USA1 @ sbhacker.com MY FRENDS GOOD LUCK. THE SB5101 IS A FUCKING PAIN IN THE ASS. YOU MODEM WANT FLASH.

DIED YOU THINK LOOK OUT I WILL FIX YOUR DIED MODEM SB5101! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! THIS IS WHY WHY YOUR MODEMS IS DIED. YOU NEED verifY verifYYOU NEED verifY verifY YOU NEED verifY verifY YOU NEED ver ifY verifY YOU NEED verifY verifY YOU NEED verifY verifY YOU NEED verifY verifY .......................................... THE SB5101 WORKS FOR ME. ALL SB5101 WORKING bin 2 STOCK , ALL HAXORWARE, & 1 GOOD AMBIT 250 2MB FULL FLA SH ! ! ! TESTED ! ! ! There all 2 MB DUMP they all work for me. I am going nuts & nuts 24/7... If you just want to (FIX)<>(UPDATE)<>(TURN YOUR DIED MODEM SB5101 NO) HERE IS HOW. TO THE SBHACKER. I KNOW THE SB5101 HAVE A LOT OF FUCKUPS LIKE,(THE MAC GOES DIED), OR (THE LIGHT GO OFF), (CAN'T FLASH YOUR CHIP). -- WHY ? WE AS. I'LL TELL YOU WHY. YOUR FLASH CHIP IS FUCK SO YOU THINK. YOU MUST CHECK THE VERIFY FOR THE FLASH TO STICK WELL DO THIS TO YOUR FUCK SB5101 DIED BRICK. DOWNLOAD THE ZIP I MADE ALL TESTED ALL WORK SO YOU DON'T GOT TO BE UP ALL NIGHT LIKE I BEEN FOR WEEKS. SO HERE IT GOSE ... YOU NEED TO READ ALL THE STEPS 1 2 3 4 5 6 7 8 9. & THE STEPS A1 A2 A3 A4 A5 AND SO ON... READ LOOK I HAVE STEP 12345... AND A1 A2 A3 A4 A5...... (STEP 1) A1 - YOU MUST restore it to its normal (virgin) state, like it was out of the box. If Your Green Lights on. You need to flash the 8MB Memory. --- METHOD 1 --Click the Flash tab Click Detect Click on The Memory tab Click on (write) Look for the 8MB bin (( Don't fuck with the offset.)) --- METHOD 2 --Click Click Click check the Flash tab Detect on The Memory tab the little box (Enable Editing)

To trun off the light FILL will ( F ) or ( 0 ) you will see the light trun off. Sometimes you need to start one more time This works. THIS IS THE WAY TO FIX YOU DIED MODEM IS FILL IT WITH FF FF FF FF FF FF FF FF FF FF FF FF FF FF OR 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2 TO 3 HOUR BUT YOUR DIED MODEM IS NOW READY TO BE FLASH WITH THE verifY ON. (( YOU MUST CHECK verifY FOR THE FLASH TO STICK. )) (( THATS WHY YOU MODEMS YOUR DIED.)) (( YOU NEED verifY )) ----------------------------------------------------(STEP 2) If verify failed You Need To Start all over. !!MUST!! To do this you restore your 2MB backup. After your modem is in virgin state you can flash with parallel Blackcat: 120 or 128 A2- Hook JTAG to sb5101. A3- Open up Blackcat Schwarze 120 or 128. (I use the 120, I like the older one.) A4- Detect Flash. A5- check verify written data --------------LOOK ((YOU MUST CHECK THE VERIFY FOR THE FLASH TO STICK.)) A6- Go to Flash tab, Write All A7- Flash SB5101- FUll 2MB BIOS.bin, once its done. LOOK!!! HOW IT DONE FOR STOCK. ((If You What To Check The Stock bin reboot the modem.)) (STEP 3) HOW IT DONE FOR HAXORWARE. (( Reset Blackcat Schwarze only NOT THE MODEM NOT NOW!!!)) HOW IT DONE FOR HAXORWARE. ((SKIP THIS A8,A9,& A10 NOW FOR HAXORWARE!! )) A8- After it finishes flashing, disconnect jtag then connect the modem to ethern et and coax. Let it synch up(wallgarden) READ READ READ READ -----------LOOK

A9- After it synches, disconnect ethernet and coax A10- Conenct jtag, open up shwarze again and detect flash, uncheck verify writte n data HOW IT DONE FOR HAXORWARE. (( Reset Blackcat Schwarze only NOT THE MODEM NOT NOW!!!)) ((NOW FOR ALL THE HAXORWARE.)) (STEP 4) I USED hacked_5101_bootloader.bin THEN (( Reset Blackcat Schwarze only NOT THE MODEM NOT NOW!!!)) DO THE haxorware091.bin A11- hacked_5101_bootloader.bin A12- haxorware091.bin ((YOU MUST CHECK verifY FOR THE FLASH TO STICK.)) THATS WHY YOU MODEMS YOUR DIED. YOU NEED verifY verifYYOU NEED verifY verifY YOU NEED verifY verifY YOU NEED ver ifY verifY YOU NEED verifY verifY YOU NEED verifY verifY YOU NEED verifY verifY .......................................... A11 - Menu->Options check verify written data Click the Flash tab Click Detect --- METHOD 1 --Click the 5100 tab ON THE Blackcat Schwarze 128 Click The Littel folder bootloader Look For The hacked_5101_bootloader.bin Click Flash. Click program firmware Find and Select haxorware091.bin -------------------A11 --- METHOD 2 --Click the 5100 tab ON THE Blackcat Schwarze 120 Click The Littel folder bootloader Look For The hacked_5101_bootloader.bin Click Flash A12 - In the flash tab click write Find haxorware091.bin YOU CAN TRY ALL OF THE HAXORWARE... enter 0x10000 as offset (( DON'T FUCK WITH THE OFFSET ON THE UPPER RIGHT BEFORE YOU CHICK THE FLASH.)) After it finishes flashing, disconnect jtag REBOOT 60 SEC. Then connect the modem to ethernet. Open up Internet Explorer, go to 192.168.100.1 User: root and passwaord: admin If needed.

(( Change The Mac before you connect the modem to coax. )) verifY THE NEW MAC. Should be in the Motorola format, does not need to be official one, but the vendor ID has to match a known Motorola one, because after flashing the 5101 modem with ambit250 it is no longer a valid mac address. Some examples are: 00:17:EE:81:20:25 00:13:71:AC:52:61 Motorola Vendor ID's for MAC's which are normally used on SBmodems are: 00:0F:9F 00:13:71 00:15:9A 00:16:B5 00:17:EE 00:18:C0 NOW connect the modem to coax. COMCAST DNS IS 4.2.2.1 & 4.2.2.2 HAVE FUN!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! commands for the ambit 250 I fix it with this telnet commands: cd non-vol cd docsis enable bpi false bpi_version 0 enable bpi true write

--------------------------------------------------------------------Set custom config: cd /non-vol/docsis enable force_cfgfile true dhcp_settings [just press enter] [just press enter] [just press enter] yes 10.10.10.10 (Just change this to your server mine was 68.87.68.14) config.cfg (i used d11_m_na_c05.cm for comcast and u see my speed below!) [just press enter] [just press enter] write ---------------------------------------------------------------------

Use your TELNET program (Hyperterminal works better than the Windows CMD one). Login into your modem (192.168.100.1) Default Username is "admin" Default Password is "infinite" (USB-MAC-ADDRESS) ================= Should be in the Motorola format, does not need to be official one, but the vendor ID has to match a known Motorola one, because after flashing the 5101 modem with ambit250 it is no longer a valid mac address. Some examples are: 00:17:EE:81:20:25 00:13:71:AC:52:61 Motorola Vendor ID's for MAC's which are normally used on SBmodems are: 00:0F:9F 00:13:71 00:15:9A 00:16:B5 00:17:EE 00:18:C0 You can find more by doing a Google search on MAC Vendor ID's. The rest can be anything, but the USB normally ends in a odd digit on the SBmodems. I normally used the same MAC address as the cloned HFC one, and just change the last digit by one on the USB. The commands to change it are: cd non-vol cd halif usb_mac_address 00:17:EE:81:20:25 write This above directory is were you can also do the "annex_b" For the bpi_version go to: cd non-vol cd docsis bpi_version 0 write You can also in this directory try enabling or disabling bpi: enable bpi false or enable bpi true For the serial number, the commands are:

cd non-vol cd snmp_cm docsDevSerialNumber 150758624006379010330290 write Just make up any number which starts with either 150758 or 128103 or 125903 and is 24 digits long