Ambit 255 Help Needed Please

[blakey_8]

I have just got one of these with no "P" option and also I would like to know the MAX232 pin layout/names if possible please? I matched them up for the 250 (I read that this is the same modem) but I am not having any luck .


Thanks.

[mainblazer123]

max 232 is the same for 250 and 255, you have to use the console hack to get the p option back

[Vermin_Killa]

yeah pin out same as the 250 bud as mentioned you should be able to get the p option withe console unlocker exploit. and the flash using softjtag to return the p option then flash with firmware of your choice.
I used the instructions below to do my first successful 255 unlock

Exploit Discovery & Coding By: Water aka Anonymous



by- Water aka Anonymous aka whatever else you know me by

USAGE:

1. Apply serial and Ethernet connection between your PC and the modem
2. Set your PC IP parameters to:

IP: 192.168.100.10
Subnet: 255.255.255.0
Gateway: 192.168.100.1

3. Power on the modem and wait for it to startup (10 secs)
4. Open the exploit application and hit “Execute Exploit”
5. If it says its successful, then the console is now ready to accept connections!
If it fails, power cycle the modem and try the application again.

At this point, if you want to restore your bootloader to the original 2.1.6d that has the re-flashing menu etc, you need a copy of SoftJTAG and the 2.1.6d bootloader.

**BE CAREFUL WHEN USING SOFTJTAG - As you can brick your modem if your not careful**

1. Open SoftJTAG, and connect via your serial port.
2. On the right hand side, click on “Write Bootloader” and select the 2.1.6d bootloader file
3. Wait till its done (this takes 10 – 15 minutes). Once it’s done, close SoftJTAG
4. Start HyperTerminal/TeraTerm and connect to your serial port
5. Reset the modem

Upon resetting the modem, you will now be given the option to stop at P as it is now booting with the 2.1.6d bootloader. You MUST press the button and stop then, as if you miss it and let it fully boot, your bootloader will be over-written again with the 3.1.6d, in which case you will have to repeat these steps again and be quicker not to miss it next time.

If you are successful in entering the menu, you can now re-flash or whatever you wish to do with your modem from this menu!

[blakey_8]

I followed all those steps. I get a confirmation message in Console Unlocker to say the modem is unlocked but when I launch SoftJTAG and connect, it crashes .

[Vermin_Killa]

what version of softjtag you using ?,because version 3.01 is the one to use. version 3.10 can give problems.
and are then flashing the 2.1.6d bootloader file? this is the file to flash and restore the p option

[yusuf_gaz]

Hi

Not sure but you might need to install some files ocx, vjredist and netframework 2.0 to stop the crashes, maybe someone can confirm.

Regards

[Vermin_Killa]

defo need netframework 2.0 and vj , mine did also require a couple of ocx files,I needed the ocx files to run the Exploit prog it will tell you this when you start the exploit prog.
but from your post the problem either lies with the softjag version (should be 3.01) or the firmware on the modem being not compatible.

[blakey_8]

I managed to get SoftJTAG working but I bricked the modem in the process because the program crashed . I'm not going to bother sorting it if I have to de-solder the TSOP but if anybody knows of a software work-around, I will be happy to know .

[666]

god you are having some bad luck on this m8, did you unplug power then it bricked or did you restart computer

[blakey_8]

Haha, everytime I clicked "Write Bootloader", it kept saying that the modem needs rebooting so I unplugged the power and now the ethernet light flashes very slowly .