Page 1 of 1

Brute forcing the Toon1 R10 uboot password

Posted: Wed Jul 31, 2019 6:32 pm
by TheHogNL
Dear members,

A request to you all who want to help with brute forcing the uboot password for the R10 uboot in the Toon 1.

Currently we still have to use the JTAG method to get into these toons but recently we found the SHA256 hash for this R10 uboot. It would be very nice if we could figure out what the password is so that we don't need the JTAG methode anymore

But we need to brute force it. Calculating SHA256 hashes isn't that hard anymore and we already did a lot of brute forcing but didn't find the right combination of letters, digits and special characters yet.

Therefore we need your help. If your have a pc with a fast GPU and would like to help, please PM me or respond below in this topic. I will then get in contact with you how you can help. A PC with fast CPU's can also help but remind that CPU's are never as fast as a good GPU for calculating SHA256 hashes. But then again, every little thing helps.

Re: Brute forcing the Toon1 R10 uboot password

Posted: Thu Aug 08, 2019 5:09 pm
by Daniel
Are there min specs you could use?

Re: Brute forcing the Toon1 R10 uboot password

Posted: Thu Aug 08, 2019 7:18 pm
by TheHogNL
a mid-range gpu (gtx 900 series) is the minimal I guess

Re: Brute forcing the Toon1 R10 uboot password

Posted: Fri Aug 09, 2019 12:09 am
by Templar
Is it a distributed computing effort? Anyhow, I've got a GeForce GTX 1060 6GB.

Re: Brute forcing the Toon1 R10 uboot password

Posted: Fri Aug 09, 2019 7:52 am
by TheHogNL
Yes. Your client will get chunks of 10 mins to compute. If you like you can join.

On a linux/windows system you first need to install python3 and install some python modules. You will then need to download the client (http://qutility.nl/hashtopolis/src/agen ... download=1
) and run it with python.

A 1060 will add about 1000 Giga Hashes per second compute power. We are currently doing somewhere between 10 and 20 GH/s

Re: Brute forcing the Toon1 R10 uboot password

Posted: Sat Aug 10, 2019 5:04 pm
by Templar
TheHogNL wrote:Yes. Your client will get chunks of 10 mins to compute. If you like you can join.

On a linux/windows system you first need to install python3 and install some python modules. You will then need to download the client (http://qutility.nl/hashtopolis/src/agen ... download=1
) and run it with python.
Okay, I installed Python and the Hashtopolis client and want to join.

Re: Brute forcing the Toon1 R10 uboot password

Posted: Sat Aug 10, 2019 9:21 pm
by TheHogNL
Ok now just start the hashtopolis client with "python hashtopolis.zip" and point to server URL http://qutility.nl/hashtopolis/src/api/server.php

I will also (PM) send you a 'voucher' which you will need to connect your client after it asks for that url.

Re: Brute forcing the Toon1 R10 uboot password

Posted: Sat Aug 10, 2019 11:34 pm
by Templar
TheHogNL wrote:Ok now just start the hashtopolis client with "python hashtopolis.zip" and point to server URL http://qutility.nl/hashtopolis/src/api/server.php

I will also (PM) send you a 'voucher' which you will need to connect your client after it asks for that url.
It works! It's doing about 1,10 GH/s

Re: Brute forcing the Toon1 R10 uboot password

Posted: Mon Sep 16, 2019 9:44 am
by finalcut62
Happy to join - can run it on my office computer 24 hrs if needed...

Re: Brute forcing the Toon1 R10 uboot password

Posted: Sun Sep 22, 2019 9:52 pm
by TerrorSource
finalcut62 wrote:Happy to join - can run it on my office computer 24 hrs if needed...
Please send me a PM :)

Re: Brute forcing the Toon1 R10 uboot password

Posted: Fri Oct 11, 2019 11:37 am
by Blacky's Boss
Any luck yet? Just curious....

Re: Brute forcing the Toon1 R10 uboot password

Posted: Fri Oct 11, 2019 12:58 pm
by TheHogNL
No we kinda stopped as it seems that the password is to complext to brute force :-(
So it is still necessary to use the toonrooter/openocd with these uboot toon1's.

Re: Brute forcing the Toon1 R10 uboot password

Posted: Tue Oct 15, 2019 10:32 am
by Blacky's Boss
Crap. However, I've rooted 6 Toon1's, and not one of them was an R10.

Re: Brute forcing the Toon1 R10 uboot password

Posted: Tue Oct 15, 2019 11:32 am
by TheHogNL
Then you where lucky :-) However using the ToonRooter is so easy that even a R10 doesn't give any problems (just need to connect a few more cables,..)