8.1.H.G file or the any other firmware upgrade file?

Psi
 
To Insanity... And Beyond!
 
Edited by PsiDOC 27-12-2009 09:38 PM
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: dawmat, 27-12-2009 10:35 PM (#6)

8.1.H.G
Just being trying to set up voip but after entering 'voice profile add' command getting -
Download source  Code
mbus error: object creation failed (no error)




dm
dawmat
Valued Donator


Forum Support

Posts: 3
Joined: 22.12.09
Location: Beds
Age: 76

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 27-12-2009 10:54 PM (#7)

Did you reset to defaults?
Also try setting up the sip provider first [voice sip config]. I remember I setup the provider first.
Also maybe worthwhile setting them up as a root user.

Psi
 
To Insanity... And Beyond!
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: tbaby, 28-12-2009 07:21 PM (#8)

Brilliant - it worked for me. Thank you very much for this great work.

I'm stuck with a small prob. Basically i want to use a USB key attached to the hub as a file server for my ip camera ( with store the pictures via FTP ). How could i access the USB via FTP ? Tho i tried to access the FTP with root account (guru - guru), I'm restricted to a single directory and seems not to have any rights. Could you please advice ?

I have used the Other Firmware supplied for the flashing.

Regards
Sam
tbaby



Posts: 13
Joined: 26.12.09

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: tbaby, 28-12-2009 07:47 PM (#9)

USB Key issue :

Event Log:

01:01:38 1 Jan usbmgr: try /etc/usbmgr/class/module
01:01:38 1 Jan usbmgr: try /etc/usbmgr/class/09/module
01:01:38 1 Jan usbmgr: try /etc/usbmgr/class/09/00/module
01:01:38 1 Jan usbmgr: try /etc/usbmgr/class/09/00/00/module
01:01:38 1 Jan usbmgr: class:0x9 subclass:0x0 protocol:0x0
01:01:38 1 Jan usbmgr: buffer line: remove T
01:01:38 1 Jan usbmgr: start /etc/usbmgr/class/08/06/script
01:01:38 1 Jan usbmgr: execute script -> beep good
01:01:34 1 Jan usbmgr: try /etc/usbmgr/class/08/06/script
01:01:34 1 Jan usbmgr: try /etc/usbmgr/class/08/06/50/script
01:01:34 1 Jan usbmgr: load device -> beep fail
01:01:33 1 Jan usbmgr: Can't get module loader
01:01:33 1 Jan usbmgr: USB device is matched the configuration
01:01:33 1 Jan usbmgr: try /etc/usbmgr/class/08/06/module
01:01:33 1 Jan usbmgr: try /etc/usbmgr/class/08/06/50/module
01:01:33 1 Jan usbmgr: class:0x8 subclass:0x6 protocol:0x50
01:01:33 1 Jan usbmgr: vendor:0x8ec product:0x8
01:01:33 1 Jan usbmgr: buffer line: remove T
01:01:33 1 Jan usbmgr: USB device isn't matched the configuration
01:01:33 1 Jan usbmgr: try /etc/usbmgr/class/module
01:01:33 1 Jan usbmgr: try /etc/usbmgr/class/09/module
01:01:33 1 Jan usbmgr: try /etc/usbmgr/class/09/00/module
01:01:33 1 Jan usbmgr: try /etc/usbmgr/class/09/00/00/module
01:01:33 1 Jan usbmgr: class:0x9 subclass:0x0 protocol:0x0
01:01:33 1 Jan usbmgr: buffer line: remove T

Any suggestions ?
tbaby



Posts: 13
Joined: 26.12.09

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: tbaby, 02-01-2010 11:34 AM (#10)

Any advice on how to gain full access on FTP ? I'm restricted to dl directory on FTP and seems to have no rights ?

Any help will be much appreciated.
tbaby



Posts: 13
Joined: 26.12.09

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 02-01-2010 02:05 PM (#11)

Yes.
I had the same problem with filezilla. No access rights etc. However when I tried with WSFtp Pro I had access rights to upload and download from the /DL directory. Suffice to say WSFtp is what I use now.
The root directory is protected so you may not be able to see it. I say MAY because I can sometimes. Also remember that everything aside from the /dl directory is in a read only filesystem so if you can get in you can only download the files.

Regards,
Psi
 
To Insanity... And Beyond!
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: tbaby, 02-01-2010 09:35 PM (#12)

Thanks for the great tip .

Any clue why the usb key cannot be mounted ? debug dmesg says SQUASHFS error.

Also, after mounting, is it possible to get read write access to the USB key via the FTP ?


Please advice
tbaby



Posts: 13
Joined: 26.12.09

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 03-01-2010 03:44 PM (#13)

tbaby wrote:
Thanks for the great tip .

Any clue why the usb key cannot be mounted ? debug dmesg says SQUASHFS error.

Also, after mounting, is it possible to get read write access to the USB key via the FTP ?


Please advice


I now know why. In one experimental build I was mucking about with the samba script trying to get it to launch a file in the /dl folder and I forgot to change the file permissions. I thought I had used a virgin build for the published firmware but I hadn't. I used the experimantal build and because of the wrong file permissions I managed to disable the ****** samba server! A stupid mistake I know but one that has caused issues.
I have just tested the new build and Samba and file sharing is now tested and working. Also script launching is working as well but more of that in a new thread.
The HomeHub 2 flash2 files (flash2.exe) have now been replaced with the new build.
For those that need or want USB file sharing and / or scripting for file launching. I'm afraid it's reflash time! Personally I think it's worth it for the ability to run your own files via script. So please pop over to the download section and grab the new download.
I can only apologise sincerely for my classic cock-up! In my defense it was in the name of progress.

Regards,
Psi
 
To Insanity... And Beyond!
 
Edited by PsiDOC 03-01-2010 03:59 PM
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: tbaby, 06-01-2010 09:43 AM (#14)

I just finished the flashing and the new version (03-01) solves the issue. brilliant....

USB mounting works correctly now, but the ftp still dont give me a read write access to the USB mount folder (/var/usmmount/sda) . I tried to put a symbolic link to the mount directory from /dl folder - this gives me only read access. Any suggestions ?

Do I have to run another FTP server using the samba.conf to solve this issue ? if yes, any tips on the best server to run on the HH ?


Thank you very much .

Thushar
tbaby



Posts: 13
Joined: 26.12.09

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 06-01-2010 08:51 PM (#15)

FTP access is not enabled in the contentsharing section. You can enable it via telnet although I have just tried and it won't let me log in using any of the logins I have on my router. Angry Angry I don't know why.
Anyway you don't need FTP access. You have read / write access via the windows shared folders.
Open my computer and type in: \\192.168.1.253 you will see a folder called Disk_a1 and in there is all your stuff. Both read and write access.

Psi
 
To Insanity... And Beyond!
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: tbaby, 07-01-2010 10:16 AM (#16)

For FTP , same is the case with me. Enabled the FTP in content sharing, and on FTP to 192.168.1.253, no login works.

In my case, FTP is the only solution for what i'm trying to achieve. I'm trying to set my IP camera to save the snap shots to the FTP server set to a 32 GB memory stick on HH. The camera is not having an option to save on shared folder.

Do you think we are running a chroot env with less root rights ? Also, could this be another Samba rights issue? (I tried smbpasswd to reset the samba passwords, but no luck ). I'm trying to find an FTP binary that could run on HH pointing to USB key as a work around.

tbaby



Posts: 13
Joined: 26.12.09

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: Jamie Chapple, 10-01-2010 12:48 PM (#17)

1. Mod works great. Just seen latest fix to usb will reflash device at an appropriate time. Having already flashed from 'Any Other Firmware' please confirm my re-flashing point is now from 81HG?

2. One thing to note is that I have the 'display when connected' on network settings on my PC. XP displays the bt router 'Internet Gateway' running at 16.3Kbps. Yet file downloads proceed at usual 300kbs etc..

Looking at internal adsl status of router confirms 8.1mbs download and 1mbs upload....

When my old router is connected in, I get a display of 8.1mbs download.... on my internet gateway...

Looks like xp is detecting a lower downrate than actually displayed.

This is a feature I can live with.

Thanks in advance and a brilliant piece of engineering with a intellectual of a diverse technical background!

Smile
Jamie Chapple



Posts: 2
Joined: 31.12.09

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 10-01-2010 01:27 PM (#18)

Jamie you're welcome. Glad to have helped.
Yes you can flash the 8.1.H.G custom.bin as you have already flashed the router with the rev1 version via JTAG. Provided the GUI says 8.1.H.G as the version number then that's what you are running.

The Gateway reporting the wrong speeds has long been a problem in XP and with thomson routers in general, so to be honest it could be either causing the issue. So long as you get proper speeds I wouldn't worry about it.

Psi
 
To Insanity... And Beyond!
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: Jamie Chapple, 10-01-2010 04:48 PM (#19)

Thanks for confirming psiDOC on upgrades to previously patched firmware and XP inconsistancies of correct adsl speed reporting.

Recovery From Backup
================

Just in case something goes wrong, please confirm (correct as required) that if the user wants to restore the original firmware (irrespective of original firmware installed) then the command is as follows:

"brjtag -flash:custom /window:1E000000 /start:1E000000 /length:1000000 /bypass /forcealign"

Where 'custom.bin' is the original renamed backed router firmware appropriately located (c:\flash2).

Cheers.

Wink
Jamie Chapple



Posts: 2
Joined: 31.12.09

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 10-01-2010 07:58 PM (#20)

Jamie Chapple wrote:
Thanks for confirming psiDOC on upgrades to previously patched firmware and XP inconsistancies of correct adsl speed reporting.

Recovery From Backup
================

Just in case something goes wrong, please confirm (correct as required) that if the user wants to restore the original firmware (irrespective of original firmware installed) then the command is as follows:

"brjtag -flash:custom /window:1E000000 /start:1E000000 /length:1000000 /bypass /forcealign"

Where 'custom.bin' is the original renamed backed router firmware appropriately located (c:\flash2).

Cheers.

Wink


That command 100% correct.
That's why in the tutorial you do 2 full backups. It's always handy to have if it all goes wrong. Also comparing them makes sure your JTAG interface is working properly. That said the custom.bin in the "any other firmware" folder is in itself a recovery flash. The only information it doesn't have is the CFE. Wink

Psi
 
To Insanity... And Beyond!
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

Options
Jump to Forum:
Forum powered by fusionBoard
Share this Thread
URL:
BBcode:
HTML:
Login
Username

Password



Not a member yet?
Click here to register.

Forgotten your password?
Request a new one here.
Shoutbox
You must login to post a message.

27/08/2010 00:25
Hi tomolewis, my ISP is also the Post Office and I have used a hacked HH2 for a couple of months with no problems

24/08/2010 11:25
My current ISP is The Post Office BT Whole sale reseller i think?

23/08/2010 12:51
The TG797n firmware will be made available to new donators once it has been received & tested by the original donators.. so "yes" Watch this space!

21/08/2010 19:35
do you need anymore for the tg797n fund?

19/08/2010 18:47
Probably, but you'll have to work out the command line structure for the software for your USB JTAG

19/08/2010 18:31
hi there , iam trying to hack the BT home hub 2.0 , can i use the usb port with a USB JTAG connector to flash the new firmware

18/08/2010 21:12
what is your isp? i have tried hacked hubs on many & have no problems

17/08/2010 15:37
different HH2's)

17/08/2010 15:36
Many thanks.... I'm looking forward to the time in between now and the stroppy teenager lol..... fingers crossed... my HH2 is packed away as it was too unstable on my current ISP (i tried two

16/08/2010 19:47
OH and Crongratulations on the new arrival. Enjoy you time with the kids while you can. Before you know it they're stroppy teenagers! hehe

Render time: 0.94 seconds 59,999 unique visits