Unlocking A82 card with new B0D script

To be honest mate i dont know what was wrong with it it was just a stubborn card, id say give it a go you ve nothing to lose :banana:
 
abs001 said:
I have a Rom 11 B09 I can't get back into I have tried the new BOD script is says Glitch Success!! ROM 11 BUGS ZEROED
BootLoader 90 00 RSP Received!!
VCC = 12 (~0.34757647058823 vdc)
Glitch Delay = 00F4
Glitch type 08
Developed @ http://www.sky-digital.org/

But when i read it in Nagra i get the follwing message
Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
ProviderID: 5C
CamID: 19 77 77 91
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BackDoor login verified
Dumping Dataspace
Backdoor retrieval has been blocked
Attempting to login to BD3
Attempting to login to BD0
Unable to login, bad password detected
Attempting to login to BD0
Unable to login, bad password detected
Login attempt aborted
Reading ROM11 failed
Closing of COM2 was successful

I have read the card in XNCS & copied the BD keys but it still will not let me in, any help appreciated thanks

Hi m8"! have you sorted your problem? If not do this and it will spit the BD0 out

First of all get yourself a Good Rom11 Image with Valid BD Keys and Bugcatchers at 00 And call it say”! BD0 image

open Romstudio 1.6
where it says Card press Dump card (Nagraedit Method) introduce BD0 when asked
Get your “”BD0 Image””” and Write Card (Nagraedit Method) and that should give you control of you card again

Read this topic: http://www.world-of-digital.com/forums/showthread.php?t=79355
 
Last edited:
carwash said:
Hi m8"! have you sorted your problem? If not do this and it will spit the BD0 out

First of all get yourself a Good Rom11 Image with Valid BD Keys and Bugcatchers at 00 And call it say”! BD0 image

open Romstudio 1.6
where it says Card press Dump card (Nagraedit Method) introduce BD0 when asked
Get your “”BD0 Image””” and Write Card (Nagraedit Method) and that should give you control of you card again

Read this topic: http://www.world-of-digital.com/forums/showthread.php?t=79355

CW....I have 2 cards wiv the same problem..I have managed to open one using MROM Rev 7 (thanks FES for pointing that out) however the other one keeps coming up with error "A Enviar String 2........Erro, I have tried this method you mentioned & looked at the other link mentioned but cant seem to get it right...I dont know what I am doing wrong but in Rom Studio I just cant seem to get pass the password screen, this other card I cant even read it in XNCS anymore...it must be sorry CW Im gonna crack up soon....
 
abs001 said:
CW....I have 2 cards wiv the same problem..I have managed to open one using MROM Rev 7 (thanks FES for pointing that out) however the other one keeps coming up with error "A Enviar String 2........Erro, I have tried this method you mentioned & looked at the other link mentioned but cant seem to get it right...I dont know what I am doing wrong but in Rom Studio I just cant seem to get pass the password screen, this other card I cant even read it in XNCS anymore...it must be sorry CW Im gonna crack up soon....

yo m8 have u glitched the other cards?

i would just shot them through the glitcher and if they rom 11 run the bod script and then when its done just run rev7

should get them sorted

:Cheers: :Cheers: :Cheers: :Cheers:
 
fes_786 said:
yo m8 have u glitched the other cards?

i would just shot them through the glitcher and if they rom 11 run the bod script and then when its done just run rev7

should get them sorted

:Cheers: :Cheers: :Cheers: :Cheers:

Fes..After running rev 7 earlier a few times I have tried ur latest instruction but the card wont glitch now, when I put it in nagra I get the following message

Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
ProviderID: 40
CamID: CC CC CC CC
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BD3 login failed
Reading ROM11 failed
Closing of COM2 was successful

Have I fried the card???
 
abs001 said:
Fes..After running rev 7 earlier a few times I have tried ur latest instruction but the card wont glitch now, when I put it in nagra I get the following message

Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 39 41
ROM Revision: 011
EEPROM Revision: RevB09
ProviderID: 40
CamID: CC CC CC CC
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BD3 login failed
Reading ROM11 failed
Closing of COM2 was successful

Have I fried the card???


ur cam id is all ccccccccccccc which script u used and try mrmp 1.5 also try askin carwash because he knows alot about nagra card images

ur provider id is 40 so its ok its just ur cam id

ur card might be fecked

ask carwash to view this thread and try to help u out



:Cheers: :Cheers: :Cheers: :Cheers:
 
fes_786 said:
ur cam id is all ccccccccccccc which script u used and try mrmp 1.5 also try askin carwash because he knows alot about nagra card images

ur provider id is 40 so its ok its just ur cam id

ur card might be fecked

ask carwash to view this thread and try to help u out



:Cheers: :Cheers: :Cheers: :Cheers:

Cheers Fes...I have tried glitching it with mrmp 1.5 but I got the following message

Multiprovider MultiRom script for Rom 10, Rom 11 (both normal and 6300)cards
Rom 7 support is only upto and including 715 for providers 54 and 5C
Script version 1.5

Do NOT remove card while script is running!!!

Card is a Screwed Up Rom 11 RevB09 (4001)

Checking card status..........

Card wasn't logged in - check this is the right script for Provider 4001
Script will now exit - have a nice day

script failed

Looks like I have screwed the card....Carwash could you help please.
 
try runnin old mrom and then try other scripts and edit them so it supports ur provider 4001

it should sort it i think

:Cheers: :Cheers: :Cheers: :Cheers:
 
abs001 can you still read the card in XNCS if you can have a look at the the line C0A0 in the eeprom as I had a card which when I'd glitched it did similar things and the nipper string was wrong on it.
it should read
C0A0: 32 2C 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 | 2,NipPEr Is a bu
the first two pairs of numbers don't matter but the nipper string starts on the third pair.
 
fes_786 said:
try runnin old mrom and then try other scripts and edit them so it supports ur provider 4001

it should sort it i think

:Cheers: :Cheers: :Cheers: :Cheers:

Tried old Mrom but second string Error comes up all the time...running some scripts in winexplorer will let you know how I get on...really appreciate ur help Fes..I guess its all trial & error until You find a fix, somedays I just cant be asked so I look for inspiration on this site..I certainly get that, though at the mo not enough hours in the day to browse on DW.
 
grooster said:
abs001 can you still read the card in XNCS if you can have a look at the the line C0A0 in the eeprom as I had a card which when I'd glitched it did similar things and the nipper string was wrong on it.
it should read
C0A0: 32 2C 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 | 2,NipPEr Is a bu
the first two pairs of numbers don't matter but the nipper string starts on the third pair.

Grooster I cant read the card in XNCS, am glitching it again will let you know once read.
 
Back
Top