Help flashed Asus FW to R8000, now bricked

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page 1, 2, 3  Next
Author Message
pusinato
DD-WRT Novice


Joined: 25 Nov 2018
Posts: 2

PostPosted: Sun Nov 25, 2018 17:41    Post subject: Help flashed Asus FW to R8000, now bricked Reply with quote
A Bad Flash to koolshare on the netgear r8000, attached the serial cable and info as below, the router has been power on 12 hours, pressed and hold the wps, reset but it wont go futher in, also ctrl C didn´t work, is there a way to use the jtag with openocd or some other way to recover it ?


CFE version 7.14.43.40 (r527781) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Fri Aug 11 08:07:07 CST 2017 (defjovi@ubuntu-eva01)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
DDR Clock: 400 MHz
Info: DDR frequency set from clkfreq=1000,*800*
Warning: invalid DDR setting of 800 MHz ignored. DDR frequency will be set to 400 MHz.
CPU type 0x0: 1000MHz
Tot mem: 262144 KBytes

CFE mem: 0x00F00000 - 0x017A7270 (9073264)
Data: 0x00F4F834 - 0x00F4FD74 (1344)
BSS: 0x00F4FD80 - 0x00FA5270 (349424)
Heap: 0x00FA5270 - 0x017A5270 (8388608)
Stack: 0x017A5270 - 0x017A7270 (8192)
Text: 0x00F00000 - 0x00F45D7C (286076)

Committing NVRAM...done
Waiting for wps button release...
Sponsor
deslatha
DD-WRT User


Joined: 12 Jul 2016
Posts: 190

PostPosted: Tue Nov 27, 2018 11:20    Post subject: Reply with quote
Koolshare cfe or fw setting wps button=gpio7 compare to Netgear cfe or fw setting wps button=gpio14.

Instead hold ctrl+C,replace data=0×03 in hex may push router into cfe prompt command.

Or you can search r8000 led which connect to gpio 7 and pull up to 3.3v leading wps button deactivate.
pusinato
DD-WRT Novice


Joined: 25 Nov 2018
Posts: 2

PostPosted: Tue Nov 27, 2018 13:10    Post subject: Reply with quote
flashed with koolshare, so suppose its the FW
so use putty and press CTRL+C when power on and replace data=0×03 in hex
can you explain little more about how to

Or you can search r8000 led which connect to gpio 7 and pull up to 3.3v leading wps button deactivate.

thanks
@m0eb@
DD-WRT User


Joined: 26 Dec 2015
Posts: 283

PostPosted: Tue Nov 27, 2018 14:42    Post subject: Reply with quote
...blinking once per second? Able to ping the router?

Try using nmrpflash to get back to normalcy. Flash to Netgear firmware and get back to dd-wrt after that

https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=1139019#1139019

_________________
PROFESSIONAL STUDENT
my.Mistakes my.Learning ... provided I have the patience & persistence to learn
deslatha
DD-WRT User


Joined: 12 Jul 2016
Posts: 190

PostPosted: Tue Nov 27, 2018 15:37    Post subject: Reply with quote
Base on your router log :https://www.snbforums.com/threads/rt-ac86u-very-easy-to-brick.45019/
Build Date: Fri Aug 11 08:07:07 CST 2017 (defjovi@ubuntu-eva01)
You may flash a mod fw which origin coming from Asus rt-ac86 which hardware build in 512 MB instead 256 MB memory of r8000.

You may try to short 2 pins 8&9 of nand (RE# & CE#) or pin 16&17 (CLE & ALE) to fool router that fw was corrupted and force them to tftp download new fw before get further unbricked.

Notice: here the Dts of OEM r8000
wps {
label = "WPS";
linux,code = <KEY_WPS_BUTTON>;
gpios = <&chipcommon 14 GPIO_ACTIVE_LOW
https://github.com/linux4sam/linux-at91/blob/master/arch/arm/boot
Dr_K
DD-WRT User


Joined: 23 Mar 2018
Posts: 442

PostPosted: Tue Nov 27, 2018 15:57    Post subject: Reply with quote
Hey!!!! What in the F#€k just happened???

Did one of our last standing moderators..."edited out of fear"...just totaly and permanently delete a post of theirs in this thread that had potential misinformation?

That was indirectly pointed out by a member that they have talked down apon in the past.

Just because he/she has an extremely poor choice of translators does not mean they don't know anything...obviously.

Should this really be allowed? Even for a moderator? Is this the first time?

Everyone else has to admit to an error, give credit where it is due, edit their post or let it ride and hope no one notices.

Well it's been fun hear while it lasted.....pretty sure I'm going to be banded.....for some unknown reason of course...although since this thread has less than 100 views maybe I'll just be deemed delusional,

_________________
Location 1
R6300V2- DD-WRT v3.0-r39345M kongac (04-03-19) Gateway
WNDR3400v1 DD-WRT.v3.0-r35531_mega-nv64k (03/26/18 ) Access Point
WRT160Nv3 DD-WRT ?v3?.0-r35531 mini (03/26/18 ) Access Point
WRT54GSv5 DD-WRT v24-r33555_micro_generic (10/20/17) Repeater
Location 2
R6300V2- DD-WRT v3.0-r39345M kongac (04/03/19) Gateway
R6300V2- DD-WRT v3.0-r39345M kongac (04/03/19) Access Point
WNDR3700v2 DD-WRT v3.0-r35531 std (03/26/18 ) Access Point
E1200 v2 DD-WRT v3.0-r35531 mega-nv64k (03/26/18 ) Gateway(for trivial reasons)
2 devices: SXT 5 ac (mipsbe) RB 6.46.4 (2/21/20) PTP Bridge (0.8km/0.5mi)tx/rx866.6Mbps-1GbpsLAN


Thank You BrainSlayer & <Kong> for ALL that you do & have done, also to "most" everyone here that shares their knowledge
deslatha
DD-WRT User


Joined: 12 Jul 2016
Posts: 190

PostPosted: Tue Nov 27, 2018 16:24    Post subject: Reply with quote
Ctrl+C is a indirect command tell cfe in text to break loading fw.

0x03 hex is a direct command stop at cfe prompt.

Putty software set default data as text.

Most recently Asus fw which hidden some cfe with embedded counter measure that fw do able detect none-supported-asus-merlin router and then auto flash any new update cfe which may bricked your router.

Base on your router log , OEM cfe of r8000 should be cfe.. foxcon.. R8000.


Last edited by deslatha on Tue Nov 27, 2018 16:36; edited 1 time in total
<Kong>
DD-WRT Guru


Joined: 15 Dec 2010
Posts: 4339
Location: Germany

PostPosted: Tue Nov 27, 2018 16:30    Post subject: Reply with quote
This thread should be deleted entirely. For a lot of people this thread is misleading. You can't immediately tell that this bricking issue has nothing to do with dd-wrt, but with the fact, that someone flashed a asus fw clone.

Or just change the subject to:

Help flashed Asus FW to R8000, now bricked.

_________________
KONG PB's: http://www.desipro.de/ddwrt/
KONG Info: http://tips.desipro.de/
deslatha
DD-WRT User


Joined: 12 Jul 2016
Posts: 190

PostPosted: Tue Nov 27, 2018 16:40    Post subject: Reply with quote
<Kong> wrote:
This thread should be deleted entirely. For a lot of people this thread is misleading. You can't immediately tell that this bricking issue has nothing to do with dd-wrt, but with the fact, that someone flashed a asus fw clone.

Or just change the subject to:

Help flashed Asus FW to R8000, now bricked.


Kong is right.

Someone should reconcile help thread before accusing and cry out.
Malachi
DD-WRT Guru


Joined: 17 Jul 2012
Posts: 7221
Location: Columbus, Ohio

PostPosted: Tue Nov 27, 2018 17:08    Post subject: Reply with quote
Dr_K wrote:
Hey!!!! What in the F#€k just happened???

Did one of our last standing moderators..."edited out of fear"...just totaly and permanently delete a post of theirs in this thread that had potential misinformation?

That was indirectly pointed out by a member that they have talked down apon in the past.

Just because he/she has an extremely poor choice of translators does not mean they don't know anything...obviously.

Should this really be allowed? Even for a moderator? Is this the first time?

Everyone else has to admit to an error, give credit where it is due, edit their post or let it ride and hope no one notices.

Well it's been fun hear while it lasted.....pretty sure I'm going to be banded.....for some unknown reason of course...although since this thread has less than 100 views maybe I'll just be deemed delusional,


Relax. I deleted my own posts saying “waiting for reset button release” can’t be fixed.
I read the post to quick and later noticed he said “wps” and not reset.

I’ve never talked down to deslatha. All I’ve ever said is that I often can’t understand his English or google translate. Whatever.

I’ll only delete a post other than mine if members resort to name calling each other or if it’s spam.

_________________
I am far from a guru, I'm barely a novice.
buddee
DD-WRT Guru


Joined: 06 Feb 2010
Posts: 7401
Location: Little Rock

PostPosted: Tue Nov 27, 2018 18:20    Post subject: Reply with quote
Dr_K wrote:
Hey!!!! What in the F#€k just happened???

Did one of our last standing moderators...


Perish the thought. 😃
Malachi
DD-WRT Guru


Joined: 17 Jul 2012
Posts: 7221
Location: Columbus, Ohio

PostPosted: Tue Nov 27, 2018 18:31    Post subject: Reply with quote
buddee wrote:
Dr_K wrote:
Hey!!!! What in the F#€k just happened???

Did one of our last standing moderators...


Perish the thought. 😃


Lol are you the reason I’m getting blamed?

_________________
I am far from a guru, I'm barely a novice.
Malachi
DD-WRT Guru


Joined: 17 Jul 2012
Posts: 7221
Location: Columbus, Ohio

PostPosted: Tue Nov 27, 2018 18:34    Post subject: Reply with quote
I thought you were gone for good buddee. Disregard and recent post I might have made that involved you. 😬
_________________
I am far from a guru, I'm barely a novice.
Galactus
DD-WRT Novice


Joined: 22 Oct 2019
Posts: 14

PostPosted: Tue Oct 22, 2019 13:45    Post subject: Re: Help flashed Asus FW to R8000, now bricked Reply with quote
Hello all,

I unfortunately have done exactly the same mistake and bricked my router with the same issue as the thread creator above.

If there is anyone who could kindly pass on any hints, clues, fixes to try and help me resolve this please?

Committing NVRAM...done
Waiting for wps button release...[/quote]

I did find magnetron1.1 kindly provided a detailed teardown of this router here https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=905204#905204

I stupidly read this reddit thread without reading the last comments which is how I bricked my router.

https://www.reddit.com/r/HomeNetworking/comments/7yryoi/nighthawk_x6_r8000_flash_to_asuswrtmerlin/

My serial connection shows the same log as the top of this thread with Control C not working and the dreaded WPS button is waiting to be released.

Ethernet ports link but no active services/protocols running using wireshark I think.

Cheers
Galactus
DD-WRT Novice


Joined: 22 Oct 2019
Posts: 14

PostPosted: Mon Oct 28, 2019 14:13    Post subject: Nand Pin Configuration for R8000 Router - NAND MX30LF1G08AA Reply with quote
Found a Nand pin configuration for the router on page 6 of the PDF linked here.

Hopefully stepping closer to unbricking this.

https://www.macronix.com/Lists/Datasheet/Attachments/6851/MX30LF1G08AA,%203V,%201Gb,%20v1.5.pdf



MX30LF1G08AA, 3V, 1Gb, v1.5.pdf
 Description:

Download
 Filename:  MX30LF1G08AA, 3V, 1Gb, v1.5.pdf
 Filesize:  754.47 KB
 Downloaded:  46 Time(s)

Goto page 1, 2, 3  Next Display posts from previous:    Page 1 of 3
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum