September 09 2010 08:08:08
Navigation
· Home
· Home Hub Hacks
· Downloads
· Web Links
· Contact Me
· Search
Users Online
· Guests Online: 1

· Members Online: 0

· Total Members: 905
· Newest Member: antjunk
Forum Threads
Newest Threads
· Any way to make just...
· Hubphone 2.1 Softwar...
· USB Mass Storage HH1...
· real progress
· Reflash V1 without JTAG
Hottest Threads
· Hacking the BT Ho... [82]
· real progress [36]
· TG797n Has it eve... [27]
· slightly differen... [23]
· BT Home Hub V2 an... [23]
PsiDOC.com » Home Hub V2 » Hacking the Home Hub V2
Hacking the BT Home Hub V2.0A
Username
Password
Register FAQ Members List Today's Posts Search

Print Thread

  Hacking the BT Home Hub V2.0A
by: robinsonto, 07-03-2010 05:23 PM (#41)

ref the resistors. the circuit diagram shows the you need 4 resistors, in the picture I think the 4th one is behind the black tape. These resistors go on pins 2, 3, 4 and 13, which all happen to be on the same bank of the parallel plug. It's best to put a bit of tape around them to avoid any chance of a short.

I confess that I played teh typical British male, I looked at three resistors in the picture rather than read the very clear circuit diagram.

I maintain that these are the clearest set of instructions that I've ever received for a project like this. Keep trying, the feeling of jubilation that you get from cracking this 'uncrackable' unit is great. I'm using my HomeHub in place of my excellent Thomson just for the joy of it,Smile
robinsonto
Hub Hacker


Posts: 2
Joined: 04.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: Tony 2 Shoes, 08-03-2010 12:13 PM (#42)

I have a newer HH V2.0 type A (see http://www.psidoc.com/forum/viewthread.php?thread_id=16&pid=162#post_162) and was initially having trouble with the JTAG and my experience may help others;

A) the photo in the main how to, "Hacking the BT Home Hub V2.0A" showing the 25 pin plug with resistors etc, appears to be flipped horizontally (although the text giving pin mappings etc is ok).

Cool On the newer HH, the JTAG connector (or pads at least for it) are in a different place. Not a problem in itself but the silk screen printing of the pinout numbers are REVERSED to the earlier V2 model show in the 'how to'.

In this instance, 2 wrongs definatly don't make a right..
Tony 2 Shoes
Valued Donator


Forum Support

Posts: 12
Joined: 12.02.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: jonfarley, 09-03-2010 08:42 PM (#43)

Brilliant instructions. This my first attempt at such a job and it worked first time. Very pleased. One question tho, I couldn't find the 'guru' login mentioned in the instructions... I can log into the router using my original admin account but can't login with anything else. Sorry for the simple question but how do I login as guru to change the password? Thanks. J
jonfarley
Hub Hacker


Posts: 1
Joined: 23.02.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 09-03-2010 09:34 PM (#44)

Use telnet.
Click start >> run type in telnet 192.168.1.254.
Username: guru
Password: guru
And viola! You have full CLI access.

Psi
 
To Insanity... And Beyond!
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: chdguy, 11-03-2010 10:03 PM (#45)

This might help you setting up toolchain
http://www.nslu2-...WithCentOS


poppyfields wrote:
Ok - I haven't sorted out the toolchain completely to compile programs. Dropbear works - although you cannot execute some programs such as chmod and chroot - not sure why. Ctorrent appears to work without problems. Tried a few more complicated programs, but compiling in static libraries causes huge files, which the router cannot handle. So I am trying a different track - I have a kind of working toolchain/environment into which I can chroot into, and can compile programs natively on the router. Hopefully I can then link in dynamically to the libraries. I am slowly getting there in getting a working environment, but its taking time. If I succeed I will let you know.
 
Edited by PsiDOC 11-03-2010 10:18 PM
chdguy
Hub Hacker


Posts: 3
Joined: 11.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: bear7364, 15-03-2010 01:46 PM (#46)

HELP !!!! I ran through the instruction did the probeonly command and the PC saw the router, did the first backup which worked fine, powered of the router to do the 2nd backup and all I get now is the message below and I cannot accress the router !

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.


C:\flash2hj>brjtag -probeonly /window:1E000000

===============================================
Broadcom EJTAG Debrick Utility v1.7j-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 5

CPU running under BIG endian

CPU Chip ID: 00000110001101011000000101111111 (0635817F)
*** Found a Broadcom BCM6358 Rev 1 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Detecting Flash Window Base ...
Read MPI Register value : 1f00008c
Possible Flash Access Base Addr : 1f000000

Probing Flash at (Probe Address: 0x1e000000) ...
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with AMD/Spansion Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with SST Routine (VenIDGrinevID = 4009 : b000)
Detected Chip ID with BSC/SCS Routine (VenIDGrinevID = 4009 : b000)
Done

*** Unknown or NO Flash Chip Detected ***


*** REQUESTED OPERATION IS COMPLETE ***


C:\flash2hj>
bear7364
Hub Hacker


Posts: 5
Joined: 11.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 16-03-2010 10:20 AM (#47)

Check your TDO and TDI connections.

Psi
 
To Insanity... And Beyond!
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: bear7364, 16-03-2010 11:14 AM (#48)

PsiDOC wrote:
Check your TDO and TDI connections.

Psi


Hi, checked all connections and all ok. One thing I have noticed is that all the leds on the router are purple. Is this bad ????
bear7364
Hub Hacker


Posts: 5
Joined: 11.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: kacharya2, 17-03-2010 11:29 AM (#49)

thank you for this tut. worked my hub to non BT in PPPoE mode.
still have problem: my DECT phone dont sync to hub time and also problem in contact list
don't know why my account is suspended so i created new one today.
kacharya2
Hub Hacker


Posts: 7
Joined: 17.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: bear7364, 17-03-2010 08:54 PM (#50)

Don't know what happened with my original attempt at hacking the hub but bought a new one off Ebay for £4 and did exactly the same and it's now happily connected to TalkTalk Grin
bear7364
Hub Hacker


Posts: 5
Joined: 11.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 17-03-2010 09:38 PM (#51)

kacharya2 wrote:
thank you for this tut. worked my hub to non BT in PPPoE mode.
still have problem: my DECT phone dont sync to hub time and also problem in contact list
don't know why my account is suspended so i created new one today.


Account suspended? I am sorry. Will look into that. What was the original username?
OK your DECT phone. Is it a Hubphone 2.1? If not it won't sync. I have used BT 1010s and 1020s and they don't sync phone book or time but do work for voice.

bear7364 wrote:
Don't know what happened with my original attempt at hacking the hub but bought a new one off Ebay for £4 and did exactly the same and it's now happily connected to TalkTalk Grin


Not bad is it? A full VOIP Draft-n router for less than a pack of cigarettes! Bargain!
And the sense of achievement puts a big smile on your face as well. Grin

Psi
 
To Insanity... And Beyond!
 
Edited by PsiDOC 17-03-2010 09:41 PM
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: kacharya2, 18-03-2010 06:56 AM (#52)

ya its hub phone 2.1 and is working fine
kacharya2
Hub Hacker


Posts: 7
Joined: 17.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: m5ajp, 18-03-2010 03:04 PM (#53)

Hi

Good stuff I have manged to flash my v2 HH. I have come across some TG787 firmware do you think it will be possible to flash this firmware in too? If so how do I align its start / flash address up correctly?


Also; how can I connect a console up to the v2 HH so I can see it booting?

D
m5ajp
Hub Hacker


Posts: 6
Joined: 13.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 18-03-2010 06:15 PM (#54)

kacharya2 wrote:
ya its hub phone 2.1 and is working fine


Update the firmware with the one that's on the router. Do it via the handset and follow the onscreen instructions.

m5ajp wrote:
Hi

Good stuff I have manged to flash my v2 HH. I have come across some TG787 firmware do you think it will be possible to flash this firmware in too? If so how do I align its start / flash address up correctly?


Also; how can I connect a console up to the v2 HH so I can see it booting?

D


The TG787 firmware will not work sorry.
Need a TG797n firmware and even then it needs some jiggery pokery to make it work.
The console port requires 2 links soldering in on the mainboard and a max232 ttl > serial interface made in the cable else the levels are not high enough and the tty console just displays rubbish.

Psi
 
To Insanity... And Beyond!
 
Edited by PsiDOC 18-03-2010 06:21 PM
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: kacharya2, 19-03-2010 09:14 AM (#55)

i've tried to full reset Hub phone but it says wrong pin although system says pin is 0000 and handset also registered with same 0000 pin
kacharya2
Hub Hacker


Posts: 7
Joined: 17.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 19-03-2010 02:12 PM (#56)

What part of "upgrade the firmware" involves the words reset the phone?

The phone WON'T reset because the firmware is wrong in the handset.
 
To Insanity... And Beyond!
 
Edited by PsiDOC 19-03-2010 02:13 PM
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: kacharya2, 20-03-2010 03:56 AM (#57)

PsiDOC wrote:
What part of "upgrade the firmware" involves the words reset the phone?

The phone WON'T reset because the firmware is wrong in the handset.


Sorry, i forget to tell under handset software there is "check for update" and "software version" options available. when i tried check for update it says "no update available"
my current verison is "v1692 i006 f007"
i didnt find any upgrade the firmware option any where else
kacharya2
Hub Hacker


Posts: 7
Joined: 17.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: PsiDOC, 20-03-2010 04:00 PM (#58)

Yep wrong firmware. Firmware in the router is 1935i006f007. If you are using firmwre version 8.1.H.J

Ok save your hub settings out using the backup pagge, then deregister the handset from the hub.
Then reset the hub to defaults.
Whilst the hub is rebooting pull the batteries out of the handset. wait 10 seconds then replace them and turn it on.
Wait for the hub ro reboot and register the handset in the normal way.
You should then be able manually update the firmware on the handset.

Psi
 
To Insanity... And Beyond!
 
Edited by PsiDOC 20-03-2010 04:00 PM
User Avatar
PsiDOC



Forum Support

Posts: 214
Joined: 19.12.09
Location: Wales
Age: 42

RE: Hacking the BT Home Hub V2.0A
by: tolobas, 20-03-2010 08:55 PM (#59)

kacharya2 wrote:
thank you for this tut. worked my hub to non BT in PPPoE mode.....


Please tell me - how to configure the mode PPPoE? I tried, but nothing happened.Frown
tolobas
Hub Hacker


Posts: 1
Joined: 06.03.10

Warn Level 0

RE: Hacking the BT Home Hub V2.0A
by: kacharya2, 21-03-2010 09:11 AM (#60)

tolobas wrote:
kacharya2 wrote:
thank you for this tut. worked my hub to non BT in PPPoE mode.....


Please tell me - how to configure the mode PPPoE? I tried, but nothing happened.Frown


1. please go through the steps in this site http://network.wiki.xs4all.nl/index.php?title=SpeedTouch_Configuration:_Create_manually_a_Routed_PPPoE_connection
in the first command the last numbers are your Vpi and Vci setting provided by your broadband provider

2. under Create "a PPP interface: " there is slight difference in command; the dest should be dst

hope this works i've done by following same steps
kacharya2
Hub Hacker


Posts: 7
Joined: 17.03.10

Warn Level 0

Options
Jump to Forum:
Forum powered by fusionBoard
Share this Thread
URL:
BBcode:
HTML:
Login
Username

Password



Not a member yet?
Click here to register.

Forgotten your password?
Request a new one here.
Shoutbox
You must login to post a message.

27/08/2010 00:25
Hi tomolewis, my ISP is also the Post Office and I have used a hacked HH2 for a couple of months with no problems

24/08/2010 11:25
My current ISP is The Post Office BT Whole sale reseller i think?

23/08/2010 12:51
The TG797n firmware will be made available to new donators once it has been received & tested by the original donators.. so "yes" Watch this space!

21/08/2010 19:35
do you need anymore for the tg797n fund?

19/08/2010 18:47
Probably, but you'll have to work out the command line structure for the software for your USB JTAG

19/08/2010 18:31
hi there , iam trying to hack the BT home hub 2.0 , can i use the usb port with a USB JTAG connector to flash the new firmware

18/08/2010 21:12
what is your isp? i have tried hacked hubs on many & have no problems

17/08/2010 15:37
different HH2's)

17/08/2010 15:36
Many thanks.... I'm looking forward to the time in between now and the stroppy teenager lol..... fingers crossed... my HH2 is packed away as it was too unstable on my current ISP (i tried two

16/08/2010 19:47
OH and Crongratulations on the new arrival. Enjoy you time with the kids while you can. Before you know it they're stroppy teenagers! hehe

Render time: 1.32 seconds 60,007 unique visits