Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Psygnosis]

Just a question which country you in?

Italy. and yes I set Italy on the w9980/8980 fw but not on lede I just forget it xD

[hacktrix2006]

EDIT: Just read the reply proper was on D2 and using phone, The images on Youtube link are pre-cut meaning you do not need to cut the firmware at all its been done for you.

It took me a while to sort the files out as these was the files used in the video, which is why the files are less then 8mb in size because i have already removed the u-boot part from the files.
So you have been basically cutting pre-cut files hence your issue.

So using TFTP you just flash w9980.bin then after you have factory reset the router when it asks if it asks yolu then flash the W9980WebGUIUpdate.bin via the webgui (or you can use the latest file).

I will make a new pre-cut image in a bit and upload it then link it here. Uncompress -1 tends to be the image didn't successfully flash over.


Updated Pre-Cut W9980.bin file, Download and replace the file in the TFTP folder. DO not try cutting the file.

https://mega.nz/#!WQlmGaJB!r_VqFAcKeA_xmBeXayIKOZ6VvGvtNrp06wxRNBuGLBo

[Psygnosis]

Thank you so much. I didn't have time to try your new image yet but I do some new research.
1. I didn't try to cut your pre cutted images but the images downloaded from the tp-link website.
2. If you look here you will see a person who had my similar problem. And I think that it's pretty certain that the info in my memory location between 1EC00 and 1FC00 is lost.
Now the only thing in the world I can do is to take that memory dump (but I suspect that it will be empty), open it with a hex editor and replace the mac adress.
The problem is that mac adress are factory unique if I lost my router Mac adress I can't recover it in any way or I have to generate a random ma adress

[hacktrix2006]

Mac address are on the label with WPS pin and WPA code. Or its inside the router on the yellow plastic i have an mtd 4-6 atm just need your mac so i can add it didt you gt my pm??

[bala1]

Dear Crossflashers,

during my effort to analyse the new RSA signed firmware, I found a way to crossflash routers which have already a RSA signed firmware installed, without opening the devices at all. Anyone who is interested in more detailed information, can get them from https://github.com/xdarklight/mktplinkfw3/blob/master/README.md.

All that has to be done, is to alter the first firmware header:

1. replace the values at the hex positions 0x34 to 0x3F of the to-be flashed firmware with the values of an stock firmware, that matches the running firmware (if the currently running firmware is a W8980 firmware use the values from a stock W8980 image, if the currently running firmware is a W8980B firmware use the values from a stock W8980B image and so on)

2. temporary replace the md5 hash at hex position 0x40 to 0x4F with 8C EF 33 5F D5 C5 CE FA AC 9C 28 DA B2 E9 0F 42

3. calculate the the md5 hash/checksum of the whole file

4. replace the temporary md5 hash at hex position 0x40 to 0x4F with the value from 3.

Now the firmware should be accepted by the the routers firmware upgrade page. Don't forget to restore the factory defaults afterwards.

I've made a video for the younger ones among us:

[youtube]https://youtu.be/noEVttStvSw[/youtube]


// Edit: temporary md5 hash was wrong

Please, this method did not work on my TD-W8970v3.
Can you tell me how to do this to work the TD-W8970v3?

[bala1]

EDIT: Just read the reply proper was on D2 and using phone, The images on Youtube link are pre-cut meaning you do not need to cut the firmware at all its been done for you.

It took me a while to sort the files out as these was the files used in the video, which is why the files are less then 8mb in size because i have already removed the u-boot part from the files.
So you have been basically cutting pre-cut files hence your issue.

So using TFTP you just flash w9980.bin then after you have factory reset the router when it asks if it asks yolu then flash the W9980WebGUIUpdate.bin via the webgui (or you can use the latest file).

I will make a new pre-cut image in a bit and upload it then link it here. Uncompress -1 tends to be the image didn't successfully flash over.


Updated Pre-Cut W9980.bin file, Download and replace the file in the TFTP folder. DO not try cutting the file.

https://mega.nz/#!WQlmGaJB!r_VqFAcKeA_xmBeXayIKOZ6VvGvtNrp06wxRNBuGLBo

How can you mount a .bin of this for me to record directly to the eeprom of the TD-W8970v3 using the eeprom recorder CH341A?

[ejs]

The 8970v3 is completely different hardware to the devices in this thread, and therefore cannot use the 9980 firmware.

[bala1]

I did the procedure on my TD-W8970v3 and every time I try to upgrade to the modified firmware it gives the following error: Error code: 4503 "The uploaded file was not accepted by the device"

I used the original firmwares:
TD-W8970v3_0.9.1_2.0_up_boot (160816) _2016-08-16_10.40.57.bin
it's the
TD-W9980v1_0.6.0_1.13_up_boot (160125) _2016-01-25_15.45.32.bin

Could someone help me with this?

[bala1]

The 8970v3 is completely different hardware to the devices in this thread, and therefore cannot use the 9980 firmware.

Thank you for helping me with this. Too bad that will not work for me!

[jemiq]

merhaba, bana yardımcı olur musunuz?
my device w8980 bricked.
 

Code: [Select]

ROM VER: 1.1.4
CFG 05

ROM VER: 1.1.4
CFG 05

DDR autotuning Rev 0.3ff
DDR size from 0xa0000000 - 0xa3ffffff
DDR check ok... start booting...



U-Boot 2010.06-LANTIQ-v-2.0.40-svn7369 (Jun 16 2014 - 11:12:49)

CLOCK CPU 500M RAM 250M
DRAM:  64 MiB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   Internal phy(GE) firmware version: 0x8434
vr9 Switch8192 KiB W25Q64 at 0:3 is now current device


Type "run flash_nfs" to mount root filesystem over NFS

Hit any key to stop autoboot:  0
8192 KiB W25Q64 at 0:3 is now current device
8192 KiB W25Q64 at 0:3 is now current device
        Uncompressing ... LZMA: uncompress or overwrite error 1 - must RESET board to recover