IBM thinkpad t61 bios hacking

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • witek
    Newbie
    • Mar 2013
    • 1

    #31
    Does anybody know if s08 from R400 is good for R61 ?

    I have working R400, but is it worth disassembly to read eeprom and write it to R61 ?

    Comment

    • Widisgudd
      Newbie
      • Mar 2013
      • 1

      #32
      Are passwords in a r400 TCPA protected?

      Hi to all. I have a r400 model 7439-bd9. Before doing anything I would like to know if the SVP for this TP is TCPA protected. Thanks.

      Comment

      • ferretuk
        Member
        • Nov 2008
        • 48

        #33
        There is a chap on ebay who will sell you a bios chip you tell him your model he sends you the chip you solder it in and it works

        Comment

        • babina
          Newbie
          • Apr 2013
          • 1

          #34
          hello, i have Lenovo T61, dumped eeprom and now i need patch and write back, is avaiable patcher for this?must be patched invidualy eeprom or patched eeprom is universal??thanks

          Comment

          • pckolev
            Newbie
            • Jun 2012
            • 5

            #35
            Hey, who wants to send bin file read by eeprom I'll fix it and return it by mail this is my mail


            No emails please
            Last edited by PremierD; 4 May, 2013, 18:41.

            Comment

            • largi
              Newbie
              • Feb 2014
              • 1

              #36
              Anyone have some details on how to modify an eeprom dump correctly?

              Comment

              • amourh59
                Member
                • Feb 2012
                • 71

                #37
                password bios ibm T400

                hello , i ahve a IBM T400
                I have password , i have read the eeprom and i decode dump with ibm pass 2.1 lite
                the password is in the line 0x330
                i have founde somme like thiS : F 9f Y
                I TRY THIS PASSWORD MANY TIMES but it's not word

                can you help me please ?
                this is the dump :

                Comment

                • rithien
                  Newbie
                  • Feb 2013
                  • 13

                  #38
                  Originally posted by amourh59
                  hello , i ahve a IBM T400
                  I have password , i have read the eeprom and i decode dump with ibm pass 2.1 lite
                  the password is in the line 0x330
                  i have founde somme like thiS : F 9f Y
                  I TRY THIS PASSWORD MANY TIMES but it's not word

                  can you help me please ?
                  this is the dump :
                  [ATTACH]270430[/ATTACH][ATTACH]270430[/ATTACH][ATTACH]270430[/ATTACH]
                  Your file doesn't have plain password. If long passwords is enabled only password hash is stored in eeprom memory
                  Write attachment to memory and your password will be 1234567
                  ibm_pass1234567.rar

                  Comment

                  • amourh59
                    Member
                    • Feb 2012
                    • 71

                    #39
                    GREAT THANKS rithien
                    IT'S WORK

                    Comment

                    • jjjj72
                      Newbie
                      • Aug 2014
                      • 1

                      #40
                      I am able to read my eprom from T500 using simple i2cprog connector but password has funny looking characters.
                      I edited bin file with with password 123457 but when I try to use w24rf08 to rewrite eprom. The program shows error "unable to open source file". Please help

                      Comment

                      • rithien
                        Newbie
                        • Feb 2013
                        • 13

                        #41
                        Originally posted by jjjj72
                        I am able to read my eprom from T500 using simple i2cprog connector but password has funny looking characters.
                        I edited bin file with with password 123457 but when I try to use w24rf08 to rewrite eprom. The program shows error "unable to open source file". Please help
                        Ponyprog doesn't read correctly 24rf08
                        As I remember all eeprom pages is doubled.
                        Send me your dump to: bios(at)biospassword.eu

                        Comment

                        • JoeeC
                          Newbie
                          • Sep 2014
                          • 1

                          #42
                          Hey, Hey,

                          same on my T400: w24rf08 say "unable to open source file" even if I just try to unlock with the /P switch.

                          Can I use the previous posted hex file ibm_1234567.bin or do I need a special one?

                          Here is my eeprom dump:
                          eep.zip


                          Greetz from Oktoberfest ;-)

                          Comment

                          • AndromedaC
                            Newbie
                            • Nov 2014
                            • 5

                            #43
                            @Rithien - you are a legend:-)!

                            I was about to send my eeprom dump to allservice.ro, when I came across this thread.
                            I had already tried inserting ff into 0x338 to 0x33f, and 0x340 to 0x347. when I uploaded using w24rf08, the laptop entered the bios with a simple 'enter', but NONE of the features were editable at all.
                            I had also tried changing the data to a name(i.e. david) but that gave a 170 error-bad SVP checksum.

                            Finally I cut and pasted your code from 0x338 - 0x33f and 0x340 - 0x347 to the same place in my dump, uploaded with w24rf08 and bingo! The SVP was 1234567!

                            My laptop is an R500 BTW

                            Comment

                            • AndromedaC
                              Newbie
                              • Nov 2014
                              • 5

                              #44
                              @JoeeC

                              I have edited your uploaded eeprom to add the 1234567 password, see attached?
                              eep.zip

                              Comment

                              • onkeltom
                                Newbie
                                • Nov 2014
                                • 2

                                #45
                                Hi,

                                i read eeprom from my T61 with simple-i2cprog and USB to serial converter.
                                But when I open dump file with ibmpass the line 0x330 shows something like f `,
                                I can't enter it as SVP. Or is the SVP set with other keyboard layout? My keyboard layout is german.
                                Please tell me what to do. Any hints?
                                Please see attached dump.
                                dump_t61.zip

                                Greetings,
                                onkeltom
                                Last edited by onkeltom; 5 November, 2014, 00:32.

                                Comment

                                Working...