MOSC card problems

[darrenw]

Hi guys, can't get in to a couple of cards. one has the backdoor disabled and the other has a password that I don't know. details of nagra below, tried all sors of programs to get into them, but no joy, any help appreciated

Opening of COM1 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 38 32 40
ROM Revision: 010
EEPROM Revision: RevA82
ProviderID: 5C
CamID: 27 6C 9E 19
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
Error, BackDoor reported disable - Card may contain update
Reading ROM10 failed
Closing of COM1 was successful

Opening of COM1 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 44 3C
ROM Revision: 011
EEPROM Revision: RevB0D
ProviderID: 40
CamID: 11 11 11 11
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BackDoor login verified
Dumping Dataspace
Backdoor retrieval has been blocked
Attempting to login to BD3
Attempting to login to BD0
Unable to login, bad password detected
Login attempt aborted
Reading ROM11 failed
Closing of COM1 was successful

cheers D

 

[Dbox8]

Years since I opened an A82 image but it's easy from memory and someone will advise.

With regards to the BOD image. What I do is open it using XNCS (download from file addictions). Once read and 'ghost installed' (that bit will be obvious) I press the 'change backdoor key' button which will reveal the backdoor keys. Copy the keys, save them, close XNCS and then use the keys in Nagraedit when it asks for them.
You can use XNCS to write your image but I personally have always used Nagraedit.
Good Luck.

 

[darrenw]

Tried xncs on both card, unfortunately it won't read the cards, I get the following from the BOD

ATR=3FFF9500FF918171A04700444E415350303131205265764230443C
Info=DNASP011 RevB0D
Retrieving card info...
Card info retrieved
Dumping card,try #0.
Dumping card,try #1.
Dumping card,try #2.
Dumping card,try #3.
Couldnt Dump Card...

Thing is I programmed the card a while back, but cant find the image I used to get the password from. Can you break into the backdoor password?

The A82 has been glitched, but wont read either.

cheers D

 

[slimshady]

have u unlooped the cards first to open them

 

[darrenw]

unlooped the A82 the other night, use powersync newd11x and sidewinder 1.2a. said it was open at the end of the overnight run.

The rom11 bod was open as I wrote an image on it a while ago, but can't find the image I used to get the password from. So I have locked myself out of my own card, doh!

 

[roisin]

I used sidewinder for a card and had a similar problem. I ran it through sidewinder twice and it read in nagra after second time. Not sure if this will help though it might be worth trying

 

[darrenw]

I'll give it a go later and run overnight. let you know if it works. worth a try. cheers D

 

[bob1664]

dont mean to push in on this thread but i have 3 cards when read in nagra it says card disabled, may contain update this card was open now i can`t get into it in nagra. tried unlooping it again and it says card transmission complete at the end of it, try in nagra agian with as t911 and says same thing again plus some of them have been in my unlooper for days with no joy they was rev :bod they are now rev: bad anyone help on this matter peeps thans guys .

 

[chookey]

dont mean to push in on this thread but i have 3 cards when read in nagra it says card disabled, may contain update this card was open now i can`t get into it in nagra. tried unlooping it again and it says card transmission complete at the end of it, try in nagra agian with as t911 and says same thing again plus some of them have been in my unlooper for days with no joy they was rev :bod they are now rev: bad anyone help on this matter peeps thans guys .

They haven't changed from b0d to bad of their own accord mate. You have written the image to them.
To open them you need to use the d2c file. Copy and paste this into notepad.

rs
dl 00 40
rx
tx 21 C1 01 68 89
dl 00 20
rx
tx 21 00 1C A0 CA 00 00 16 61 14 77 77 77 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 37
dl 01 00
rx

Save it as bad.d2c or in other words rename it from .txt to .d2c.Put it in the Nagra directory.
Open nagra and click the comm tab. Click on open d2c file and point it to the file and then send the d2c file.
Then read the card in the normal way, noting that the ird now will read as all 7s'.
Not my work by the way.

Chookey

 

[bob1664]

They haven't changed from b0d to bad of their own accord mate. You have written the image to them.
To open them you need to use the d2c file. Copy and paste this into notepad.

rs
dl 00 40
rx
tx 21 C1 01 68 89
dl 00 20
rx
tx 21 00 1C A0 CA 00 00 16 61 14 77 77 77 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 37
dl 01 00
rx

Save it as bad.d2c or in other words rename it from .txt to .d2c.Put it in the Nagra directory.
Open nagra and click the comm tab. Click on open d2c file and point it to the file and then send the d2c file.
Then read the card in the normal way, noting that the ird now will read as all 7s'.
Not my work by the way.

Chookey

Thanks chookey it worked a treat much appreciated mate !

 

[cracker]

I am trying to get card details from a MOSC card and all i get is unable to open com port.
any ideas what that means?

 

[chookey]

I am trying to get card details from a MOSC card and all i get is unable to open com port.
any ideas what that means?

Yes mate, it means its' unable to open the com port.
Do you know what a com port is?
Can you state which mosc card you are trying to open?
Can you state which progger you are using?
Are you able to provide a screenshot?

Are you able to give enough details for someone to possibly help you?