here we go again for the newer mb2xx boards

teraspy Çevrimdışı

teraspy 

TFC Team
26 Kas 2018
21,358
64
As I mentioned in the Email to you and teraspy, at this moment in time I'm having a few weeks holiday, that's why I've popped up and am doing this stuff again, beginning of October I'll be back to work (I'm a professional software developer for a living) and I'll once again likely have little to no time for the projects I want to do (Like this) and only have time to work on the projects I'm paid to work on :-)

So while I have the bandwidth, I'll share what I can, allowing others to (hopefully) make bigger leaps forward
Hoşgeldin sevgili pogostick
welcome dear pogostick .I hope we all benefit from you :ok
 
hosbulduk Çevrimdışı

hosbulduk 

TFC Team
9 Kas 2018
3,721
As I mentioned in the Email to you and teraspy, at this moment in time I'm having a few weeks holiday, that's why I've popped up and am doing this stuff again, beginning of October I'll be back to work (I'm a professional software developer for a living) and I'll once again likely have little to no time for the projects I want to do (Like this) and only have time to work on the projects I'm paid to work on :-)

So while I have the bandwidth, I'll share what I can, allowing others to (hopefully) make bigger leaps forward.
thanks again last question for forum members..
Vestel produced 2 new motherboards, mb170 and mb180. In the forum it was announced that no profile files could be obtained from these mainboards. I don't know if the schematics of these motherboards have been shared on the forum, but is it possible to access the profile files with the motherboard connected to your method? Or any other idea to save the profile file to USB?
 
teraspy Çevrimdışı

teraspy 

TFC Team
26 Kas 2018
21,358
64
thanks again last question for forum members..
Vestel produced 2 new motherboards, mb170 and mb180. In the forum it was announced that no profile files could be obtained from these mainboards. I don't know if the schematics of these motherboards have been shared on the forum, but is it possible to access the profile files with the motherboard connected to your method? Or any other idea to save the profile file to USB?
Ya sevgili hosbulduk,o kadar uzman değilim gerçi yanlış mesajı alıntıladım ama olsun,elimden geleni yapıyorum,yazdım zaten kendisine "iyi bir kurcalayıcıyım" dedim :)
 
hosbulduk Çevrimdışı

hosbulduk 

TFC Team
9 Kas 2018
3,721
Ya sevgili hosbulduk,o kadar uzman değilim gerçi yanlış mesajı alıntıladım ama olsun,elimden geleni yapıyorum,yazdım zaten kendisine "iyi bir kurcalayıcıyım" dedim :)
kendinizi kücük görmeyin adamin arsivinde sizin dosyaniz kayitli sizde gördünüz...Umarim bu kisiden forum adina gerekli katkiyi alabilirsiniz,tommyden alamadik cünki..
iyi forumlar...
 
teraspy Çevrimdışı

teraspy 

TFC Team
26 Kas 2018
21,358
64
P pogostick , I bought cp2021 but unfortunately it broke immediately, I tried it once, I couldn't use it again, it was garbage.
I have ftdi usb to rs232 and pl 2303 usb to rs232. But my wife doesn't want me to mess with it anymore :)

CP 2021

cp1.jpg

cp2.jpg
 
P Çevrimdışı

pogostick

Yeni Üye
7 Şub 2020
20
17
P pogostick , I bought cp2021 but unfortunately it broke immediately, I tried it once, I couldn't use it again, it was garbage.
I have ftdi usb to rs232 and pl 2303 usb to rs232. But my wife doesn't want me to mess with it anymore :)

CP 2021

cp1.jpg

cp2.jpg

Yes, unfortunately wife's are like that :-)

The story of how I have the MB110 to myself to experiment with is a simple one. I had already done my research and I knew I could buy a new main board for it for cheap money, at the time my wife was looking at new TV's, so I arranged for the old one to have an accident, which stopped it working :-)

We then bought a new TV (The MB130T 55") which now sit's in our living room. I said I might have a look to see if I can fix the MB110, but if not we need a new one for bedroom too, so the MB211 was purchased (32" version of the MB130T - both Toshiba) , then when my wife realized how good the big tv in the living room was she said "Not interested in the bedroom one", and I fixed the first one, so now I have an MB110 and an MB211 that are basically mine to play with as I see fit :-)

There is however plenty you can do with the Vestel TV without ever hacking into it, once you understand the software and how it works, I'll start a new thread for that one though rather than abusing this one....
 
teraspy Çevrimdışı

teraspy 

TFC Team
26 Kas 2018
21,358
64
Yes, unfortunately wife's are like that :-)

The story of how I have the MB110 to myself to experiment with is a simple one. I had already done my research and I knew I could buy a new main board for it for cheap money, at the time my wife was looking at new TV's, so I arranged for the old one to have an accident, which stopped it working :-)

We then bought a new TV (The MB130T 55") which now sit's in our living room. I said I might have a look to see if I can fix the MB110, but if not we need a new one for bedroom too, so the MB211 was purchased (32" version of the MB130T - both Toshiba) , then when my wife realized how good the big tv in the living room was she said "Not interested in the bedroom one", and I fixed the first one, so now I have an MB110 and an MB211 that are basically mine to play with as I see fit :-)

There is however plenty you can do with the Vestel TV without ever hacking into it, once you understand the software and how it works, I'll start a new thread for that one though rather than abusing this one....
Ours is not hacking it's playing with software of tv :hihi
 
teraspy Çevrimdışı

teraspy 

TFC Team
26 Kas 2018
21,358
64
P pogostick ,
 
P Çevrimdışı

pogostick

Yeni Üye
7 Şub 2020
20
17
Ours is not hacking it's playing with software of tv :hihi
ha ha, well I better get writing then :-)
ha ha, well I better get writing then :-)
All our Vestel Smart TV's support at least version 2 of this:

But it's difficult to find detailed info that makes sense on the specifications, as too many greedy companies, want to keep things to them selves to make money.

Documents are available in the resource library : but they are so very, very, very difficult to read and understand, like wading through chocolate.

The absolute most simple web page application you can create using HbbTV is this:

imagefa3abfb524ca0394.png


Loading this web-page to the TV set will play the current broadcast input full screen, it's the same call that the smart portal uses to put a mini TV picture next to your app selections when choosing which apps to load.

Unfortunately, if you put it on a web server, then try to open "browser" and load it that way, it will not work.

When opening regular browser on the TV, HbbTV api is not enabled, instead you have to get the TV smart portal to load it, IE: via an icon in the portal.

On the MB110 this is actually loaded direct from the internet at other boards use different addresses, my MB211 for example loads it's software from " ", and as that does not actually have an internet launch button, I had to hijack one of the "app icons" on the TV's standard App menu to load on that one.

I learned a lot of this from the codes I got from the older portaltv.tv, it's all behind a password screen, but I observed using a network sniffer how my MB110 TV logged in without using a password, and I wrote a small tool called "vestelget" that emulates that, then I could use

vestelget

to download that file, and other files that only the TV knows how to get.

By downloading all these files, and examining the programming codes in them, I learned all the HbbTV api calls and how to use them to create HTML applications that run on my Vestel TV's
I also started to write a customised web browser for windows, so I could write and develop HbbTV web applications directly on MY PC and test them before putting them on my TV set.

If your interested, you can find the source code for the project here:


I've never had time to do much work on it, beyond getting it to implement the main video API's , so it's still very much in an unfinished state but it does show you how to implement the programmers interface for HbbTV, so that you could emulate a Vestel TV on the PC if desired.
 
Son düzenleme:
P Çevrimdışı

pogostick

Yeni Üye
7 Şub 2020
20
17
Ok, so I've finally found the documents I was looking for.

I'm sure that by now MOST of you here are familiar with the now well known hack on older vestel TV's that's used to get a telnet or ftp running.

It's the hack that allows T TommyData 's toolbox to get you a linux command line, as root on your TV set.

If you don't know what I'm on about, then I'm on about this:


image76f7720939b74dd5.png


If you need help with that part, there are others on here that can explain it much better than I, such as @terraspy

What you MIGHT NOT be aware of however, is that the port used for the telnet hack, is actually for an altogether different purpose originally.

Many of vestel's TV displays are produced for the "digital signage" market, such as those big TV style menu displays in your favourite takeaway food shop, or timetables in the railway station.

The port used to enable these is the port that was exploited to get telnet, and which is now known to have that flaw fixed on the MB2xx series and higher.

That does not mean we cannot still use it though, originally it was discovered as being left open on some TV's and this report



Was the first one to highlight the flaws.

one of the first commands I discovered was "GETVOLUME"

image0fda07e826b1d5b7.png


and there are many others too, most of the common ones are described in this user guide:



Of course, if the port number 1986 is NOT open on your TV what can you do?

Well all might NOT be lost.

Some of the commands not listed in the guide I link above are called "PROFILE COMMANDS", the profile in the binary files you can get by putting "DownloadProfileMBxxx" files on a USB key and performing "usb operations" from the service menu.

When we do this service menu command, we only get 3 profile files, "hardware_profile", "software_profile" and "langauge_profile", but there is also a fourth one that our TV sets understand, called a "dev_profile" too.

These are the profile commands known on the port 1986

image275a607c5f58c3b8.png


If you have the port 1986 open, and have connected to it using a terminal program such as putty as I have, you can issue a "PRINTDEVPROFILE" command, which should look something like the following:

image29ada600bc754ece.png


The setting you need to be looking at is this one:

imageb317e6ff1c69d209.png


When "Testtool Socket" is enabled, then port 1986 becomes open, and you can issue remote commands to control your TV from your PC, the question is though how can you tell if it's enabled or not, if the port is not open (It's a chicken and egg scenario), what you need is a copy of the "Vestel Profile Composer"

This tool made by vestel is used to create the profiles for TV set's in the first place.

I have given a copy to @terraspy via email, so he can put it somewhere such as this forum, I can upload documents and pictures but EXE files I appear to be not allowed...

When you have the "Profile Composer" tool, you need to make a profile that looks like the following:

imagebc64fb7a5c79f928.png


Then when you are finished, click the "build" button to build your profile

image8f9586f5ea838644.png


If you have done this properly, then you should have a new profile file in your disk like so:

imagea07a3c2199272860.png


If you have a different name, it has to be named "mbxxx_devprofile.bin" replacing xxx with the board name you get from your 4725 service menu.

You then place that on a blank usb key on it's own, with only other profiles and NO "download...." files, then perform a USB operations from your service menu as you would for any other profile update.

Hard power cycle the TV by the wall plug, and then if all has success when you power your TV back on and look at the network ports on it, the port 1986 should show as open.

image84b6a12176d2da2c.png


After this, you can open the port 1986 in raw mode using putty:

imagede2c6549407c70e5.png


and start sending commands to your TV set.

if you have NOT had this port open before, and have an older board in the MB1xx range, then opening this port may also allow you to use the tommy data app to get telnet and ftp so you can steal all the files from your TV.

Finally, I do know of another way to run these commands, but it involves writing a web page file with javascript, so I'll add those instructions another day.
 
Son düzenleme:
teraspy Çevrimdışı

teraspy 

TFC Team
26 Kas 2018
21,358
64
How to make a full profile with profile composer, I guess it's not enough to do just one operation.You can compress and send exe files with zip or rar. :ok
Which cards have telnet enabled? Like "mb2xx" for example ,or mb140 > :alala
 
Son düzenleme:
P Çevrimdışı

pogostick

Yeni Üye
7 Şub 2020
20
17
How to make a full profile with profile composer, I guess it's not enough to do just one operation.You can compress and send exe files with zip or rar. :ok
Which cards have telnet enabled? Like "mb2xx" for example ,or mb140 > :alala
It is enough to just make the one entry in profile composer, the picture I shared above showing the profile composer screen, is all that was needed to make a dev profile file. You do not need swprofile, hwprofile and language profile all of the time.

All you have to remember is the name is correct, so for MB110 it's "mb110_devprofile.bin", when "usb operations" is activated from the 4725 menu on the TV set, the and there are NO FILES called "DownloadProfileMBxxx" on the usb drive, the TV software will look for the following files:

mbxxx_hwprofile.bin
mbxxx_swprofile.bin
mbxxx_langprofile.bin
mbxxx_devprofile.bin

If any of these files are found on the USB, the TV software will read them, and apply the settings in them to the TV configuration, but will NOT change anything that is not mentioned in the file.

So if you have "devprofile" with ONLY "TesttoolSocket" option inside of it, then that is the ONLY dev profile option that will be changed, everything else will remain at current setting.

So NO you don't need to make a full profile just to change one thing, BUT you DO NEED to make sure you put the setting in the correct file. You cannot put "swprofile" settings in "devprofile" for example, if you do the setting will be ignored.

-----------

I don't have a button on my post editor to add an exe file only an image or a document, so for those who want the profile composer tool, here it is:



Making a new profile is easy, just open the application:

image7015a9e4f9534b3d.png


Then click "New"

image194c9597072ee50e.png


and you'll see 3 new nodes appear.

If you expand them by clicking the + symbols:

image5c3935f3da99b080.png


You will see that there are some defaults for you to start with.

You can add/remove items from the profile by right clicking on them

imagecfdf4402fbe28860.png


and you can add new values and data by clicking in the right window

imagedb8ee4cc68043499.png


If you get an error about "default.xml" when you click "New"

image5c9a87b97b0ab28f.png


Simply exit the program, then copy the file "Profile_V0.4.10.xml"

image44cd9ddc04e89a5c.png


as "default.xml"

imagebd09876785753922.png


Then run the program once more.

Time for me to sleep now.... :-)
 
teraspy Çevrimdışı

teraspy 

TFC Team
26 Kas 2018
21,358
64
It is enough to just make the one entry in profile composer, the picture I shared above showing the profile composer screen, is all that was needed to make a dev profile file. You do not need swprofile, hwprofile and language profile all of the time.

All you have to remember is the name is correct, so for MB110 it's "mb110_devprofile.bin", when "usb operations" is activated from the 4725 menu on the TV set, the and there are NO FILES called "DownloadProfileMBxxx" on the usb drive, the TV software will look for the following files:

mbxxx_hwprofile.bin
mbxxx_swprofile.bin
mbxxx_langprofile.bin
mbxxx_devprofile.bin

If any of these files are found on the USB, the TV software will read them, and apply the settings in them to the TV configuration, but will NOT change anything that is not mentioned in the file.

So if you have "devprofile" with ONLY "TesttoolSocket" option inside of it, then that is the ONLY dev profile option that will be changed, everything else will remain at current setting.

So NO you don't need to make a full profile just to change one thing, BUT you DO NEED to make sure you put the setting in the correct file. You cannot put "swprofile" settings in "devprofile" for example, if you do the setting will be ignored.

-----------

I don't have a button on my post editor to add an exe file only an image or a document, so for those who want the profile composer tool, here it is:



Making a new profile is easy, just open the application:



Then click "New"



and you'll see 3 new nodes appear.

If you expand them by clicking the + symbols:



You will see that there are some defaults for you to start with.

You can add/remove items from the profile by right clicking on them



and you can add new values and data by clicking in the right window



If you get an error about "default.xml" when you click "New"



Simply exit the program, then copy the file "Profile_V0.4.10.xml"



as "default.xml"



Then run the program once more.

Time for me to sleep now.... :-)

Hmm thank you ,I wonder what year is your composer, 2019 for me,Is it a new version :alala And I run away too, I'm sleepy too :hihi

alodan-81.png
 
Geri
Üst Alt