NDS Card / Oscam - classD3 ins54: no cw --> Card needs pin

[rtznfrtz]

is not problem to compile for ubuntu x64

so you can use simplebuild 3 / Toolchain to build

 

[Benfica200]

Check this.

 

[jc0d3r]

as written by benfica, if you know how to compile
kao benfica pisao , kada znas i mozes kompilirati

Ok kralju,
as I can see, we can use our TTV with OSCAM ?
can I get a how to, because normally we need box and rsa key ?
thank you in advance.
best regards
hvala puno nece biti dzabe ))

 

[rtznfrtz]

yes, first you need k1, boxkey and ins7e. and for those channels requesting a pin input you need this little tweak described by benfica200

 

[jc0d3r]

yes, first you need k1, boxkey and ins7e. and for those channels requesting a pin input you need this little tweak described by benfica200

thanks rtznfrtz

tweak was implemented as described by benfica200it was easy, but now for me the real question is how to find these 3 information (k1, boxId, ins7e) ?
- need to dump original receiver delivered with card ?
- or there is something that I can do using confirmed how to

Thanks bro.
ps. samo da nebude da je sve ovo privatno

 

[rtznfrtz]

boxkey and ins7e can be found in the receivers menue

 

[rafadias6]

serv

Index: reader-videoguard2.c
===================================================================
--- reader-videoguard2.c (Revision 11581)
+++ reader-videoguard2.c (Arbeitskopie)
@@ -1218,6 +1218,11 @@
new_len -= 2;
}

+ if(reader->caid == 0x92F || reader->caid == 0x91F)
+ {
+ ins40[2] = 0x60;
+ }
+
ins40[4] = new_len;
int32_t l;
l = do_cmd(reader, ins40, tbuff, NULL, cta_res);

serve para GL54

 

[jc0d3r]

boxkey and ins7e can be found in the receivers menue

Ok but how we can find it through Receiver Menu, it's on which page with boxed label or smashing else ?
and what about k1 how to find it ?

here is the OsCam log : [videoguard2] classD3 ins54: no cw --> Card needs pairing/extra data

thanks

 

[jc0d3r]

ok found on COSHID HD N8771 :
boxed = CA STB ID
Questions :
- where is ins7E in menu = Ca Diag 2) or long number in 04) ?
- how to find k1 or calculate etc...

thanks

 

[rtznfrtz]

pm me or send viber or skype

 

[jc0d3r]

pm me or send viber or skype

impossible to send you a PM even with Premium membership

is there any other way to contact you except not work one "PM" ?

 

[jc0d3r]

so, let's try to solve this in 3 steps :
- boxid (in menu)
- ins7e (in menu)
- k1 ???

my solution :
step 1 : boxid i have found directly with OsCam with option -S ((reader) tTV [internal] serial: 0000XXXX, BoxID: XXXXXXXX, baseyear: 200X)
my question :
step 2 : how to find ins7e via menu ?
step 3 : how to find k1 ?

ps (for all) : if I can find solution for 2 et 3 steps, I'll share it to avoid this ping pong answer-question with question etc ... grrrrr....

thanks

 

[rumas]

Hi,
which caid has your card 09xx?
follow this tuto to make your NDS card working;

 

[jc0d3r]

Hi,
which caid has your card 09xx?
follow this tuto to make your NDS card working;

it's type: VideoGuard t0ta1 T v Serbia ( caid = 091F)

thanks i'll try it

 

[jc0d3r]

it's type: VideoGuard t0ta1 T v Serbia ( caid = 091F)

thanks i'll try it

Thanks,

I have found the right boxId and ins7e but for k1 it redirect us to another forum and it's only limited to find sky v13, so I am not able to find working ECW & DCW in order to find my own k1 unique via hashCat.

 

[jc0d3r]

pm me or send viber or skype

hello rtznfrtz,

- boxId was found (in menu, on card information and as a part of ins7e as explained in text from rumas) so it's correct
- ins7e also : 6E736B2xxxxxxxxxxxxxxxxx0000000000010202030002020203 - Could you confirm this ?
- k1 : if you have working card (as you have the problem with pin on adult) could you save ECW & DCW for one specific channel I'll try to synchronise with you than to hack it with HashCat ?

for info : decrypted value 55 01 00

here is also serve conf :
[reader]
label = tTV
description = NDS-Reader
enable = 0
protocol = internal
device = /dev/sci1
autospeed = 0
caid = 091F
boxid = xxxxxxxx
ins7e = 6E736B2xxxxxxxxxxxxxxxxx0000000000010202030002020203
ins7e11 = 14
fix07 = 0
detect = cd
mhz = 450
cardmhz = 2700
group = 1
emmcache = 1,1,2,0
blockemm-unknown = 1
blockemm-u = 1
blockemm-s = 1
blockemm-g = 1
saveemm-unknown = 1
saveemm-u = 1
disablecrccws = 1
ndsversion = 2

Or maybe there is one tuto specific to our card TTV 091F ?

Thanks for your help.

 

[rtznfrtz]

impossible to send you a PM even with Premium membership

Already stated this multiple times to different mods here - but no answer / help / or solution

your data is probably ok, although ins7e for 091f is a bit different than skyde's - but as it holds a lot of unique data i would not post it in public
ins 7e11 (menue line 04) )does not change timing of this type of card, so it's of no use - at least to my card
blocking - at least for updating the entitlements card needs emm's! and it's paired anyway, so blocking is a matter of fow you think about it
ECW & DCW - ECW has to be logged with your card (unique) DCW (for the same request) can be done with any other (working) card

 

[jc0d3r]

Already stated this multiple times to different mods here - but no answer / help / or solution

no problem bro,

I realy understand you regarding public posting and I am agree with you

Now, to find the solution, could you contact me via temp email : [email protected]

Thanks

- hvala puno
ps. dodje mi da razbijem ovo sranje od dekodera

 

[Tiziano]

I would like to help you but can't pn either sry...

 

[jc0d3r]

I would like to help you but can't pn either sry...

hi Tiziano,

any help is welcome eMail me on : [email protected]

have a nice day.