Console Unlocker step by step guide

[TechWreck]

Hi guys here is a step by step guide to unlock your ambit using the`exploit `console unlocker`.and how to flash the bootloader.
this guide is by kind permission of the exploit mker`water aka anonymous` or whatever you know him as.

--------------------------------------------------------------------------

1. Apply serial(max 232 lead) and Ethernet connection between your PC and the modem
2. Set your PC IP parameters to:

IP: 192.168.100.10
Subnet: 255.255.255.0
Gateway: 192.168.100.1

3. Power on the modem and wait for it to startup (10 secs)
4. Open the exploit application and hit “Execute Exploit”
5. If it says its successful, then the console is now ready to accept connections!
If it fails, power cycle the modem and try the application again.

At this point, if you want to restore your bootloader to the original 2.1.6d that has the re-flashing menu etc,
you need a copy of SoftJTAG and the 2.1.6d bootloader.

**BE CAREFUL WHEN USING SOFTJTAG - As you can brick your modem if your not careful**

1. Open SoftJTAG,3.10 and connect via your serial port.
2. On the right hand side, click on “Write Bootloader” and select the 2.1.6d bootloader file
3. Wait till its done (this takes 10 – 15 minutes). Once it’s done, close SoftJTAG
4. Start HyperTerminal/TeraTerm and connect to your serial port
5. Reset the modem

Upon resetting the modem, you will now be given the option to stop at P as it is now booting with the 2.1.6d bootloader.
You MUST press the button and stop then, as if you miss it and let it fully boot, your bootloader will be over-written again
with the 3.1.6d, in which case you will have to repeat these steps again and be quicker not to miss it next time.

If you are successful in entering the menu, you can now re-flash or whatever you wish to do with your modem from this menu!


software required :

console unlocker (exploit)v1.1b
softjtag v3.10
2.1.6d bootloader file


************************************************** **************

[lee-ds]

Do not use softjtag v3.01

It's s.hit, has a black screen and crashes.

Use v3.10 (not the BBB Mod version)

[m1n1_me]

hi iv download'd the console unlocker and run it after some truble but got it 2 work in the end!

but it come up sayin Console Should now be active> if it's not re-run this application!

then iv run the SolarWinds.netTFTP Server!

like is tell's me 2 in the manuel along with the telnet program
but still cant get the menu on the the telnet for the options!

any one knoe what im doing wrong?

pm me please....!

thank's mark

[TechWreck]

Originally Posted by lee-ds

Do not use softjtag v3.01

It's s.hit, has a black screen and crashes.

Use v3.10 (not the BBB Mod version)

`Water` the exploit maker says use softjtag 3.01,so dont know what to say mate.
people use 3.10 at their own risk !

[Bad_Ad84]

i use 3.10 (not the bbb version) 3.01 and bbb crashes constantly. ive modded "a few" ambits, and no issues with version i use.

[TechWreck]

Ok, guys I bow to your superior knowledge use softjtag v3.10,and follow the instructions at the the top post.

[Bad_Ad84]

well i hear reports of people having better success with other versions.

bbb mod and 3.01 crashed instantly for me, if others work better for other people use that.

basically, use what works for you.